Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/4735CB9A93EE11E9B1F2926AC4F9AE02.roa
File:                     4735CB9A93EE11E9B1F2926AC4F9AE02.roa (raw, json)
Hash identifier:          JR72/EZy5aRrSFB9vWQMg1q1NBXm5hj69ANbCPmEu98=
Subject key identifier:   DD:59:E4:95:9C:1A:62:8C:5C:B0:38:50:5F:4B:0D:A7:C2:DB:35:E1
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       103E
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/4735CB9A93EE11E9B1F2926AC4F9AE02.roa
Signing time:             Wed 06 May 2026 17:25:00 +0000
ROA not before:           Wed 06 May 2026 17:25:00 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     55811
IP address blocks:        103.138.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4158 (0x103e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: May  6 17:25:00 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fb796c-a74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:c3:da:2b:75:57:42:16:25:65:68:a1:4d:
                    6f:66:c3:a5:7e:ac:91:57:1f:fc:f0:ee:9c:b5:85:
                    43:b7:cd:75:e8:f8:97:a6:06:07:6f:38:93:a0:c4:
                    a3:d9:9f:fe:c7:30:32:0c:1c:06:81:e1:cf:22:af:
                    f9:e3:86:fc:fe:cc:8d:c8:f7:e3:c0:3c:2e:3f:3b:
                    40:19:1e:ad:28:77:19:f0:ad:f0:3d:5a:cc:50:0d:
                    7a:4c:40:db:1a:8b:f0:8d:57:e7:11:1d:33:4b:f8:
                    5e:f7:bc:ef:9d:c2:75:b9:84:c1:67:69:57:6a:6b:
                    ae:45:18:4e:ba:fd:72:de:b8:92:49:37:f6:f6:6a:
                    d7:b3:fb:ed:3b:93:e2:8f:7a:f3:4e:f8:74:42:2f:
                    64:57:24:b2:ea:3c:e9:e2:ad:ec:ca:4f:4a:22:04:
                    6b:ac:ce:0a:99:02:96:07:f6:82:cb:03:29:b7:d3:
                    f5:16:0d:09:20:b2:4a:8b:a7:d0:bd:ab:24:67:a1:
                    b8:d4:e0:72:a5:68:bf:3c:fb:8f:26:7c:05:98:b3:
                    ba:0c:03:96:a2:e9:8f:5e:df:49:ac:16:d0:67:6a:
                    7b:5e:67:6a:d7:20:80:18:50:3d:37:69:90:8c:7b:
                    c7:5d:1c:ce:44:ed:af:7e:de:9a:ad:ed:7c:ea:b3:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:59:E4:95:9C:1A:62:8C:5C:B0:38:50:5F:4B:0D:A7:C2:DB:35:E1
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/4735CB9A93EE11E9B1F2926AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:1a:bc:3a:d7:cf:29:1d:e8:ab:4f:42:c9:cc:ac:80:74:bf:
         3e:5a:12:0c:ed:b7:43:16:e1:47:19:95:40:1b:ed:b3:b1:e7:
         8e:54:20:a3:78:9a:a0:9a:2b:50:bf:8d:94:ba:81:d0:f5:9e:
         5e:6b:7b:3b:f6:86:cd:f4:f1:67:0a:8c:81:66:79:d8:46:c3:
         8d:8c:fa:dd:2b:4a:c3:78:63:e9:0f:f0:72:88:53:eb:7f:10:
         d4:fd:b2:b6:65:f1:9c:c2:f6:dc:79:e2:75:ba:99:c7:ec:81:
         d5:4c:06:17:77:fe:3e:53:43:2f:74:53:81:82:b4:2d:19:1d:
         43:be:57:62:81:0d:e3:87:0e:ca:f0:8c:3d:d3:6a:c0:a2:73:
         61:c3:c8:6b:f7:79:b9:b7:b1:b1:91:6b:b6:9f:b4:bc:ef:57:
         64:4c:d6:dd:34:27:41:3c:3d:78:d4:19:c1:06:97:46:68:45:
         53:af:04:0f:c7:a8:d8:d8:45:82:8f:b9:21:07:6b:63:16:0e:
         ca:27:58:11:27:31:94:81:5b:79:29:8b:ba:ab:23:24:30:c2:
         d2:45:bd:06:47:f9:77:4a:51:6f:80:dd:31:04:41:42:b1:13:
         41:c6:17:a0:46:d6:4c:79:02:25:d1:df:01:aa:9b:03:12:7d:
         7f:2d:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:49 2026 by rpki-client