Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/297C7A6A3D4011F1B969C11BA0833773.roa
File:                     297C7A6A3D4011F1B969C11BA0833773.roa (raw, json)
Hash identifier:          Akfx5AbmqvjmZDuBriT/4TdCVZGAI91Zo1oNzA3wJSk=
Subject key identifier:   AB:7C:71:29:90:92:C2:B9:D9:74:95:84:32:C4:E0:5F:74:74:FA:CC
Certificate issuer:       /CN=A9110B36/serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
Certificate serial:       09
Authority key identifier: 36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/297C7A6A3D4011F1B969C11BA0833773.roa
Signing time:             Tue 21 Apr 2026 05:08:41 +0000
ROA not before:           Tue 21 Apr 2026 05:08:41 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4771
IP address blocks:        103.23.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl
                          rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 08:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110B36, serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
        Validity
            Not Before: Apr 21 05:08:41 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69e70659-e89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:c4:66:38:e4:1b:6f:f0:3c:1d:44:b7:c7:
                    ca:dd:93:cc:85:ba:0c:74:0c:43:89:ad:22:8e:7e:
                    74:42:97:5f:b7:8c:ca:64:e6:f6:93:48:88:95:3b:
                    07:02:0d:8a:66:06:9e:5e:1e:43:a5:34:33:c8:c1:
                    db:51:35:e5:64:9b:e9:73:7e:cf:78:d9:bd:f8:d9:
                    ad:2b:8e:6a:da:48:54:82:69:a6:d9:27:7f:5a:ea:
                    66:67:f6:f7:01:11:8b:86:a4:b6:8c:6e:ca:2b:98:
                    5a:d8:bd:65:d9:2a:0a:4d:82:4a:4d:5a:0f:51:9c:
                    ac:2d:ac:5b:75:07:f1:9b:84:71:61:1a:31:31:59:
                    cb:95:37:86:71:ad:d6:bb:84:47:5f:6e:d5:3a:dc:
                    2b:a4:cd:33:4b:0d:f3:fa:1c:6b:cb:46:7d:dd:a9:
                    a5:88:9f:c9:7f:ff:b1:19:8b:6a:bd:9d:65:c2:84:
                    44:38:1a:53:26:35:35:64:d6:28:58:a4:6a:17:e1:
                    2c:f7:23:b8:55:6d:be:d2:de:7e:b4:90:f8:74:3b:
                    a5:a6:07:d6:76:47:77:c0:e7:96:f4:db:0d:94:ee:
                    5c:9b:6e:46:99:d0:66:e7:40:5c:ce:58:87:40:cb:
                    b4:b4:6a:eb:7a:60:7f:ef:eb:1d:d3:b3:6d:9a:9f:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7C:71:29:90:92:C2:B9:D9:74:95:84:32:C4:E0:5F:74:74:FA:CC
            X509v3 Authority Key Identifier:
                keyid:36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/297C7A6A3D4011F1B969C11BA0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:ff:9a:9a:58:97:bb:d7:8e:b7:75:0b:e1:73:a6:c1:0d:
         45:9b:99:f5:4d:d4:34:73:67:cd:3a:9b:f3:17:f0:9b:c0:78:
         13:40:2a:54:91:08:4c:34:50:5c:31:bf:65:b4:b5:a0:e2:2b:
         7e:77:0e:49:ac:cf:ec:08:85:8b:56:d6:cd:aa:10:88:ea:7e:
         65:f6:1d:fb:05:21:29:88:9d:1f:75:fc:14:e8:ad:49:a4:ba:
         d0:a9:aa:61:24:c9:4a:eb:45:bf:0c:24:14:13:cd:57:cb:4d:
         66:25:a0:c8:a0:97:98:62:03:22:b3:81:e2:6e:a4:18:38:7c:
         04:8f:ee:d9:82:5a:c7:6b:32:78:d6:2b:29:13:db:76:4c:ea:
         36:54:e3:49:cf:c4:e6:4c:f0:21:c4:58:45:1b:95:75:a0:49:
         1c:01:e8:18:ce:ae:d6:30:3a:d3:53:11:5a:ba:e0:46:5d:00:
         7a:50:30:83:61:8f:c0:21:f2:70:91:84:7d:23:b8:73:3d:67:
         d0:38:61:4a:46:e7:e2:f4:d6:df:1e:bc:5c:e0:1a:24:83:1d:
         a3:7e:d2:1c:ce:b4:b2:1e:db:14:44:4a:55:79:28:2b:31:1a:
         77:27:97:5d:d4:94:2a:a1:7b:88:f2:4b:08:8e:1d:31:d9:b8:
         a7:3e:79:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 22 02:12:54 2026 by rpki-client