Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/9E9FA4C40AB011EC8906F464C4F9AE02.roa
File:                     9E9FA4C40AB011EC8906F464C4F9AE02.roa (raw, json)
Hash identifier:          rVMgOf/LdOya/esBRnd1GGohhsXmnrr7k+gFsh7Hjfo=
Subject key identifier:   27:4C:FA:0A:7B:E4:E6:58:93:E7:75:D2:60:C0:AC:79:AB:82:CA:BF
Certificate issuer:       /CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820
Certificate serial:       0729
Authority key identifier: B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/9E9FA4C40AB011EC8906F464C4F9AE02.roa
Signing time:             Fri 06 Mar 2026 22:29:44 +0000
ROA not before:           Fri 06 Mar 2026 22:29:44 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141693
IP address blocks:        103.162.48.0/23 maxlen: 24
                          2407:fc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl
                          rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A5B, serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820
        Validity
            Not Before: Mar  6 22:29:44 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ab5557-10d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:c6:ea:5a:85:c0:f6:ca:da:2f:b5:f3:da:
                    05:0b:46:68:40:78:61:37:b7:7a:97:8f:0f:bb:26:
                    ea:06:e9:1c:fa:ab:92:b4:06:d3:d7:af:8f:b1:56:
                    85:f6:19:5e:90:b5:8c:b5:6b:dd:32:98:83:b3:30:
                    6c:86:17:34:98:61:a8:30:14:7c:9f:58:4e:e0:17:
                    aa:a2:e5:c1:60:00:41:8d:2d:e1:07:72:95:bc:37:
                    0b:7c:f0:07:75:5d:31:6b:fb:65:1b:df:30:d2:57:
                    f5:51:5c:c2:38:e6:06:2a:10:18:27:91:c9:bb:12:
                    87:45:79:e1:e4:eb:68:52:8e:eb:f0:80:6c:78:59:
                    fa:c4:6e:2f:dd:74:fd:ca:49:cb:d0:e5:3f:f0:1c:
                    00:b8:b2:4e:8c:91:87:23:a6:c8:19:6d:c5:9f:ef:
                    63:e8:cf:2b:92:94:f3:96:66:de:4f:29:b8:de:71:
                    a3:1a:99:68:5f:12:d3:55:1e:8d:9a:fa:88:83:52:
                    ba:a9:9b:e7:48:4b:74:02:dd:d8:72:07:d3:60:eb:
                    64:15:9a:10:6b:85:9a:70:1d:52:13:b8:10:04:99:
                    32:45:51:78:a8:e9:ab:1c:5b:23:43:8e:4c:89:0e:
                    ee:35:34:e6:d5:2b:03:c2:e5:04:90:85:d4:f5:16:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4C:FA:0A:7B:E4:E6:58:93:E7:75:D2:60:C0:AC:79:AB:82:CA:BF
            X509v3 Authority Key Identifier:
                keyid:B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/9E9FA4C40AB011EC8906F464C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.48.0/23
                IPv6:
                  2407:fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:07:a0:59:63:88:2d:f1:36:c1:86:d1:db:c6:c8:13:65:cd:
         36:7e:76:60:51:97:5b:e4:84:96:d3:d5:ae:39:d4:21:43:cc:
         a5:09:bf:fb:ee:81:d9:40:ae:eb:78:19:47:df:b3:de:37:92:
         20:9a:f3:96:26:60:c2:a6:bd:79:5c:99:94:1b:84:83:d3:c7:
         a4:cf:4f:8f:f3:ab:90:1d:a1:95:19:b7:92:5a:a9:a9:9c:61:
         76:3b:7d:de:4b:9b:41:eb:d1:61:0b:a7:e4:a7:c0:05:4c:10:
         06:09:d3:37:6e:6d:ae:d8:59:b6:49:e2:65:46:11:4b:17:68:
         7b:6d:fb:24:b7:03:f4:fa:77:42:15:e7:45:57:60:d2:6a:b1:
         c8:bc:bd:46:ba:f4:14:13:35:59:cf:3e:2e:71:12:4a:b7:3b:
         4c:59:d2:94:44:bd:0c:dd:3f:99:00:b1:f5:ea:5e:f1:90:a7:
         3c:14:4a:56:2b:66:03:c5:9b:5e:e9:ea:bf:5a:c9:4c:6d:3f:
         ac:70:3e:da:5c:16:f4:b7:cf:67:bf:c4:41:88:fd:67:40:b4:
         7b:ee:49:b3:e2:48:6e:3d:a6:d7:a7:8b:0e:c2:62:a5:d0:3b:
         d5:9d:37:a5:f8:6e:6f:e5:ac:b1:2a:4d:7c:38:9e:bf:9b:29:
         24:81:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:26 2026 by rpki-client