Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C4149072C8FF11F0AC8AE779C4F9AE02.roa
File:                     C4149072C8FF11F0AC8AE779C4F9AE02.roa (raw, json)
Hash identifier:          4JSxAQIunOBygnnclEHW/aZY/r5nkwq9OMPvfsT6+0g=
Subject key identifier:   46:40:A5:7C:58:54:F1:4B:4D:7C:14:C4:93:2A:41:B6:61:B0:F8:DD
Certificate issuer:       /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
Certificate serial:       0336
Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C4149072C8FF11F0AC8AE779C4F9AE02.roa
Signing time:             Thu 01 Oct 2026 01:49:48 +0000
ROA not before:           Thu 01 Oct 2026 01:49:48 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     401783
IP address blocks:        103.120.22.0/24 maxlen: 24
                          103.120.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl
                          rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC
        Validity
            Not Before: Oct  1 01:49:48 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abdbc3c-1155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1a:3c:9d:59:c4:e9:8d:10:5d:61:90:c6:56:
                    b0:d4:8e:ff:c1:a7:b7:1e:92:aa:1d:ae:cc:c2:69:
                    0e:77:0c:21:1b:60:45:66:c6:e1:26:c9:e1:54:36:
                    4f:33:3b:b2:e9:a6:c6:08:7d:d0:e2:c2:cf:e6:b1:
                    cd:9b:50:2c:55:aa:7a:80:0e:de:c5:50:c3:8e:b7:
                    52:99:72:b5:1b:59:00:42:71:d8:57:2f:e3:5c:1c:
                    2e:ac:6c:3d:9c:0e:5c:c1:23:8b:70:aa:0a:f1:5d:
                    d5:ed:dd:94:19:27:1d:b6:1c:26:11:90:00:46:c2:
                    43:df:bc:53:a0:cf:ef:3c:f6:7b:9d:b0:ec:d1:f5:
                    02:87:8e:3b:93:c4:03:2d:55:ea:3b:46:09:82:5d:
                    64:a7:a9:30:02:33:9a:e1:3e:48:fa:26:c0:39:e7:
                    47:ca:c5:80:cd:9d:e2:35:2a:10:b4:a4:d9:dd:87:
                    01:72:30:14:32:c4:42:bd:64:e7:66:75:ed:c2:06:
                    6f:8a:4f:cd:31:e3:81:86:50:66:5a:38:03:2e:c9:
                    cf:90:d1:e2:3d:02:16:12:8e:aa:7b:9f:0d:30:ae:
                    c5:ff:ec:d5:11:e5:b4:62:1f:ed:60:60:7e:08:0c:
                    49:01:62:e5:3d:f3:2b:7e:74:9b:1d:e7:89:f1:b7:
                    50:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:40:A5:7C:58:54:F1:4B:4D:7C:14:C4:93:2A:41:B6:61:B0:F8:DD
            X509v3 Authority Key Identifier:
                keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/C4149072C8FF11F0AC8AE779C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:a1:16:95:22:46:ce:f4:92:14:7b:3e:21:0b:87:4f:b9:da:
         89:23:c3:85:dd:7c:ce:4b:54:f9:81:2c:bd:4a:78:f0:7f:cb:
         0c:ca:2c:50:c5:b1:eb:67:d3:17:80:e3:ae:b5:d5:43:30:b8:
         07:93:35:a1:1b:40:55:d0:31:9b:51:d7:10:1b:a2:87:ea:a4:
         85:c0:fa:b5:52:80:19:14:4a:c7:89:eb:b5:20:0b:fa:22:09:
         02:df:ae:86:87:59:49:bb:e2:10:30:67:0b:18:d1:b5:10:28:
         9f:06:68:85:c8:01:04:63:e2:0b:74:2a:e4:6a:2f:90:d1:32:
         96:ca:e1:ea:42:18:b1:43:aa:81:3d:fd:c2:5e:ab:76:74:ae:
         c3:2a:40:7c:48:8d:fc:16:37:41:5c:7d:ba:d4:c0:ab:da:e4:
         8a:7e:88:64:bf:69:55:02:fe:9e:25:64:95:52:42:00:bb:76:
         68:90:16:e6:ad:bd:c8:e8:6f:9c:74:22:53:3a:5a:7b:d4:ed:
         04:d6:e5:f8:93:e3:51:f9:55:a5:7f:67:f9:9a:a6:f6:d3:f3:
         6b:34:b0:7a:26:2d:59:19:2e:80:36:88:82:79:ae:87:45:1b:
         b8:7e:8f:4c:06:82:3e:1f:a0:2e:94:02:d4:78:0b:6d:3c:e5:
         2e:0b:4d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:47:15 2026 by rpki-client