Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa
File:                     7DF47F46F95611E996377877C4F9AE02.roa (raw, json)
Hash identifier:          WNUk8jDYPlrb/rdVyo4XTCfnmiGld7eyz2MY75cZ7HI=
Subject key identifier:   D7:00:60:12:CA:4C:45:DB:21:AA:DE:B9:F6:67:29:0E:D9:41:B8:81
Certificate issuer:       /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial:       0D19
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:52:20 +0000
ROA not before:           Tue 02 Dec 2025 17:48:35 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138462
IP address blocks:        103.126.36.0/22 maxlen: 24
                          2404:3c0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
                          rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3353 (0xd19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
        Validity
            Not Before: Dec  2 17:48:35 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44493-84c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:e2:0a:e6:90:45:75:39:17:fa:d2:de:56:
                    b1:79:c7:70:ad:e1:8d:be:09:a1:e8:66:ba:68:34:
                    1a:6f:dd:cc:be:42:c3:d4:77:80:30:19:24:11:85:
                    91:47:2f:1e:37:f5:7f:87:39:4f:a9:91:a7:60:6d:
                    46:33:07:6f:91:63:70:07:30:5e:63:9f:4b:c2:41:
                    c4:5c:02:13:11:f8:a4:5f:65:66:0c:e1:8c:c4:18:
                    90:b8:5e:50:e0:a1:6a:2d:ce:f4:26:97:42:49:ab:
                    cc:90:a3:e8:03:02:dd:f8:0b:32:31:6e:c4:6a:3d:
                    1f:dc:f2:c6:89:87:a1:a4:05:58:05:94:90:28:68:
                    ed:8b:8b:d6:dd:9b:90:e8:dc:13:15:a8:2e:0d:a9:
                    f6:fb:07:74:71:92:ba:75:2d:c6:62:a4:b3:5b:80:
                    30:c2:e2:b2:a6:6f:15:93:49:ea:6a:da:ea:a9:1d:
                    dc:ea:14:a1:31:8c:6e:a8:09:94:22:cf:c4:bc:89:
                    72:89:82:ad:f3:7e:6d:d0:73:8d:93:6a:f8:a2:51:
                    89:fa:98:ac:3f:58:ad:43:74:02:ac:c5:f3:b9:6d:
                    53:f4:12:59:70:5e:29:1a:c8:df:90:f5:c6:00:9f:
                    c6:cc:a0:55:7a:9d:9c:90:fd:4d:fa:ff:cd:e6:fc:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:00:60:12:CA:4C:45:DB:21:AA:DE:B9:F6:67:29:0E:D9:41:B8:81
            X509v3 Authority Key Identifier:
                keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.36.0/22
                IPv6:
                  2404:3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:e7:e8:81:96:9a:fc:4a:cc:d4:87:a6:0d:8c:74:ce:91:6a:
         bb:f3:0c:fa:c6:7b:1f:23:04:05:de:db:e2:2f:ee:5e:7c:11:
         93:84:e9:12:85:f6:44:8b:c5:e3:3f:ea:02:7f:93:5f:6f:0c:
         4e:65:d7:5a:d2:ad:86:92:6c:32:08:7a:a5:70:1d:ce:b3:c4:
         b5:91:87:27:fd:20:56:67:70:84:97:1b:c1:2b:0c:31:36:b7:
         6f:dd:36:a9:88:39:6f:a3:4c:23:38:6b:0a:93:2a:ec:4e:ab:
         b2:cf:0b:b3:a1:c8:49:c5:ed:92:fa:c6:39:ab:f0:98:3b:5c:
         51:70:5b:02:3b:52:10:1d:be:b1:61:bb:c9:32:67:bf:92:fe:
         71:58:3a:a4:03:70:29:f7:1a:7e:57:76:75:a2:b2:c5:2a:27:
         35:5b:8f:74:6b:3b:c4:81:78:36:26:f5:d3:7b:d0:e6:91:65:
         b6:57:e6:29:5a:17:13:80:d1:21:76:c1:63:5b:ba:c1:5e:21:
         e9:83:0e:6f:de:52:8d:b6:de:7a:81:11:e1:38:1d:b3:d2:37:
         7b:98:7b:04:4c:1a:46:e5:84:a9:3c:fd:23:0a:56:b8:f2:ab:
         6f:f2:69:34:b7:b7:80:18:1b:c7:c7:c2:42:32:34:5d:13:44:
         a4:85:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:11 2026 by rpki-client