Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/439B1DD4265C11F1BAFB3333A5833773.roa
File:                     439B1DD4265C11F1BAFB3333A5833773.roa (raw, json)
Hash identifier:          yu5d60NAc4cXPUzUBIczj0n+5EToYt0HRr1PhV7q4lQ=
Subject key identifier:   98:6A:3D:D9:30:03:CB:27:81:7F:29:77:DD:47:15:0D:C3:7A:87:26
Certificate issuer:       /CN=A9175AEA/serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
Certificate serial:       04
Authority key identifier: 9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/439B1DD4265C11F1BAFB3333A5833773.roa
Signing time:             Mon 23 Mar 2026 02:01:54 +0000
ROA not before:           Mon 23 Mar 2026 02:01:54 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4764
IP address blocks:        103.153.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl
                          rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AEA, serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
        Validity
            Not Before: Mar 23 02:01:54 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69c09f12-1d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:09:67:55:43:cb:fe:d1:55:55:f8:9f:ae:
                    5e:2e:5a:57:5b:e5:85:c9:81:4f:e6:f8:cf:9d:7b:
                    2d:47:e6:71:43:b8:aa:a1:4d:a0:e3:68:18:cc:5a:
                    ab:47:b4:de:15:a8:50:60:47:b0:7b:b4:ac:8a:24:
                    d4:36:20:62:ea:a8:21:ad:e6:86:47:f6:fd:9a:cd:
                    5b:08:fd:3c:89:17:2c:a2:5f:31:ce:61:8c:ca:f4:
                    43:50:ed:8a:71:01:d6:34:5a:70:9a:6d:e9:1b:be:
                    c5:40:bb:3a:98:35:f8:d0:8d:d9:86:c7:e2:73:58:
                    f1:14:f6:dd:0a:f1:e7:57:cf:1a:24:49:73:93:a4:
                    e5:76:72:f7:2b:50:b5:fd:00:78:23:62:a1:78:ec:
                    ac:af:38:4d:25:a3:81:7a:12:f8:41:d6:8f:57:d3:
                    ad:e1:b9:38:20:b3:f0:25:ef:c6:42:fb:8c:e5:45:
                    89:b0:de:44:e1:46:2f:f5:b9:b6:a2:11:ee:27:2c:
                    96:4d:d4:a8:3c:73:40:eb:00:a5:5e:58:c6:15:ef:
                    8b:35:c8:6e:7d:29:dd:37:1b:ae:6c:89:a0:58:22:
                    c2:82:0b:27:65:63:b6:c6:5c:96:d0:3f:89:d1:f1:
                    2f:cf:66:b8:b7:61:aa:59:43:5e:f4:c5:37:c7:62:
                    8f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6A:3D:D9:30:03:CB:27:81:7F:29:77:DD:47:15:0D:C3:7A:87:26
            X509v3 Authority Key Identifier:
                keyid:9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/439B1DD4265C11F1BAFB3333A5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:5b:03:e2:08:24:a2:2f:88:10:2e:1e:c4:3f:53:f4:ae:
         92:6b:63:ce:f0:61:f2:bd:f6:a4:6a:60:aa:c0:f7:bf:61:c2:
         ca:14:25:48:6a:f7:39:66:82:e9:6d:8d:5a:b8:2f:c6:b1:bd:
         25:12:8f:ca:5d:f0:84:71:50:cd:22:66:46:f1:40:ff:84:7b:
         f9:69:17:04:f3:1e:d6:00:14:5d:5a:16:5c:33:a8:2a:98:8b:
         8b:47:83:e5:46:72:d3:5a:a4:da:30:10:bd:ed:a5:f0:45:2e:
         90:90:b7:af:5c:30:bc:1b:97:28:5b:47:32:13:01:d0:b4:f4:
         af:d8:7f:94:a8:55:be:df:7e:f7:04:43:8a:4c:fa:50:24:fa:
         d1:f9:2c:16:47:e4:b3:f4:83:48:f1:2c:5a:c5:9b:1b:98:ad:
         59:29:36:9f:2f:1d:74:92:19:59:64:13:ca:da:11:7c:ad:72:
         f6:cb:13:cb:31:0c:12:1d:cf:ca:22:1d:d2:a0:61:4a:5d:d3:
         35:27:af:0e:91:bb:93:44:18:eb:36:ea:92:b2:00:b1:25:01:
         8e:05:94:32:7d:04:86:ab:7e:ee:bf:d5:e9:92:58:42:35:81:
         d2:e8:07:34:6f:51:ad:46:7e:2a:5a:92:1f:ce:23:68:3a:52:
         a1:cd:46:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:54:01 2026 by rpki-client