Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa
File:                     1443F7BA200411EE84DAD06BC4F9AE02.roa (raw, json)
Hash identifier:          4gNevOHBi6z3IYiQJM0H7FywGNv1QyQpFHu6M9Ov6PI=
Subject key identifier:   29:4E:A4:EC:2A:F1:2E:30:38:00:72:45:60:DD:66:62:4F:1A:45:7A
Certificate issuer:       /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
Certificate serial:       0559
Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:56:35 +0000
ROA not before:           Fri 05 Sep 2025 00:05:17 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141008
IP address blocks:        103.154.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192E6F, serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
        Validity
            Not Before: Sep  5 00:05:17 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a40d53-2d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:2b:27:42:8c:8a:0b:c0:71:d8:8e:0f:2b:
                    c0:39:8e:e7:4e:dd:44:c6:7f:58:50:78:16:d8:9d:
                    df:9d:a7:ad:56:c8:a2:4a:0a:35:45:c7:96:15:55:
                    51:64:8f:aa:c9:eb:44:f8:a8:84:83:18:1d:f6:67:
                    00:f7:63:c6:1d:c0:9c:f1:71:c7:88:31:4f:6b:57:
                    b1:8c:b6:36:30:3d:e0:3c:70:ad:32:a2:3e:a9:4d:
                    2c:ec:27:7e:88:f6:54:c0:c6:5e:f6:0f:23:f7:35:
                    50:17:89:cb:c4:6d:34:47:d3:77:90:75:66:cf:60:
                    6d:0f:12:14:59:51:e5:46:ac:68:24:2b:64:f5:dc:
                    52:02:47:dd:2e:e6:5e:0b:7b:42:27:8f:d5:40:0d:
                    ba:72:89:fe:8d:bc:69:43:33:f0:97:e4:a3:a5:2f:
                    6c:05:bb:19:83:9c:2a:4c:e3:63:6a:08:9e:27:32:
                    d0:b4:5a:18:27:70:44:dc:9c:a6:fd:53:65:d9:6c:
                    6a:94:59:fe:1b:0b:07:28:e7:3c:1b:f5:b6:d9:db:
                    09:27:0f:6c:4a:53:92:38:54:da:df:69:3f:59:55:
                    65:55:a6:0c:8e:71:e3:65:46:f8:4e:31:0c:c9:2a:
                    ec:a3:97:80:bb:07:86:98:f9:60:cb:47:f5:87:cc:
                    0d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4E:A4:EC:2A:F1:2E:30:38:00:72:45:60:DD:66:62:4F:1A:45:7A
            X509v3 Authority Key Identifier:
                keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:0e:4e:0c:17:78:c2:7a:3e:7e:72:93:a8:b4:e0:36:c5:f4:
         11:d1:b7:53:df:33:0d:46:2b:bd:21:8f:db:6a:ef:f5:88:50:
         e2:6a:ca:dd:b5:90:9c:6f:0a:af:33:73:e4:79:3f:a4:22:85:
         40:59:14:00:e3:56:18:ea:c2:e9:42:48:d8:0c:37:1a:db:33:
         31:63:64:94:59:43:aa:b6:06:a9:43:08:31:8f:2d:a0:eb:7f:
         fd:5c:ad:fc:05:95:f2:e0:25:98:71:6e:88:2e:29:50:6c:8a:
         ef:ed:2d:4a:64:b8:0c:25:a1:24:b7:39:8d:37:5e:12:6e:78:
         bd:d4:39:b7:f7:f9:a2:64:20:43:8b:ea:09:2a:73:ec:01:78:
         a4:af:31:62:37:bd:69:d7:bd:91:3e:32:03:60:e3:19:22:2b:
         71:e8:3a:4e:a8:f7:00:4c:90:96:9c:14:fa:47:9e:af:40:45:
         68:17:86:7d:59:28:e3:23:f1:10:ee:6a:cb:32:04:f5:ad:7b:
         ad:64:27:c1:7c:3e:88:b8:aa:ac:4d:7d:00:cc:93:99:70:51:
         eb:80:02:99:8d:4c:06:70:df:15:7c:c5:a2:47:04:8b:d9:f1:
         6f:4c:14:65:9d:1d:f5:97:5d:1b:cf:ae:67:7a:f2:49:96:ff:
         2f:6e:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:46:33 2026 by rpki-client