Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/9BC1D2907EDF11EE86C6A27BC4F9AE02.roa
File:                     9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (raw, json)
Hash identifier:          SmxK1GgjoBjC23E2cMN3xNRhJXyAe9oj/ORTb6kLl1o=
Subject key identifier:   B9:84:B2:43:62:42:29:2F:8A:58:80:ED:20:C4:53:74:0B:CA:8A:F0
Certificate issuer:       /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Certificate serial:       0246
Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/9BC1D2907EDF11EE86C6A27BC4F9AE02.roa
Signing time:             Tue 05 May 2026 03:33:47 +0000
ROA not before:           Tue 05 May 2026 03:33:47 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     150142
IP address blocks:        103.213.38.0/24 maxlen: 24
                          103.213.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
                          rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
        Validity
            Not Before: May  5 03:33:47 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=69f9651b-3c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:10:94:45:55:b1:52:0f:02:56:f3:71:9f:
                    c3:49:43:61:b2:90:3d:68:ed:1e:6c:2d:a5:39:5d:
                    2f:b9:17:20:3e:90:f9:09:15:82:34:09:63:24:ce:
                    b0:6b:b7:78:49:14:e8:df:ac:86:a5:7d:68:57:10:
                    aa:0a:99:4d:3f:0b:70:e8:93:47:ef:1a:c3:af:3b:
                    1b:4d:d9:98:2d:da:1b:1d:3c:34:00:29:ba:88:9f:
                    df:0b:20:87:9a:c2:f4:21:93:e9:78:24:2e:39:39:
                    9d:d8:72:e1:c2:c4:8b:93:83:9d:f1:52:97:ff:27:
                    51:0a:12:79:27:f9:44:fb:4b:d1:e9:6b:ef:76:72:
                    11:26:e2:0f:8e:13:19:a9:38:e5:d6:5c:75:f7:fc:
                    4d:84:3d:ad:28:fe:38:ef:c8:7a:36:2a:d9:8b:b4:
                    7f:bf:4d:f0:30:71:5c:3d:84:41:f4:ed:ec:3a:3b:
                    7b:8c:af:c6:54:9e:bf:4f:84:84:df:9a:39:6d:25:
                    05:54:64:80:85:7d:a3:8d:f0:20:bc:c7:83:41:30:
                    35:17:a5:23:73:63:85:44:36:7f:2e:1b:89:cc:29:
                    c0:ae:8c:59:48:6c:0f:df:26:b0:7a:1b:53:62:8a:
                    a3:cc:de:4e:f9:03:2c:d6:e5:e5:78:7a:3a:51:e5:
                    b8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:84:B2:43:62:42:29:2F:8A:58:80:ED:20:C4:53:74:0B:CA:8A:F0
            X509v3 Authority Key Identifier:
                keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/9BC1D2907EDF11EE86C6A27BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:88:9d:2c:61:b5:89:bb:b9:55:9e:42:09:36:30:99:c1:c7:
         a0:0a:b3:3e:72:2e:d4:5a:2b:2a:20:a0:ce:0f:aa:18:d8:53:
         6c:57:a7:c4:fa:aa:79:0a:09:f2:8b:ec:5e:2c:99:5d:b2:d6:
         8c:39:cb:d0:e6:8d:eb:77:e2:6e:1d:63:05:5c:35:65:0e:5c:
         34:83:66:f8:8d:78:a2:75:81:de:cb:87:c8:d2:40:98:2c:66:
         88:c3:1f:0c:1e:3e:ee:92:b1:85:bb:c7:f3:b7:f2:0b:99:16:
         fd:5e:a6:ae:04:a3:fc:50:73:83:40:70:fb:de:76:64:4c:39:
         53:9e:89:83:72:3f:18:85:e0:77:99:48:4e:29:49:00:95:ae:
         20:99:c0:20:49:8d:9d:58:8a:1c:a5:a7:ae:37:bd:8d:84:97:
         2d:ba:cd:1d:7e:a1:be:d3:f8:88:15:ae:16:16:ab:c5:ff:25:
         69:b5:59:ce:e0:5b:7e:43:44:d4:d6:fb:6d:cb:6b:52:be:a4:
         d6:21:4b:c8:a7:1c:38:a6:df:ca:29:40:3f:a3:cf:c5:60:ed:
         0d:cb:e0:7c:64:e6:32:0f:06:c0:28:74:64:5b:be:29:cd:7b:
         03:f4:c1:ef:a6:f5:8c:eb:b1:bf:2b:75:2c:e9:8d:b2:24:c1:
         9e:30:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:39 2026 by rpki-client