Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/41622F82F82E11F0BC7D9928396F56BC.roa
File:                     41622F82F82E11F0BC7D9928396F56BC.roa (raw, json)
Hash identifier:          BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=
Subject key identifier:   23:C9:3B:5F:71:9F:53:FE:72:4A:5A:AA:4D:16:2D:94:F3:72:DA:07
Certificate issuer:       /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial:       0A34
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/41622F82F82E11F0BC7D9928396F56BC.roa
Signing time:             Sun 01 Mar 2026 18:19:18 +0000
ROA not before:           Fri 23 Jan 2026 07:36:40 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        103.207.164.0/24 maxlen: 24
                          103.207.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
                          rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2612 (0xa34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
        Validity
            Not Before: Jan 23 07:36:40 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48325-3a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3c:76:27:bb:61:a3:4f:79:82:d4:49:90:cd:
                    01:5e:60:aa:e0:d5:33:cf:3e:8a:4a:6e:a5:48:eb:
                    e4:b4:d7:5b:6a:76:da:99:1d:e9:c4:fb:0c:d8:63:
                    d0:c8:c5:41:6e:00:7b:0a:d4:97:41:16:05:3d:ea:
                    03:67:93:08:64:40:77:51:0a:b7:e7:d9:ed:bd:58:
                    df:bf:13:fb:b0:a5:43:33:aa:d0:df:53:f8:2f:6c:
                    ad:be:0b:f3:f8:b3:f9:76:fc:f8:e9:11:1b:82:69:
                    d1:7e:4e:87:51:bc:00:e4:0a:20:2e:08:5f:b4:b9:
                    aa:f2:4c:a1:59:89:66:6a:e1:57:30:d9:c3:f9:0c:
                    cc:ff:5f:9e:11:27:7f:12:d1:f5:aa:7e:3b:6e:4f:
                    f2:ba:15:ee:5c:c0:4a:86:79:dd:ca:c2:3e:1a:dc:
                    e7:ab:46:24:58:0d:38:3f:48:08:3a:13:cf:32:71:
                    07:7b:a4:93:2d:51:49:a4:63:34:58:1d:d9:0a:40:
                    fb:f7:59:0f:65:2b:31:68:76:d2:75:94:43:b3:73:
                    90:6d:dd:17:dc:a1:27:ec:5d:7b:13:79:05:30:f3:
                    80:a8:0c:09:e8:65:d8:a4:11:13:af:e2:9d:a5:6e:
                    3d:a7:26:cc:0b:d6:3f:72:7a:7e:69:cf:f4:66:3f:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C9:3B:5F:71:9F:53:FE:72:4A:5A:AA:4D:16:2D:94:F3:72:DA:07
            X509v3 Authority Key Identifier:
                keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/41622F82F82E11F0BC7D9928396F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.164.0/24
                  103.207.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:0e:25:61:0e:67:6c:ad:fc:60:9f:5c:8d:83:ed:bb:6b:67:
         49:80:44:94:ec:d7:f6:56:2f:9c:a7:53:64:6a:e5:3c:ac:04:
         77:be:37:4b:b8:10:28:b6:97:80:56:ed:42:f8:c5:53:22:ca:
         42:3e:e4:d9:fe:8f:a5:86:be:bf:3a:15:8b:59:26:39:66:2b:
         e1:e2:de:53:99:6b:f3:48:c8:bb:1d:63:69:a4:8f:d9:0f:a4:
         8d:2d:ff:ad:b5:ae:6c:0a:94:7a:5d:df:8a:ec:c9:26:ec:98:
         27:6a:9a:d9:30:da:07:f5:6d:7c:9e:92:da:11:14:78:2d:fc:
         5d:c5:40:50:83:a5:cf:3c:54:00:eb:b0:2d:16:db:05:9c:84:
         c7:19:57:6f:38:20:d3:8a:06:89:84:d3:5d:59:0a:30:5f:3e:
         44:b9:99:21:c5:5f:c1:c3:3f:fc:f7:9f:be:85:9b:90:f7:51:
         1e:48:fa:ab:57:da:77:93:4c:71:54:b5:03:66:3e:f2:c6:ae:
         02:7d:06:8a:ab:d7:68:e5:de:19:77:49:27:5f:4a:f8:40:5b:
         5e:5a:b8:8d:12:69:b1:f6:6f:f3:69:2d:6b:f8:28:b8:f5:3e:
         3f:fa:63:bf:e4:ca:1f:00:7b:cc:be:b1:2c:e0:d5:01:a0:35:
         26:4f:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:39 2026 by rpki-client