Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/8F8C10F021B511F192BB9899183D8C67.roa
File:                     8F8C10F021B511F192BB9899183D8C67.roa (raw, json)
Hash identifier:          Qspe0e/jD5ftFW6k2VBzPuJWxT8JG0kniB7v/aJxi4Q=
Subject key identifier:   40:96:0A:FC:70:0A:91:9D:2D:4E:1F:CE:6C:7C:AC:A6:A4:F6:65:A9
Certificate issuer:       /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Certificate serial:       63
Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/8F8C10F021B511F192BB9899183D8C67.roa
Signing time:             Mon 27 Apr 2026 08:42:47 +0000
ROA not before:           Mon 27 Apr 2026 08:42:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138941
IP address blocks:        103.137.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
                          rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
        Validity
            Not Before: Apr 27 08:42:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ef2187-eb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:10:71:93:53:0a:9a:d4:de:6d:c6:7e:c1:73:
                    7a:ba:ff:e7:d0:d4:5a:d6:c9:b8:a4:f8:c2:bc:de:
                    9a:31:c4:8b:15:8b:d8:7d:d0:27:86:53:0e:89:9d:
                    11:e2:98:0a:64:b6:de:86:42:f1:03:c5:03:5d:d5:
                    82:33:ce:bc:98:18:f5:5b:f3:69:08:9a:7d:df:10:
                    ed:75:79:a7:7b:fe:7e:b6:38:b4:1a:4f:e7:65:04:
                    17:4d:6b:b8:a4:b1:37:c0:21:e1:f8:13:7a:ef:93:
                    e7:fe:df:8a:e7:74:3a:af:15:72:f8:84:45:24:2f:
                    cb:c2:1d:c7:16:67:65:84:6c:b2:1c:05:8f:6b:22:
                    b4:3f:53:b1:f0:9c:8a:2e:87:00:64:c0:50:c7:ad:
                    15:d2:2f:70:89:ed:25:01:e9:39:8c:02:f6:73:6c:
                    b6:6b:3f:95:a8:79:ec:1d:9e:d3:ba:19:65:e9:8a:
                    4c:47:3e:cc:85:2d:8a:b9:1e:fa:1f:6f:97:98:23:
                    18:38:82:ca:b6:c7:55:98:0c:d6:53:86:6d:63:1d:
                    b3:80:61:38:51:c8:d9:ad:56:5b:94:a2:ad:99:4b:
                    9c:28:85:d0:a8:c9:13:ba:fe:7e:fc:d8:85:c2:ab:
                    21:dc:a1:52:aa:cc:bf:29:92:98:60:2b:26:e4:5f:
                    58:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:96:0A:FC:70:0A:91:9D:2D:4E:1F:CE:6C:7C:AC:A6:A4:F6:65:A9
            X509v3 Authority Key Identifier:
                keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/8F8C10F021B511F192BB9899183D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:d3:7b:2c:47:63:c8:a8:cc:42:6c:c8:1b:a7:69:e1:67:79:
         ad:a0:a4:9b:93:42:b7:1f:a4:d1:51:3b:3f:9a:37:e9:f5:3a:
         cf:41:cc:ed:d7:f1:15:b5:47:ac:74:28:a9:79:b1:cf:3f:8e:
         35:7d:43:1c:d5:99:a4:98:9e:d2:3e:b2:74:20:b4:28:6c:ce:
         fb:1f:73:76:2b:f3:d2:52:76:fe:c8:57:95:8c:1e:bb:77:c2:
         6d:88:2c:ce:6e:ea:4d:c5:b7:24:89:64:d4:63:a5:68:0d:2a:
         27:c3:0d:4b:cc:f5:45:f2:18:39:1d:19:11:4f:5f:12:2c:ef:
         2b:25:2f:d5:f4:76:6b:09:9b:71:c0:46:1d:d4:32:0c:bf:70:
         11:dd:77:75:28:9f:34:1d:ea:80:aa:52:67:8b:22:4f:bd:d5:
         e7:64:99:9b:7c:0c:00:b1:c8:a9:95:4b:e3:b4:6c:84:d9:e8:
         dd:47:4b:6b:5e:d6:07:d1:44:1e:2c:f0:5d:c9:63:24:1f:c0:
         40:29:62:6b:c9:08:a4:a3:ee:02:30:f9:6a:9e:b9:70:cc:99:
         de:6a:02:67:c2:0f:2b:41:3b:d0:66:59:ca:09:12:2d:c8:9d:
         0c:db:f9:f5:a0:96:19:03:6f:ec:d0:3a:4c:5e:a1:01:30:64:
         1f:84:a9:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 11:40:15 2026 by rpki-client