Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa
File:                     37BC67B4B18711EC9F9FA058C4F9AE02.roa (raw, json)
Hash identifier:          uw3x4cCrEOXVGSx9HLNoaCGi5i7d3mdJuRAyyNS0hCQ=
Subject key identifier:   B9:46:0B:64:3B:DA:03:62:CA:2F:CB:A5:96:8D:81:A1:7C:5A:48:DA
Certificate issuer:       /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial:       124C
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:56:49 +0000
ROA not before:           Fri 20 Feb 2026 17:15:35 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     133043
IP address blocks:        103.206.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
                          rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4684 (0x124c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
        Validity
            Not Before: Feb 20 17:15:35 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a461c1-62cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:78:52:f6:89:fa:d8:cc:b4:d1:8d:54:ca:6f:
                    41:2b:33:14:e1:ee:ae:50:d6:72:22:2d:d7:4c:be:
                    28:68:34:f1:7b:50:23:8f:1f:63:b5:11:1a:54:ab:
                    40:e9:34:e3:bf:4f:dd:2e:e0:14:b5:8d:1e:45:c6:
                    0c:90:2c:d6:08:4b:c2:53:6c:5b:a1:97:af:7e:24:
                    b6:de:25:3d:e4:b6:75:18:9e:56:ee:a7:91:89:a5:
                    4f:38:28:4c:68:78:a3:a7:9b:9d:10:da:7f:be:a6:
                    32:12:53:12:5e:5d:ff:82:f5:56:8f:8d:13:aa:a1:
                    d4:91:d8:e3:fe:5a:69:50:5e:8d:2f:1c:d9:ec:c1:
                    43:32:12:a1:26:6d:dc:e0:bc:3c:65:92:f2:c9:92:
                    36:9b:74:c2:0d:47:13:08:d3:3e:b7:86:14:65:e4:
                    c4:5b:14:53:6d:ce:05:50:aa:2c:a8:58:47:ff:67:
                    3a:0d:4b:cc:20:bf:a6:03:fc:fa:ed:9a:0f:24:ac:
                    3d:93:36:71:0c:fb:4f:12:c0:ab:09:eb:f8:c1:cf:
                    54:e5:58:9d:28:16:52:5f:dc:0e:1a:12:48:d9:3f:
                    d7:9d:c7:1f:25:83:34:44:97:83:bf:f9:0d:aa:eb:
                    1f:2f:21:e8:c0:35:a6:09:84:f7:d9:02:6b:c9:29:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:46:0B:64:3B:DA:03:62:CA:2F:CB:A5:96:8D:81:A1:7C:5A:48:DA
            X509v3 Authority Key Identifier:
                keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:d5:9c:84:cc:40:d6:97:c3:b2:b8:44:0c:5d:f1:a4:9b:
         e2:b2:ed:03:8a:25:52:9e:c1:c7:ac:47:69:99:30:91:00:c1:
         92:01:18:99:6e:19:41:b7:29:b1:a4:7d:8b:1d:73:b3:cc:c4:
         1f:69:e7:fa:b6:2c:7b:e2:76:41:03:6c:66:b0:68:cc:e8:38:
         55:aa:58:9f:95:64:01:3a:4c:b1:17:85:dd:c6:23:a9:81:57:
         55:41:77:cc:ea:ce:b3:d8:12:51:2e:ff:e5:fa:70:27:a7:dc:
         ca:8e:65:59:0a:5a:91:c4:7e:21:0c:b2:1e:cd:43:63:8a:17:
         50:59:2e:94:48:c3:42:9c:58:a3:2f:aa:69:03:63:55:46:25:
         5d:03:8d:6d:0d:ed:d1:20:e7:45:8b:e8:5a:93:1d:25:98:6e:
         0d:7a:65:d3:54:ee:60:6b:0e:87:e8:21:0a:ad:10:18:42:d4:
         b9:b2:e0:bd:80:53:17:f0:d7:39:7b:cc:3d:94:f2:51:f4:b5:
         84:1b:62:4c:29:3c:7e:a8:f8:7c:ec:01:e4:1e:f5:6c:0a:62:
         eb:1b:10:b9:c5:75:70:47:f9:cd:01:38:02:46:c2:51:36:cc:
         f2:7c:9d:c4:ec:91:e7:d5:22:b0:c8:a7:95:f4:a0:f8:81:56:
         4a:75:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:19 2026 by rpki-client