Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/9787989A777011E7BF7EED10C4F9AE02.roa
File:                     9787989A777011E7BF7EED10C4F9AE02.roa (raw, json)
Hash identifier:          cMSDuBT3kjpyehv0+lJ2MFU5CMopK6TVvtYRY4GXdzU=
Subject key identifier:   3C:80:8E:F2:8F:5E:EE:C3:58:32:45:89:09:D8:83:0B:ED:2F:E3:68
Certificate issuer:       /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial:       1A50
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/9787989A777011E7BF7EED10C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:12:18 +0000
ROA not before:           Sat 02 Aug 2025 16:55:19 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136801
IP address blocks:        103.95.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
                          rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6736 (0x1a50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
        Validity
            Not Before: Aug  2 16:55:19 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a51c32-3eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0c:60:18:53:46:b9:61:ab:46:a2:8c:c3:1f:
                    ff:e2:ee:f4:86:53:ca:d8:66:f7:5b:9d:25:fe:a8:
                    0d:25:c2:3b:1e:8b:be:ab:06:fe:b5:d2:66:3c:f8:
                    66:51:04:69:10:42:c8:39:ba:e1:ba:3f:1f:e0:12:
                    34:a4:1b:26:2e:88:d0:43:78:36:ce:0e:95:53:99:
                    67:24:bf:42:ca:0e:6b:4a:7d:8a:a3:9c:77:1e:ac:
                    b8:b7:38:13:26:6f:e9:96:a0:a1:5e:0d:85:25:9d:
                    a1:f5:f6:9f:b0:70:68:79:3a:41:64:43:13:9d:13:
                    55:5a:cb:37:6b:e7:7f:9c:f1:a8:b9:97:03:35:94:
                    4b:e8:f4:4e:bb:70:d6:db:70:4a:2a:c8:89:a4:ce:
                    ad:ef:40:03:06:e2:70:87:53:05:72:95:60:34:4c:
                    9f:3f:a1:6f:2d:7c:dd:23:90:6d:9d:b7:26:ad:4a:
                    d1:9d:f4:c2:d3:66:c9:99:33:20:48:bc:3d:ba:4e:
                    a5:3d:ce:8e:ca:55:6d:4d:db:80:8d:10:27:4d:6a:
                    75:00:d4:ed:e4:8b:bc:ba:54:a8:59:11:52:79:de:
                    ea:66:2b:7a:81:be:9b:97:67:4f:91:8a:6a:1e:9f:
                    1c:82:51:ab:9c:41:de:01:e4:f6:84:ed:8e:88:93:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:80:8E:F2:8F:5E:EE:C3:58:32:45:89:09:D8:83:0B:ED:2F:E3:68
            X509v3 Authority Key Identifier:
                keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/9787989A777011E7BF7EED10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:cc:af:91:6f:70:1c:9e:2a:06:36:79:e2:48:f5:6e:a8:51:
         8d:d9:de:33:f7:9b:68:45:c9:47:04:73:92:de:0e:ad:d7:6e:
         fb:4c:89:d5:88:24:0e:f0:83:f4:d1:a2:33:1a:21:d9:5d:2e:
         14:ff:20:dc:0d:77:19:37:18:dd:f5:03:de:93:ce:3e:c2:22:
         7f:81:47:fd:7a:c9:3a:05:1a:84:87:36:34:cf:9c:2c:79:d0:
         85:bc:ff:11:0f:10:39:2d:79:29:af:85:97:3f:49:91:92:50:
         5c:0e:ba:7c:15:ed:40:62:51:4c:e9:f2:82:b4:a7:04:8a:9e:
         7c:a7:ee:5f:da:30:78:91:32:6f:62:7c:f0:5a:21:9f:c2:39:
         73:91:5a:7b:d2:15:91:f7:97:fd:6a:ad:6f:15:6c:c8:99:43:
         e3:e6:19:50:56:53:86:e1:c3:d5:f2:1c:b8:4a:17:bb:51:2a:
         79:56:7e:87:27:1d:10:79:b5:36:a9:29:e7:ed:d3:c6:0b:f7:
         b5:d2:03:20:10:12:03:d3:70:09:dd:27:38:91:68:14:b2:f9:
         12:9f:03:0b:bd:89:35:de:34:96:51:f6:8a:7a:d0:90:fc:b4:
         a8:c6:32:4d:19:06:31:1e:76:80:47:d4:03:96:cb:ad:64:3d:
         0b:aa:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:21 2026 by rpki-client