Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/D9D943568FFC11ED9776CB38C4F9AE02.roa
File:                     D9D943568FFC11ED9776CB38C4F9AE02.roa (raw, json)
Hash identifier:          aADozuDCIEKbnLRcroHhbSPv1V+V+40QMaTifMiQcJs=
Subject key identifier:   1E:04:23:26:09:2D:DA:AD:37:3A:9A:A8:60:6A:A8:72:E2:9D:50:03
Certificate issuer:       /CN=A9188D2D/serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190
Certificate serial:       026E
Authority key identifier: B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/D9D943568FFC11ED9776CB38C4F9AE02.roa
Signing time:             Thu 23 Apr 2026 02:34:06 +0000
ROA not before:           Thu 23 Apr 2026 02:34:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136174
IP address blocks:        103.184.0.0/24 maxlen: 24
                          103.184.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl
                          rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D2D, serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190
        Validity
            Not Before: Apr 23 02:34:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e9851e-9375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:d5:dc:bc:9d:2b:9d:52:a6:67:54:60:45:
                    06:0c:0a:57:c1:91:c6:15:ef:c4:f6:7d:31:0a:d3:
                    28:18:80:b1:3c:42:77:40:1f:8a:cb:90:3a:8e:e9:
                    f9:3e:64:9b:2b:36:65:17:16:d2:db:a6:29:0e:52:
                    1d:6a:60:17:32:e8:ba:8a:e0:63:aa:75:f3:64:d6:
                    83:36:13:08:91:c9:a2:ae:e9:17:76:c2:b4:10:9e:
                    bc:cb:4e:94:c5:e8:27:fd:f3:74:14:76:31:9e:4f:
                    d7:e5:72:d1:fe:28:9a:56:38:b1:91:9c:74:12:0d:
                    a7:03:6d:58:43:e6:42:88:bc:5a:ca:93:5a:e1:f8:
                    46:6d:5e:13:ae:55:32:9a:38:54:4b:45:7c:99:cd:
                    4a:2f:c8:e8:77:39:64:6f:c2:c1:26:12:f5:5d:dd:
                    c1:d0:e7:a6:8d:e9:bd:05:d6:b4:14:60:31:10:b5:
                    7b:04:4d:e7:6e:41:ae:34:15:ec:7b:26:8e:b2:41:
                    83:18:43:6c:86:b5:c8:d9:b4:73:0c:bb:71:b4:50:
                    a3:fe:d0:32:a1:d8:0f:4e:a6:56:af:9c:53:5c:3e:
                    ae:76:86:7f:a7:94:29:c7:3a:f9:5a:23:fe:02:d1:
                    03:6d:88:c1:d8:3e:c9:c3:61:65:2f:ce:02:7f:5a:
                    81:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:04:23:26:09:2D:DA:AD:37:3A:9A:A8:60:6A:A8:72:E2:9D:50:03
            X509v3 Authority Key Identifier:
                keyid:B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/D9D943568FFC11ED9776CB38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:52:28:ac:6d:31:3f:da:d7:6d:a5:d3:c7:ff:66:66:42:63:
         db:b0:66:62:7a:a9:43:c9:b5:ef:72:d8:5c:ab:b9:1f:13:aa:
         1a:a9:79:f3:3e:b9:20:46:9b:df:54:fb:f3:c0:5d:69:34:e0:
         f4:62:82:c8:16:68:4d:1e:98:35:02:1b:86:e3:71:be:29:00:
         6a:6e:f2:26:d1:24:98:e7:29:26:f7:46:8a:33:9a:8c:78:04:
         ec:5d:b3:04:41:03:6d:d8:25:3f:c8:82:5b:ac:8c:a9:77:f0:
         9e:c8:2f:84:6c:1d:08:6c:9e:ba:20:e0:a9:3b:5e:30:5c:26:
         e3:9d:7f:9a:c2:34:f3:50:52:0d:c1:35:b4:24:ef:ba:2d:44:
         8b:70:ab:c0:95:9e:4f:1b:41:35:9e:77:0f:d1:57:f2:da:73:
         c3:c0:3f:4e:c4:2f:b4:20:27:e9:79:0a:ec:55:79:60:c5:1e:
         77:48:39:b4:f9:9f:c6:9f:37:c3:04:b2:c5:a8:78:e0:3b:0b:
         c0:db:01:55:d1:af:ea:d2:ec:b4:08:69:46:90:4b:ff:81:ed:
         e7:fd:c1:75:65:6d:4a:f1:40:fd:6e:00:1f:a3:e6:5b:f2:f7:
         9e:cf:92:fb:52:ba:c6:34:ce:29:d8:ba:71:3f:32:f8:3c:93:
         99:61:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:56 2026 by rpki-client