Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa
File:                     394B48F6889811EC9D1DF920C4F9AE02.roa (raw, json)
Hash identifier:          9GkSsGabC4YIge7KqJ4TFMFRkrykr6bw7a+2s3Vjy28=
Subject key identifier:   04:C4:67:A3:5B:DF:C0:3D:54:BA:B7:80:29:89:66:E8:22:1D:36:CE
Certificate issuer:       /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Certificate serial:       0482
Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa
Signing time:             Sun 03 May 2026 00:30:43 +0000
ROA not before:           Sun 03 May 2026 00:30:43 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132739
IP address blocks:        103.24.156.0/24 maxlen: 24
                          103.24.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
                          rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
        Validity
            Not Before: May  3 00:30:43 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f69732-4b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3d:9f:76:9f:05:c5:ba:f7:e8:bd:e8:3c:04:
                    92:28:8a:c3:fb:c8:53:9e:3e:86:fe:49:10:e5:4b:
                    66:f2:a0:49:57:80:a8:c0:49:1f:a0:64:08:0d:06:
                    92:91:45:a4:5a:3a:f8:38:63:b0:22:67:ff:f1:cd:
                    4f:56:3c:17:2b:23:c0:73:57:3a:f6:e4:6a:e3:ab:
                    d5:18:af:35:08:c2:63:42:04:72:4c:52:8e:4c:63:
                    dd:82:db:93:6e:54:3c:b2:3d:d9:64:9e:8a:51:d7:
                    e6:ef:96:14:23:46:c8:83:f8:b9:d1:fc:13:7c:a3:
                    29:53:6b:b8:01:38:0b:54:aa:b1:48:c2:4e:1a:1e:
                    6a:e0:51:6b:99:c3:53:bb:6d:98:5c:6f:8a:09:c5:
                    b1:c9:40:07:2e:d9:0e:fa:3e:69:f7:62:1c:f3:ab:
                    de:bf:69:0b:b5:30:31:7e:76:41:46:2f:f2:c9:c5:
                    9b:94:49:a6:b4:96:fc:26:b8:10:b7:ec:8b:b4:e1:
                    7a:ab:d9:23:f5:16:e1:cc:6b:98:41:24:dd:ba:f8:
                    53:ab:6e:c7:c7:a5:76:55:b0:ac:dd:14:67:2d:53:
                    71:f5:12:f8:de:d2:ae:87:c2:62:2e:bc:96:53:43:
                    91:9a:3e:6c:df:6b:7c:a4:bd:9b:63:44:55:6c:ed:
                    c1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C4:67:A3:5B:DF:C0:3D:54:BA:B7:80:29:89:66:E8:22:1D:36:CE
            X509v3 Authority Key Identifier:
                keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:64:82:02:5c:db:fd:ad:89:45:80:32:c3:00:27:9d:c2:9b:
         b8:ba:c7:f4:76:fa:1b:e2:95:57:d3:bb:f6:cd:73:88:79:f3:
         92:bd:88:ae:49:28:2b:b1:fc:05:56:63:e5:34:3d:70:25:e8:
         01:d6:e8:37:d4:ba:05:ea:6c:15:3b:01:72:0b:a7:64:eb:56:
         aa:fc:ff:62:06:27:fa:f8:e0:a7:64:ed:f7:2f:1c:8f:7d:15:
         10:1e:1f:80:c2:d3:98:0c:34:d5:c3:dc:d9:16:31:96:6f:65:
         b8:18:35:04:43:ab:b5:9d:b2:32:ba:f0:fe:51:c2:61:9a:c0:
         34:e0:4c:49:99:f4:fc:84:62:0b:61:cc:b7:a5:17:2a:58:a3:
         45:65:64:06:cf:5b:5e:50:80:1f:92:da:15:15:8e:ed:0a:65:
         27:87:60:ba:32:9f:83:9f:ae:54:04:64:de:37:cb:7f:a0:50:
         ec:0f:25:be:90:0c:2e:0f:b6:b1:56:07:d1:58:e2:a3:ec:81:
         99:b3:23:e8:d2:9a:95:f7:ee:ab:c9:db:27:48:49:4c:c5:15:
         f7:af:ec:9d:a0:7f:c5:93:50:bb:55:66:70:05:a7:02:fb:9e:
         70:a4:a4:6c:15:f2:2d:c4:2f:51:36:1d:42:eb:61:79:6c:0f:
         3a:20:89:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:03 2026 by rpki-client