Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/9261B5942D7511F0AE6EEE7CC4F9AE02.roa
File:                     9261B5942D7511F0AE6EEE7CC4F9AE02.roa (raw, json)
Hash identifier:          VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=
Subject key identifier:   3E:31:28:3F:85:73:F1:31:F6:2B:AA:49:00:22:89:A6:A6:13:B1:D5
Certificate issuer:       /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial:       0280
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/9261B5942D7511F0AE6EEE7CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:15:37 +0000
ROA not before:           Mon 29 Dec 2025 01:21:35 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138640
IP address blocks:        103.42.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
                          rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 01:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
        Validity
            Not Before: Dec 29 01:21:35 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46629-619f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:21:83:52:72:90:07:2d:41:cb:52:cc:67:
                    ce:b9:00:ff:14:f6:c1:26:64:ff:47:bd:3a:43:e8:
                    59:a3:93:ac:27:8f:78:8a:e4:30:df:79:d2:8c:80:
                    b0:5f:da:46:2c:e9:b5:c8:19:32:37:b3:ed:bb:55:
                    cd:12:c8:c5:bc:6b:38:ec:b9:97:ae:12:7a:56:2f:
                    c9:1d:e6:0d:d8:2c:81:5f:db:6c:e8:58:d6:48:1c:
                    be:f0:a5:94:7f:a5:56:b5:00:41:c7:14:ba:44:7a:
                    81:7d:28:05:3a:0a:4b:93:50:c6:ad:8d:04:89:4c:
                    8d:16:f3:25:f4:63:03:62:16:3b:14:50:3c:53:3c:
                    a7:9d:c2:10:18:91:ce:88:a4:00:e2:47:03:5a:7b:
                    fe:32:a3:09:da:49:14:f7:27:af:73:95:cd:93:74:
                    c4:4e:8a:27:10:bc:a3:1a:8d:ca:40:4a:69:33:60:
                    e1:c5:f0:75:ee:0f:5b:40:e2:6e:95:16:8a:89:6b:
                    55:d5:22:4a:2e:3f:5e:98:10:09:15:57:61:11:1f:
                    f2:0c:c4:01:8c:40:d1:8f:4f:4a:cf:8d:6e:d4:aa:
                    46:cc:fd:14:79:af:3b:c3:05:c5:25:3b:c0:2d:2c:
                    06:c5:77:cf:bc:e8:3c:16:7c:3e:6b:d5:d1:e9:d7:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:31:28:3F:85:73:F1:31:F6:2B:AA:49:00:22:89:A6:A6:13:B1:D5
            X509v3 Authority Key Identifier:
                keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/9261B5942D7511F0AE6EEE7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:5f:30:a5:0f:c7:25:cb:9e:57:86:8b:38:5c:65:e5:c4:5c:
         90:f7:b5:3e:c0:c2:9d:bd:c1:59:80:e3:b8:56:78:64:b8:9c:
         1d:d7:2c:3c:c0:5e:9a:4d:31:19:48:dc:ea:5a:04:e7:9c:38:
         98:6d:e5:31:e2:19:bf:3b:a7:9b:70:4e:52:2a:52:a4:4b:99:
         c5:29:03:6d:c9:43:b4:76:99:db:91:e8:b9:6a:d2:ff:be:93:
         93:df:6a:b7:e8:d3:fe:9b:42:a6:85:bb:8b:14:f2:a4:56:54:
         45:67:45:01:69:a0:a1:02:5a:e0:01:4a:d7:fb:15:b5:65:5a:
         81:e0:0a:e8:b4:f8:fa:01:77:8b:c2:bc:eb:95:9f:27:bf:6d:
         30:15:24:5b:7a:e5:f9:7b:fa:4f:1f:3d:89:7b:73:92:04:81:
         0b:7d:f7:99:04:30:2c:aa:a1:b3:d4:b6:be:b9:e9:70:13:19:
         2e:ba:83:0b:d4:83:7e:bd:fc:75:83:b8:e6:e0:d8:57:67:91:
         6b:56:3c:48:b5:4e:3c:1e:04:05:f2:2e:f5:70:83:f9:9c:b3:
         4b:51:8b:18:bd:01:dd:24:43:dc:2f:1e:86:a0:25:5b:15:7a:
         23:4a:45:62:2a:28:e9:47:71:75:e7:f2:94:d5:88:0c:e7:08:
         68:e6:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:28:11 2026 by rpki-client