Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa
File:                     A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (raw, json)
Hash identifier:          ikBL+n1I4lTln4IeZuN3wg5X+cHKMnhhuxIqhkGyMPU=
Subject key identifier:   9C:CF:D2:C8:5B:69:2F:19:BE:71:CF:28:C9:FD:C8:5B:77:2F:3A:41
Certificate issuer:       /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial:       0554
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:43:44 +0000
ROA not before:           Sun 03 Aug 2025 00:36:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     9744
IP address blocks:        103.70.76.0/23 maxlen: 24
                          103.71.252.0/23 maxlen: 24
                          103.194.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
        Validity
            Not Before: Aug  3 00:36:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a43480-f081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:86:bc:59:d4:45:78:f6:9f:ad:dc:2a:a9:
                    c3:50:b4:a4:f6:27:cf:c5:7f:2f:2d:a4:74:9b:d3:
                    28:02:69:ca:38:57:5d:e3:1a:1b:1b:2b:b0:d0:da:
                    ab:b6:0f:5b:68:78:d4:87:5c:00:f4:77:cb:e6:ee:
                    9f:8f:24:60:c4:d0:80:7d:50:6f:4c:9b:a9:79:36:
                    c6:06:f3:a2:e0:b0:4b:54:b3:d5:41:7c:2d:6e:eb:
                    66:4b:15:4d:43:b3:04:dd:ba:13:9c:da:15:93:1a:
                    9c:45:f1:cf:04:b1:33:aa:eb:df:0d:01:97:f9:5e:
                    2d:b8:66:40:78:49:a7:d0:57:47:70:72:11:f1:74:
                    8a:ac:bc:cc:0d:03:45:c0:db:19:8c:e0:4a:e6:fe:
                    d1:fd:00:de:ca:cc:1b:2c:18:a1:85:bb:d1:99:4f:
                    ba:7a:19:91:0d:8b:87:4b:d2:18:a9:f8:0e:a1:9d:
                    02:ff:79:3e:5a:91:58:7a:4f:1a:3c:10:3d:f1:0c:
                    17:9c:9f:e6:b7:f0:8a:ca:da:d0:17:4c:83:dc:88:
                    6b:a6:5a:8f:a3:f7:2b:d0:31:2a:04:4f:d9:21:a2:
                    54:d4:25:d9:df:12:39:94:0f:ba:e4:33:50:32:30:
                    7e:e5:08:84:42:71:46:94:fa:08:97:5f:91:3d:91:
                    3d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CF:D2:C8:5B:69:2F:19:BE:71:CF:28:C9:FD:C8:5B:77:2F:3A:41
            X509v3 Authority Key Identifier:
                keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.76.0/23
                  103.71.252.0/23
                  103.194.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:12:0f:de:cf:0b:82:7a:aa:b7:76:e4:8f:72:dc:35:e9:9d:
         56:62:87:16:e6:62:32:0c:11:92:7a:46:52:e9:c1:e4:a2:fc:
         68:fa:b7:e2:e1:ab:d9:8b:64:c6:fc:e9:e4:57:49:65:8f:3b:
         e6:d0:1e:98:13:76:3c:fd:ce:27:7a:14:e4:e4:dd:3d:1e:03:
         42:9b:21:04:00:66:b5:ce:3c:e1:42:75:44:01:10:e8:ae:33:
         18:b5:12:59:bf:3b:16:09:36:e0:1d:0b:ad:71:7c:d4:99:38:
         26:a7:22:b1:ac:73:e8:db:45:c0:85:f5:8c:60:62:c9:31:55:
         95:87:4c:a4:99:7c:51:1b:5f:79:f7:2d:8a:18:dc:c5:08:03:
         0d:63:2e:6f:fa:d1:d6:e2:2f:99:22:dd:e9:76:67:70:d3:8c:
         0f:c8:45:32:0f:5d:96:15:ac:2c:ea:12:ea:70:58:63:2d:a2:
         44:e8:3b:47:00:dc:03:46:8a:14:9a:5e:a9:26:50:fc:e0:60:
         b6:c1:92:a5:7f:ae:47:a8:72:b5:8d:22:b3:ac:5e:91:58:1d:
         98:11:2e:f9:68:7d:77:5d:34:e0:fc:f3:94:a6:33:dc:b8:c2:
         a4:7b:2c:26:10:15:bd:cb:83:8e:f8:84:c5:02:bc:e5:75:26:
         fb:f9:e5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:03:34 2026 by rpki-client