Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/73E1CE72FCA411EE88B23A71C4F9AE02.roa
File:                     73E1CE72FCA411EE88B23A71C4F9AE02.roa (raw, json)
Hash identifier:          dN1N9jOQ9lXo9nzVGcBV8aQYADLpe/fS4AN1ynKiNyM=
Subject key identifier:   FE:29:4A:AA:01:CE:2C:F2:BA:C8:A9:68:B2:68:9C:75:4E:23:34:C7
Certificate issuer:       /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Certificate serial:       0365
Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/73E1CE72FCA411EE88B23A71C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:37:16 +0000
ROA not before:           Mon 21 Apr 2025 01:26:58 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     152475
IP address blocks:        103.40.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
        Validity
            Not Before: Apr 21 01:26:58 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4794c-f032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:ab:9c:a7:5e:31:a7:44:e0:f3:c6:39:f1:
                    5b:14:e4:04:19:95:9a:b8:d8:d6:3d:e2:da:78:81:
                    50:31:ef:0b:64:f5:b9:f6:a6:53:8e:0b:2c:1e:6d:
                    c4:e4:5c:10:47:4e:92:60:9f:36:ca:9f:44:02:0c:
                    f1:81:e1:12:73:04:3c:6b:a7:a0:6a:6d:82:f8:2a:
                    15:cf:cc:ba:e0:1e:13:29:32:c9:4b:68:59:40:3c:
                    3d:56:c0:18:cd:96:7b:7f:b3:b0:c2:28:f1:2e:46:
                    bf:1b:6f:41:6e:98:60:4a:aa:3b:4c:86:f3:03:a4:
                    24:81:01:df:ee:92:58:3a:15:5f:3b:58:5d:4d:82:
                    c3:88:fd:68:22:b0:73:07:8b:ca:24:64:c2:7b:b9:
                    3d:20:85:63:64:5c:4f:bc:d1:d6:e1:d8:df:c7:7e:
                    fa:ab:18:e4:7a:6f:6b:b2:1d:fd:e6:be:43:ab:09:
                    ec:91:a9:ee:33:47:90:53:28:aa:b8:8c:d9:e6:d6:
                    d9:7f:5f:67:62:d7:8e:3a:43:e9:4c:a8:47:f2:27:
                    66:53:95:31:77:32:ae:83:bb:b7:b7:f3:69:0b:2f:
                    ea:b5:0f:2e:31:fe:ca:de:32:e8:ab:e0:f6:14:27:
                    1c:fd:f6:ab:92:18:5a:6d:e4:8d:d8:8a:7c:1d:d7:
                    13:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:29:4A:AA:01:CE:2C:F2:BA:C8:A9:68:B2:68:9C:75:4E:23:34:C7
            X509v3 Authority Key Identifier:
                keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/73E1CE72FCA411EE88B23A71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:39:b2:c0:b1:fa:09:fe:ae:dd:e2:a7:47:9d:59:0b:22:
         29:86:76:42:93:7b:5e:61:44:b5:5d:3c:47:ce:be:f1:5c:8c:
         2e:2f:29:d6:d1:1a:f9:b9:25:15:52:c8:9d:97:19:2e:bc:03:
         14:9b:38:ec:68:71:30:63:36:83:79:37:4e:1e:3d:8f:82:97:
         ec:af:ab:43:cc:2f:b2:d7:8f:d4:f0:33:33:8e:c1:f2:6c:5b:
         42:e6:a1:5f:1c:78:74:f1:0b:fc:54:2e:be:e8:54:fb:5c:5c:
         04:b0:d7:00:b3:28:bc:0b:b5:2e:10:26:bc:94:20:2a:25:42:
         25:fc:6a:65:02:47:fb:00:75:2d:7a:27:08:c4:29:6d:28:e0:
         32:df:99:09:f4:bb:9c:88:3d:ee:59:1a:19:10:81:42:78:be:
         cd:80:3d:df:a1:ba:ea:1b:13:a4:50:1f:76:5e:01:76:ea:a5:
         d7:ee:92:60:b1:87:99:58:5b:47:09:34:c8:3d:70:10:37:9d:
         95:8b:2b:78:65:b5:d2:47:a4:95:64:f3:48:61:6e:6b:ac:33:
         cc:f3:d0:44:01:f9:ea:6d:3c:2b:09:72:ed:e5:8c:af:74:95:
         24:a3:85:05:69:79:dc:6b:2e:66:ff:e0:9f:96:ae:b0:98:88:
         c9:86:12:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:25 2026 by rpki-client