Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/192C64F2252311F18B88524DC4833773.roa
File:                     192C64F2252311F18B88524DC4833773.roa (raw, json)
Hash identifier:          hVhdvs7GH6X86vaiCeryWerFVJfvpNrRVfFuhErwgtw=
Subject key identifier:   00:AE:C7:B0:62:E4:90:BA:63:43:46:F1:9D:87:46:00:38:27:94:6C
Certificate issuer:       /CN=A9189D79/serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
Certificate serial:       0C
Authority key identifier: E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/192C64F2252311F18B88524DC4833773.roa
Signing time:             Sat 21 Mar 2026 12:40:10 +0000
ROA not before:           Sat 21 Mar 2026 12:40:10 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     133139
IP address blocks:        103.230.88.0/24 maxlen: 24
                          103.230.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl
                          rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189D79, serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
        Validity
            Not Before: Mar 21 12:40:10 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69be91aa-24a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:a1:55:9a:50:2b:b4:ce:a9:01:86:5d:b4:
                    54:79:8b:1b:03:9c:9f:f5:d1:a8:37:c3:27:96:3b:
                    49:80:af:f8:de:06:74:5b:a3:a2:c3:56:ec:85:ef:
                    06:97:b2:23:ea:ac:97:22:89:46:6b:f4:a3:af:4e:
                    63:28:8a:13:56:1f:8a:73:e9:c1:54:22:e6:2d:83:
                    68:96:c7:ef:94:de:cf:03:b7:16:f4:08:bc:a7:62:
                    c9:e7:25:89:b0:47:61:9c:9d:8f:2d:b2:76:fb:80:
                    b4:fe:df:7a:05:0b:7f:71:b9:ed:d6:a2:52:56:ae:
                    a8:b6:2f:3d:49:be:f6:e8:78:ac:cc:f5:ae:f0:07:
                    b6:56:5a:3f:a2:84:98:a0:12:c1:8f:1e:b4:48:62:
                    16:76:ee:b3:62:e8:be:9d:7c:a1:89:3a:89:67:ff:
                    a2:34:1d:34:8d:2d:62:32:f4:8b:2b:6b:5e:64:6a:
                    c4:5c:49:3f:1e:f5:1a:65:70:12:f8:07:4b:00:62:
                    36:2c:38:fd:8d:16:fc:5b:39:bf:d0:92:98:60:22:
                    76:cf:88:b1:7d:5c:20:dc:1c:60:e3:41:ec:8a:a7:
                    8e:d1:7a:06:08:33:db:3c:51:2d:38:62:53:0e:35:
                    e6:2b:85:ca:6d:b4:80:ba:d8:ab:18:d9:28:64:d2:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AE:C7:B0:62:E4:90:BA:63:43:46:F1:9D:87:46:00:38:27:94:6C
            X509v3 Authority Key Identifier:
                keyid:E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/192C64F2252311F18B88524DC4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:66:63:3a:9c:cd:35:79:a3:e9:fd:a8:64:3d:4f:c2:02:19:
         6c:f5:cf:11:28:b8:b3:78:01:0f:6a:54:5a:08:4b:0a:f0:f0:
         27:ac:4d:01:2f:8b:bd:35:84:4b:11:bb:b6:28:f7:89:3e:96:
         36:1f:53:05:2e:3a:4e:64:78:4b:70:70:7f:81:50:4a:4e:34:
         05:2a:a0:9f:31:55:37:45:71:4a:3f:21:da:56:31:4f:f5:be:
         7a:af:db:f5:5c:8c:78:a4:c7:5f:93:92:5c:80:06:95:eb:bd:
         f2:e9:76:76:d4:a2:5c:65:b9:2e:b7:bd:63:60:cf:df:dd:7b:
         11:13:5b:8e:ea:9d:32:aa:f4:58:80:3f:97:fd:f6:73:c8:a6:
         1d:79:9a:f3:7b:a8:e9:26:f2:43:c2:64:42:18:9a:c5:d8:7e:
         04:e4:58:f2:92:83:fd:d3:8d:dc:a1:3c:99:ce:f7:34:15:4e:
         48:59:e4:aa:0d:be:38:39:38:37:72:92:08:6c:87:7b:99:66:
         2f:2e:d3:51:81:01:80:e7:78:cb:f2:4a:e2:5f:71:88:67:96:
         2a:15:32:16:57:f7:12:6c:e1:98:c5:12:19:da:88:0b:40:ac:
         7b:6a:da:ef:1a:c0:ba:9c:0e:c9:6c:37:f5:be:48:af:6c:f6:
         c7:37:0f:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:11:54 2026 by rpki-client