Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/F1F4D35A43AF11F1A5D478AA97833773.roa
File:                     F1F4D35A43AF11F1A5D478AA97833773.roa (raw, json)
Hash identifier:          VI3eeJQdt+jfEigHcau2uDPGNXCcOfzwKNM66WXgDf4=
Subject key identifier:   44:76:E2:63:2C:E4:39:E2:5A:81:DA:7D:B1:C3:42:8F:F1:37:2D:93
Certificate issuer:       /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial:       0477
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/F1F4D35A43AF11F1A5D478AA97833773.roa
Signing time:             Wed 29 Apr 2026 09:43:58 +0000
ROA not before:           Wed 29 Apr 2026 09:43:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138432
IP address blocks:        103.181.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
                          rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1143 (0x477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
        Validity
            Not Before: Apr 29 09:43:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69f1d2de-01b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:23:7d:f7:15:d2:e5:a1:f5:31:9c:dc:e0:
                    91:6b:b5:4d:12:f6:09:eb:3a:d0:82:40:32:80:e7:
                    99:30:26:b1:f4:42:39:66:7b:94:18:b6:94:99:cc:
                    7e:b6:d3:02:bb:84:1c:f5:1b:80:f9:3c:b6:70:a7:
                    28:dc:95:20:2e:90:e0:25:8b:4e:3e:34:86:89:90:
                    ad:04:f9:e0:b1:de:4c:4b:80:47:40:8d:8d:91:4f:
                    0e:43:4f:f9:2f:3c:61:67:69:ea:3d:04:73:33:bc:
                    9e:94:27:1b:54:8c:52:c9:ad:63:cb:95:ad:ba:1b:
                    f9:45:ac:71:41:2e:6c:28:7c:07:08:73:e7:4d:77:
                    aa:f7:bc:bd:d0:8e:03:cc:a1:d0:45:da:22:b4:aa:
                    c3:62:9d:10:81:9a:d9:c0:2e:60:7f:e3:bf:91:2e:
                    3a:8b:45:ed:de:51:b0:2f:be:e6:23:bf:23:c5:f5:
                    25:66:4e:73:ae:a7:87:39:61:35:5d:79:a5:18:14:
                    3b:d2:fc:9b:8a:79:2a:54:1f:f8:7b:85:17:cc:7d:
                    71:28:e2:5f:a1:ab:ec:07:11:0a:9f:b8:33:75:79:
                    d5:16:c9:3a:18:4b:86:11:90:da:cd:ed:c3:31:cc:
                    05:c6:59:6c:c2:54:9f:bf:0c:1c:0b:f6:cf:24:2c:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:76:E2:63:2C:E4:39:E2:5A:81:DA:7D:B1:C3:42:8F:F1:37:2D:93
            X509v3 Authority Key Identifier:
                keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/F1F4D35A43AF11F1A5D478AA97833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:80:8a:fb:a5:52:17:b2:a3:2c:5e:0a:1e:0b:94:3f:2b:d0:
         f4:11:27:7d:ef:6e:b8:cf:22:c6:33:c2:04:2b:21:20:73:e8:
         3a:68:70:ac:10:bb:00:5e:be:f2:54:ea:31:2a:a7:f0:ff:bd:
         6a:1e:db:59:7e:d9:cc:b0:32:15:c1:cd:76:4a:f9:0b:be:16:
         3e:9e:4f:11:c2:91:09:a5:2d:b3:cf:c7:40:b6:e9:5a:1d:41:
         f1:74:37:a6:2d:4f:b4:21:31:f0:f5:dd:fd:9b:80:e4:af:1a:
         45:4d:c2:e6:ea:0e:95:c9:75:6b:f0:d9:e7:19:8d:fc:65:bf:
         9c:35:f3:d1:3b:67:60:eb:44:86:06:be:e3:ff:79:c5:77:4f:
         fe:17:81:93:7a:af:94:a6:fb:71:1a:31:5c:c7:ce:c7:56:02:
         ac:c9:10:40:57:8f:c0:c2:e1:a4:23:71:d1:4b:9b:ae:92:e1:
         87:25:11:3d:da:b7:84:eb:ae:4b:a2:47:76:1f:e5:ce:a4:4c:
         eb:8c:f1:82:30:b0:af:b7:b6:b0:2d:15:13:69:b4:13:ca:9a:
         53:64:3a:d3:5d:a1:54:78:e0:8c:17:84:e1:40:f5:bd:62:b1:
         09:75:2c:66:e2:02:27:84:11:81:e7:9a:c1:50:de:76:a9:58:
         04:06:82:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:14 2026 by rpki-client