Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa
File:                     63EF8E3C2EA711F1ABA05366B9833773.roa (raw, json)
Hash identifier:          ImHGHDCOBT3VXv7LMMZxz5LNJyB/Eszh72lz6n3f688=
Subject key identifier:   35:8A:53:F7:8E:CE:46:D4:78:4A:E3:EC:6D:C5:DB:BA:19:32:01:58
Certificate issuer:       /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Certificate serial:       09F8
Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa
Signing time:             Thu 02 Apr 2026 15:19:50 +0000
ROA not before:           Thu 02 Apr 2026 15:19:50 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     154320
IP address blocks:        103.151.134.0/24 maxlen: 24
                          103.151.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
                          rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2552 (0x9f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
        Validity
            Not Before: Apr  2 15:19:50 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69ce8915-92eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:8f:9d:b7:64:d1:06:52:30:f0:ee:d8:de:
                    77:02:55:49:0d:e0:90:a0:bd:f6:3a:fa:8f:a9:9b:
                    29:7c:f6:b5:3e:33:d7:c4:e4:9e:f1:f4:2f:4c:c1:
                    90:3f:25:24:82:cb:f4:ee:c8:83:9f:02:0e:c7:8a:
                    01:ab:c0:22:b7:1b:bb:5e:b8:d0:1b:f3:f0:b7:a7:
                    d9:de:31:9d:1a:c8:d8:79:ff:6e:14:5a:99:0f:b6:
                    a3:35:7d:4d:5f:25:2b:21:91:f9:0a:ea:5f:93:b3:
                    58:5c:8d:cf:ae:a5:64:bb:5a:3c:6a:b3:15:33:c0:
                    42:67:da:dd:e9:c4:e5:87:24:f1:cf:bd:54:dd:ae:
                    b5:aa:c5:d0:bc:31:48:51:8d:c2:4b:ec:4d:ce:08:
                    44:35:a5:8e:56:36:ed:94:1e:a2:5d:11:c8:a3:f4:
                    17:24:6b:5e:fd:77:c6:db:97:8d:46:10:00:59:ad:
                    89:48:6d:0e:6a:c9:13:fa:4c:78:22:20:c8:26:c0:
                    87:20:cf:9c:12:ae:5a:59:64:8a:5d:5e:fb:35:a3:
                    6c:a2:4c:6a:a9:cd:4f:fb:e0:bb:64:7f:f1:49:c6:
                    0c:63:8c:ec:9a:4a:0b:35:63:c9:29:35:94:9e:20:
                    81:9d:3e:ec:16:68:3a:07:06:2c:67:87:6b:99:dd:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8A:53:F7:8E:CE:46:D4:78:4A:E3:EC:6D:C5:DB:BA:19:32:01:58
            X509v3 Authority Key Identifier:
                keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:18:de:43:06:0b:76:e1:0b:1c:70:47:c1:23:5d:71:9d:4d:
         c0:1d:d3:d7:5f:64:69:b5:de:bb:3b:9c:e2:a2:01:4a:f1:2e:
         4e:fa:ff:a4:4b:cf:e8:8d:24:3c:20:72:fe:28:15:75:a3:7a:
         c4:b7:af:5c:b0:c3:89:82:e3:c5:60:8a:a5:64:5e:55:d4:77:
         48:81:10:56:56:fc:ba:c0:6a:61:0d:10:c7:8a:c2:a7:5e:d6:
         ef:0c:85:4d:51:fc:d9:b8:fa:e6:b4:52:4b:48:10:f7:5a:27:
         49:93:58:1d:30:a3:9a:34:19:9f:ea:5a:f4:14:e8:89:11:1c:
         c1:6d:31:c5:58:27:db:f2:9e:07:48:eb:ec:09:a7:77:8c:d5:
         0a:ad:ba:28:23:7c:14:00:15:3b:c5:3d:ff:b3:e4:dd:12:f3:
         9d:f5:44:0a:a1:3f:53:56:63:5d:82:3d:44:02:a8:3f:e1:e5:
         70:a5:c3:4d:ca:39:ee:32:8b:14:11:d5:25:97:59:12:08:f6:
         35:3c:4f:92:a6:83:59:11:35:36:13:35:24:16:c8:76:3e:0e:
         c0:49:b2:6e:7c:42:02:7b:63:29:78:a5:fc:e0:e7:f5:38:36:
         ea:46:e8:58:ad:b5:6e:8c:f7:a7:81:15:5c:2a:8f:00:b3:c3:
         58:3e:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:49:20 2026 by rpki-client