Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/30BF0192D5B411F0BA49041CC4F9AE02.roa
File:                     30BF0192D5B411F0BA49041CC4F9AE02.roa (raw, json)
Hash identifier:          7Xq/xrlaF1i6pCbhVMnZT3OZ5U9fhM3Ebdid2BeEwH8=
Subject key identifier:   79:FC:4F:0A:E6:13:BF:15:FC:E9:9A:62:6A:41:D4:BA:AE:DA:D6:16
Certificate issuer:       /CN=A9187325/serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392
Certificate serial:       F7
Authority key identifier: 53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/30BF0192D5B411F0BA49041CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:18:37 +0000
ROA not before:           Fri 09 Jan 2026 04:47:50 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     142588
IP address blocks:        103.250.64.0/22 maxlen: 24
                          2401:d9a0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl
                          rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187325, serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392
        Validity
            Not Before: Jan  9 04:47:50 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a466dd-3cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:42:20:8e:50:3d:9d:f0:cb:68:09:fb:55:
                    cd:3c:84:3d:47:b3:25:0b:6b:be:08:0e:d2:ba:66:
                    fd:f4:f7:b3:4e:3b:8d:7c:39:16:7b:a8:af:be:aa:
                    53:39:f8:01:cc:49:6c:ed:9b:61:2f:c5:de:0c:7b:
                    77:7e:ad:fd:da:f9:00:00:df:d2:51:8d:d1:ab:7f:
                    1b:e3:b3:b5:d3:7a:67:23:b2:68:ff:8d:2b:06:d7:
                    44:a6:ec:50:16:28:b6:2c:ca:55:2b:a7:c7:a9:31:
                    64:aa:fd:2a:43:01:be:76:81:fe:a1:df:e5:46:8f:
                    1c:0c:82:26:ab:1c:a8:27:5b:29:24:05:c1:99:d4:
                    7c:f5:f1:2c:55:ad:2f:a9:50:e6:a8:0f:86:0d:e0:
                    9f:b8:e1:95:f4:10:1b:b1:6d:41:25:92:36:e3:14:
                    74:7d:9c:fd:8a:8c:a2:1e:84:6a:83:02:bd:1d:8b:
                    5b:75:4a:15:c9:bc:1b:a8:34:be:1a:da:77:61:80:
                    cd:b7:d5:64:d6:de:e1:7e:dc:e0:85:64:a4:d7:d3:
                    08:55:b4:c2:23:83:67:14:ca:49:ba:9e:0f:c6:6e:
                    83:d3:29:a3:ea:9e:f6:e9:3c:0c:23:e2:09:6d:1a:
                    d5:a6:11:88:85:e8:ef:b0:9b:8a:a8:e3:83:e8:7e:
                    b3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:4F:0A:E6:13:BF:15:FC:E9:9A:62:6A:41:D4:BA:AE:DA:D6:16
            X509v3 Authority Key Identifier:
                keyid:53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/30BF0192D5B411F0BA49041CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.64.0/22
                IPv6:
                  2401:d9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:aa:72:ba:e7:ca:b7:f5:d5:f0:78:3b:a4:6c:c7:62:cf:79:
         5e:64:cf:b2:9d:94:0a:05:7f:96:5b:fe:7e:5d:b1:18:0d:40:
         a3:9c:91:85:6b:57:47:a6:c7:b6:eb:a0:82:79:6b:4d:ec:8f:
         4f:18:e1:05:57:4e:7d:9e:81:3f:0c:ea:8d:4f:71:19:a0:99:
         f4:81:00:77:6a:58:e5:b0:6b:42:f4:c6:42:1f:df:53:54:a1:
         5c:a2:60:f8:58:8a:09:56:8a:2f:f4:73:a8:f2:29:4e:b4:a8:
         b3:1e:22:b9:f4:fc:a5:cb:65:28:3a:32:a7:97:c2:d8:18:d8:
         98:5a:9d:25:7b:c6:f3:ff:e2:e2:71:95:f2:51:c1:b6:89:8b:
         e1:ff:39:c5:8f:84:49:d7:95:f9:91:78:e3:e5:73:1d:f9:47:
         47:5d:7d:50:75:79:50:3d:9a:a5:8f:dc:22:73:0a:45:c3:07:
         69:4e:c3:ab:22:98:c8:98:fa:40:91:a4:c0:29:73:6f:f0:51:
         df:70:34:c3:c6:39:14:e8:dd:47:f7:19:49:1d:f6:24:dc:ac:
         f2:a8:95:54:98:cb:fd:35:19:bd:55:36:77:af:47:85:b6:fc:
         be:94:20:49:90:55:33:de:27:3e:e7:b8:fc:e4:c6:b3:81:e1:
         f5:86:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:04:01 2026 by rpki-client