Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa
File:                     4C6227D2B69B11EFA181E00AC4F9AE02.roa (raw, json)
Hash identifier:          nJvpana4kulWgfMWn8Ke1ZkiWP+ZraOaHP2EjEVXLI8=
Subject key identifier:   8F:76:89:B6:73:CA:35:63:EF:05:FE:EA:94:7F:45:A5:AF:CB:C8:0B
Certificate issuer:       /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial:       1512
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa
Signing time:             Thu 02 Jul 2026 17:17:48 +0000
ROA not before:           Thu 02 Jul 2026 17:17:48 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137899
IP address blocks:        103.106.188.0/22 maxlen: 24
                          103.116.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
                          rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5394 (0x1512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
        Validity
            Not Before: Jul  2 17:17:48 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a469d3c-09d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:14:eb:de:97:08:43:c7:96:73:b5:27:b4:de:
                    ff:cf:b9:b3:bf:c2:24:c8:31:5e:fd:c9:ac:ac:08:
                    5e:0d:54:fb:0b:97:06:04:f2:4f:e4:ac:e2:70:a7:
                    8d:43:4f:1b:b1:a8:a8:55:6f:6b:dd:16:d1:09:e7:
                    56:da:16:b3:95:f8:f7:56:78:37:38:e9:3c:1e:df:
                    58:d0:26:ae:5a:a7:aa:b4:5d:d5:39:ef:8f:10:29:
                    37:2f:ea:b4:fb:d5:73:66:38:28:65:88:96:0d:c6:
                    6d:6d:9b:d0:3e:13:e1:1a:a1:bc:15:99:56:1a:7a:
                    54:b8:c8:47:1e:8b:2c:55:c7:cf:4d:1a:52:ec:49:
                    5c:78:e1:a6:78:44:5b:8a:a2:b1:79:9c:12:67:1e:
                    63:7c:ed:a5:a4:02:e4:a2:51:9c:a5:77:8b:db:65:
                    55:81:53:1e:84:7a:bf:4b:6a:ad:6b:09:30:be:b9:
                    e9:d4:f5:a0:60:d2:e7:be:73:bc:30:ac:cd:c3:a9:
                    1c:c2:2c:3f:25:95:8c:cb:23:4d:f1:0d:34:12:52:
                    62:82:e1:39:ff:b5:3b:4a:b5:4c:d4:2b:b7:e1:21:
                    04:d6:8f:48:c6:82:b7:44:ac:1c:a3:78:76:33:4c:
                    b5:af:07:e2:4a:9e:61:f1:3a:71:d9:8e:cc:76:23:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:76:89:B6:73:CA:35:63:EF:05:FE:EA:94:7F:45:A5:AF:CB:C8:0B
            X509v3 Authority Key Identifier:
                keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.188.0/22
                  103.116.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:2d:a9:82:7e:76:db:e4:4d:c0:e2:39:6c:20:90:a2:be:b8:
         13:14:c4:6c:58:dd:73:3a:0f:07:88:8f:20:53:70:74:34:ec:
         cb:ef:ed:13:3f:ac:2f:04:7c:7a:ed:03:83:fa:da:f1:cc:ac:
         21:ec:29:a8:ec:08:14:c9:9f:2b:6f:81:e3:b2:d5:cd:e1:43:
         43:ef:e6:64:63:4d:e3:c2:2d:60:39:7b:22:a2:ab:44:11:f6:
         33:96:e5:81:45:6c:ba:20:3d:88:df:50:51:d3:81:a6:35:55:
         b1:2e:19:d3:22:47:5b:63:ca:83:b4:25:4d:a1:29:03:fb:c8:
         4c:02:68:e1:27:c7:75:20:a1:82:2e:88:68:c0:1c:18:b3:e5:
         04:21:a0:cc:56:50:00:71:44:d2:ba:fa:e9:cc:9c:5d:49:a8:
         28:3e:70:bf:8e:06:91:ab:25:1b:43:fc:70:8d:29:66:63:80:
         61:2f:aa:98:1c:1a:f1:87:2c:4a:1b:92:e1:7b:d5:31:4f:93:
         6e:d2:58:61:f4:76:61:3a:77:99:63:82:f9:73:8c:77:ba:e7:
         32:99:f5:c9:26:93:a6:1a:3d:0c:f8:b3:d9:ed:cd:49:78:b2:
         64:63:70:1e:25:f0:d7:29:1a:ee:31:72:7f:09:1a:9c:e5:76:
         b9:06:bb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:49:15 2026 by rpki-client