Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/49C3A0F43AAD11F18ABD7390C4833773.roa
File:                     49C3A0F43AAD11F18ABD7390C4833773.roa (raw, json)
Hash identifier:          M3Bb6K66672mLJWoFirlzgaQZknuy9ibLFZWuZIc970=
Subject key identifier:   BE:F2:31:44:F5:3A:56:D4:C2:25:B4:37:86:09:D9:2B:F8:5E:D3:8E
Certificate issuer:       /CN=A9110B36/serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
Certificate serial:       02
Authority key identifier: 36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/49C3A0F43AAD11F18ABD7390C4833773.roa
Signing time:             Fri 17 Apr 2026 22:32:17 +0000
ROA not before:           Fri 17 Apr 2026 22:32:17 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134818
IP address blocks:        103.23.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl
                          rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 08:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110B36, serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
        Validity
            Not Before: Apr 17 22:32:17 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69e2b4f0-9732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:f1:3a:20:64:30:17:b3:32:cc:f1:38:07:
                    3a:8c:60:3a:fc:df:b8:6f:ff:35:44:02:8d:c6:38:
                    7a:ee:42:7c:96:9a:73:74:7d:9f:d6:9f:0f:9a:28:
                    fe:d1:c1:08:d6:d0:57:3b:54:1e:f1:ee:55:50:9e:
                    69:09:91:18:fc:48:42:b4:c0:cb:fc:45:53:fb:1a:
                    68:cb:54:14:00:79:54:74:9f:e0:2b:ef:9f:d9:19:
                    0d:44:dc:4e:b5:aa:6b:e8:42:b1:99:41:1d:a7:ea:
                    0e:f0:76:b1:54:e4:1c:3b:15:0a:4a:d5:e6:d0:f2:
                    51:b8:cd:05:f2:47:78:93:05:31:88:7c:54:63:47:
                    2f:11:09:08:bb:71:1b:3f:6a:d1:c9:a2:a8:14:80:
                    1b:1f:84:19:52:47:bf:2c:de:1f:05:bc:e6:d1:0c:
                    6d:5a:4a:d0:f9:74:5c:f5:32:45:42:11:3f:90:2e:
                    36:01:d8:63:51:70:65:e4:c2:75:23:fb:3a:03:e9:
                    b6:05:8c:8f:c4:9d:e5:76:f0:2f:7d:39:5a:6d:2f:
                    16:f5:54:ff:44:31:09:9a:ee:67:ea:f5:2f:fa:ba:
                    a2:61:3d:a5:ab:44:d0:d9:51:d3:7c:da:b1:b0:55:
                    bc:7b:49:0f:34:8c:fb:8c:81:a3:df:19:07:6a:9c:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F2:31:44:F5:3A:56:D4:C2:25:B4:37:86:09:D9:2B:F8:5E:D3:8E
            X509v3 Authority Key Identifier:
                keyid:36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/49C3A0F43AAD11F18ABD7390C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:ae:5b:5e:db:5d:4f:e5:20:5f:32:0e:cd:f4:47:8c:64:
         a1:14:18:f0:b5:24:99:1c:66:ef:f6:dc:c2:70:7f:5c:65:39:
         58:c9:2b:34:de:46:44:f4:41:a1:4c:74:11:16:b0:ac:89:ad:
         80:b8:80:6e:25:92:81:a8:42:89:53:c5:cb:bc:2f:9b:46:f2:
         e9:fc:03:9a:29:4e:bc:21:15:2a:d3:35:54:a1:95:67:8b:a2:
         f5:07:11:7b:31:3f:f6:62:e9:5e:6d:90:af:d2:82:b7:a0:7e:
         20:86:f2:d6:40:f2:57:a7:8a:8d:4d:dd:0c:20:aa:e6:3d:b3:
         ab:75:4d:5d:70:65:a4:ce:39:ed:14:6d:49:ba:49:e9:6f:c6:
         a2:b0:b9:40:c2:8f:3f:9d:2d:0b:56:8f:40:b4:dc:39:c2:81:
         d3:fe:81:ec:d2:ec:ec:f6:ab:e8:0b:e4:f9:c4:4e:85:65:b2:
         51:17:54:86:3c:c0:56:9f:bb:7f:ea:6e:47:53:54:22:9f:88:
         11:52:ff:17:8b:0c:74:0d:d7:30:e4:c1:b1:e8:cb:69:db:64:
         57:37:3f:aa:de:42:b2:5b:1e:a1:40:80:99:45:38:08:85:7b:
         f8:9c:9a:2a:3a:6a:f2:77:e8:66:cd:d5:3c:47:55:a1:ae:50:
         7a:f7:58:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:49:22 2026 by rpki-client