Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/01A8B084262811EA8269E33EC4F9AE02.roa
File:                     01A8B084262811EA8269E33EC4F9AE02.roa (raw, json)
Hash identifier:          BtTQvQkkCMyORN0/OniWB7TxZ5Yt0iEdn/t0KB8XF1Y=
Subject key identifier:   A9:9D:28:29:B8:B6:34:2A:9B:0D:98:4F:C1:2C:02:CB:70:A4:AF:A1
Certificate issuer:       /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6
Certificate serial:       0C8A
Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/01A8B084262811EA8269E33EC4F9AE02.roa
Signing time:             Tue 28 Jul 2026 19:37:12 +0000
ROA not before:           Tue 28 Jul 2026 19:37:12 +0000
ROA not after:            Sat 28 Nov 2026 00:00:00 +0000
asID:                     138634
IP address blocks:        103.135.37.0/24 maxlen: 24
                          103.150.58.0/24 maxlen: 24
                          2001:df7:e500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl
                          rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3210 (0xc8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6
        Validity
            Not Before: Jul 28 19:37:12 2026 GMT
            Not After : Nov 28 00:00:00 2026 GMT
        Subject: CN=6a6904e8-f5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:47:91:14:9c:51:b7:68:6b:cb:ab:39:3f:
                    7f:20:41:dc:2c:96:bf:a7:33:d0:ce:d5:1d:32:f4:
                    6d:87:41:13:4f:83:74:b4:c2:51:6a:42:d4:63:8f:
                    8e:63:ec:81:ca:9c:f0:37:7a:6f:48:4b:9b:18:fa:
                    fc:f2:dd:f9:89:01:f2:b4:01:3e:95:40:11:18:ea:
                    ca:9d:0e:d2:7c:ff:0d:f6:4a:76:8f:89:34:4a:79:
                    bf:8b:38:63:5a:b2:dd:18:8e:1c:81:31:0e:1d:d8:
                    ca:f4:c3:f1:69:93:5d:b0:33:cd:db:46:47:d8:c1:
                    99:72:db:8b:f3:34:59:d5:f2:8c:4c:57:9b:55:ee:
                    b8:b2:17:cd:ea:34:26:77:40:69:b1:91:4b:48:b8:
                    ea:fb:2e:bd:1a:9a:e7:6e:58:e7:e0:ee:ae:2b:f6:
                    37:66:a4:47:73:53:ba:cf:42:df:fe:71:f3:79:d9:
                    aa:a9:e9:97:cc:8f:f8:0d:21:e6:6f:a6:8d:13:15:
                    4e:b3:86:08:6c:c5:e7:2e:8b:81:0e:38:9a:56:b7:
                    b3:43:5b:cf:d8:bc:01:08:20:90:5a:8e:96:a2:4a:
                    2f:25:99:40:d0:66:9e:e5:de:74:f8:56:b6:21:b4:
                    86:ef:84:a0:23:4a:03:f3:71:85:ee:3c:60:dd:9a:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9D:28:29:B8:B6:34:2A:9B:0D:98:4F:C1:2C:02:CB:70:A4:AF:A1
            X509v3 Authority Key Identifier:
                keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/01A8B084262811EA8269E33EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.37.0/24
                  103.150.58.0/24
                IPv6:
                  2001:df7:e500::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:ed:01:7f:9c:79:74:07:fc:76:6f:7e:0d:6b:72:1d:bf:81:
         1c:b0:eb:ae:d5:2e:84:99:1e:e5:34:e1:0f:f6:cb:eb:5c:69:
         7e:f0:38:b1:40:75:21:d5:a8:33:84:28:09:e0:74:6c:9a:22:
         af:01:b3:59:02:6a:f9:3a:4c:e4:e0:49:01:4d:4f:32:f3:47:
         fa:63:54:7d:8b:a0:3f:d9:16:48:1f:52:9d:0a:98:3f:8c:ab:
         88:9b:f4:e6:40:7f:9e:27:e1:90:bf:0b:3e:ac:4b:5f:f3:2f:
         23:fa:36:b6:1d:e8:92:ca:4a:c9:f2:53:57:3a:72:c0:c8:4c:
         15:40:19:78:f0:e0:a3:a7:b2:d2:93:3d:fe:ee:47:dc:57:13:
         ee:e1:41:fd:ca:32:05:92:70:5b:1c:82:76:7f:cf:47:4e:08:
         d9:df:9c:5b:f9:ee:1e:bc:e4:3a:dd:7b:96:ff:5b:4c:44:f1:
         ee:87:94:66:1e:af:72:d9:7d:3c:16:3d:ce:ce:01:b0:48:d5:
         ed:c2:83:c3:4d:8f:67:36:0b:99:d6:1d:22:5b:bb:36:14:06:
         5d:e6:d0:68:69:e3:bf:94:87:63:9a:9d:75:7c:4e:af:e4:04:
         f7:36:04:0e:c2:cf:b6:40:b8:f6:4f:25:86:81:6b:b9:6d:4b:
         69:99:34:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:12 2026 by rpki-client