Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/A84F7CEE432711EA87CB0E53C4F9AE02.roa
File:                     A84F7CEE432711EA87CB0E53C4F9AE02.roa (raw, json)
Hash identifier:          DuaXg8ErIllO7PDms4lKRxOCOp64K0AXe/FcoVLC2mE=
Subject key identifier:   16:25:39:B1:58:B0:85:2D:0C:5E:24:39:53:43:BE:2E:DD:CC:6D:98
Certificate issuer:       /CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Certificate serial:       0B9F
Authority key identifier: A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/A84F7CEE432711EA87CB0E53C4F9AE02.roa
Signing time:             Fri 06 Mar 2026 19:25:07 +0000
ROA not before:           Fri 06 Mar 2026 19:25:07 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135032
IP address blocks:        103.206.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl
                          rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2975 (0xb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D8F, serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
        Validity
            Not Before: Mar  6 19:25:07 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ab2a13-76cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:64:b1:55:2e:78:b4:37:76:5d:c5:1d:26:
                    80:ef:e7:f3:c0:37:84:fe:58:83:7d:aa:95:17:8a:
                    00:ec:e3:c3:22:95:25:fb:1c:8b:6e:7f:4e:fe:20:
                    49:c8:23:fa:d1:58:6e:eb:20:b6:e6:bc:99:0f:30:
                    1c:40:6a:b1:70:66:4a:f9:50:d8:93:60:34:24:01:
                    ae:01:02:50:7c:1d:10:14:78:87:4f:6d:f2:f2:bf:
                    ec:a0:b3:0c:b8:40:48:77:7a:f3:ad:ba:ff:a7:24:
                    2d:80:e8:0c:d2:0d:8d:b0:96:6a:a1:de:85:a8:8e:
                    80:51:0d:f0:5f:cf:33:56:05:82:50:5e:46:d8:e2:
                    82:20:36:1d:9b:87:fa:61:14:0c:a7:28:0f:fc:7b:
                    ce:ec:6e:eb:2f:7d:3a:d4:66:d0:5b:d5:b3:1e:2b:
                    b8:56:ca:f3:58:f7:f1:07:11:5d:8b:5e:a3:da:d4:
                    76:1b:ee:32:a9:b1:ff:d3:f3:21:ef:33:7f:3d:06:
                    4f:a4:97:c1:11:97:5c:24:24:ff:1f:75:a0:26:7a:
                    25:56:d3:94:0c:62:7b:a3:7c:e4:ee:1a:72:0a:80:
                    8c:ea:f2:c3:24:7d:bc:7e:1d:81:76:b3:e8:cb:c1:
                    18:fb:60:23:41:a5:5f:8e:68:0f:e0:b6:c7:9a:be:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:25:39:B1:58:B0:85:2D:0C:5E:24:39:53:43:BE:2E:DD:CC:6D:98
            X509v3 Authority Key Identifier:
                keyid:A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/A84F7CEE432711EA87CB0E53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:69:3c:ff:4e:31:a5:09:bc:ec:f7:47:52:ab:fb:71:55:
         9e:90:05:a4:73:eb:43:ee:85:7f:83:64:89:d7:93:02:4f:79:
         a0:3a:ad:a9:1a:0e:71:95:b0:ab:5d:79:da:31:8d:d1:f1:ee:
         e7:71:a3:e3:1f:6e:66:07:63:a0:ce:21:f8:a9:44:13:88:62:
         60:b5:83:20:77:d0:05:6a:09:5e:bc:d9:ee:7b:18:b6:f8:bc:
         44:a6:7f:cc:94:f9:25:59:10:bf:7c:d4:15:3b:8d:64:79:12:
         84:7f:f4:b3:8f:fe:e6:ce:7d:8a:a6:cd:ab:fe:53:b8:6e:91:
         9c:4f:0c:ae:1c:72:7f:68:1a:14:6c:aa:13:84:0f:e8:a0:6d:
         12:7d:71:36:50:55:8c:b1:93:b9:4a:cb:5a:cf:a2:b6:dc:11:
         12:e5:fc:eb:1f:d9:11:c3:34:4e:ce:9a:15:5d:36:5a:ca:e3:
         bc:c1:15:bb:21:20:10:86:f4:64:e8:36:d2:c8:34:2b:cb:33:
         f7:98:94:e1:c8:5d:00:fe:b4:06:e1:b7:eb:36:0c:6a:a7:5e:
         51:05:a1:31:cb:14:8d:1f:2d:75:85:1a:ff:ae:b7:ce:b6:91:
         ae:af:3f:06:d3:61:d5:92:e4:e7:68:7c:54:ac:82:a9:8b:28:
         ae:77:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:06 2026 by rpki-client