Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/9C524DA858CE11E891382260C4F9AE02.roa
File:                     9C524DA858CE11E891382260C4F9AE02.roa (raw, json)
Hash identifier:          MGqf0bAb49+pYXVKIaFkkJi0+c+eq1frALstgizB3/M=
Subject key identifier:   DA:5B:D6:DC:A7:6A:CB:EA:0F:6C:0C:D5:AF:2E:B4:EF:45:79:B7:45
Certificate issuer:       /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Certificate serial:       1579
Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/9C524DA858CE11E891382260C4F9AE02.roa
Signing time:             Sat 28 Mar 2026 17:24:20 +0000
ROA not before:           Sat 28 Mar 2026 17:24:20 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     136380
IP address blocks:        103.86.56.0/23 maxlen: 23
                          103.86.56.0/24 maxlen: 24
                          103.86.57.0/24 maxlen: 24
                          2407:2bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl
                          rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5497 (0x1579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127673, serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
        Validity
            Not Before: Mar 28 17:24:20 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c80ec4-185d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:95:22:87:63:48:85:79:6f:1b:4c:9a:d1:c5:
                    4d:f4:32:c0:84:de:07:a6:a6:63:42:a5:6f:90:63:
                    22:a2:4e:f7:dc:cb:2c:a5:e4:5f:71:26:aa:47:ad:
                    ac:cb:bb:f8:ff:67:cf:9b:18:16:00:01:e4:e5:4b:
                    c6:d5:c4:bc:25:e2:d6:55:2d:2b:68:43:21:a9:5c:
                    cd:75:42:d9:d5:9f:1b:ca:4f:6b:ad:78:f1:a8:42:
                    c1:af:85:8c:9f:62:75:36:f3:5f:65:86:ea:36:13:
                    e9:aa:c2:48:2d:d7:60:ee:c8:d7:2b:8f:a9:01:7f:
                    1d:3a:5a:ce:fb:51:1e:57:84:c7:59:05:2d:98:db:
                    a6:20:eb:9a:ca:ab:05:93:0c:b3:c1:dd:04:c4:19:
                    d6:88:9f:32:f1:0a:f6:aa:dd:c5:b0:58:ee:0e:ad:
                    95:db:52:03:d9:00:50:51:02:20:dc:34:d5:22:01:
                    9b:fa:1c:56:02:a7:14:c0:58:46:8e:1e:74:0b:4e:
                    28:95:29:3d:fc:de:5d:64:ab:45:b1:e7:56:70:97:
                    1b:d2:bb:f8:cc:9c:c5:35:c9:0a:48:c8:de:d1:7b:
                    1b:f4:6a:be:56:cb:ef:d1:db:63:ef:08:17:05:82:
                    83:6d:38:30:1c:d0:da:eb:32:dd:70:06:cd:38:a7:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5B:D6:DC:A7:6A:CB:EA:0F:6C:0C:D5:AF:2E:B4:EF:45:79:B7:45
            X509v3 Authority Key Identifier:
                keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/9C524DA858CE11E891382260C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.56.0/23
                IPv6:
                  2407:2bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:60:3e:be:f6:38:90:4b:21:6a:6a:2a:82:61:ad:38:8e:
         ce:f9:1c:2c:3c:f9:4e:da:e5:9e:6c:f1:11:c2:27:9f:ba:9d:
         bf:6a:32:b3:aa:31:e9:cd:cc:61:e2:aa:65:1e:64:c3:b5:53:
         04:b7:60:67:e4:9e:68:b6:2f:54:7c:a5:3a:c3:19:fd:07:5f:
         cd:00:8a:cb:fa:ef:9f:58:20:89:85:47:72:d9:81:14:a0:a5:
         f3:c4:c3:79:9f:87:00:4b:d7:3e:66:20:fc:87:24:a5:d0:8f:
         da:36:76:79:4e:ea:47:77:2a:e6:cd:0f:24:3d:c0:4e:60:49:
         f4:3b:a2:28:b6:c3:ad:30:51:10:50:cf:cf:12:04:22:9a:09:
         5d:dd:fe:34:14:5d:d0:39:53:73:40:5a:6a:e9:bd:1a:fa:1b:
         94:ca:00:8b:3f:ce:4f:fe:54:d1:d0:43:b9:a4:f0:87:60:7c:
         ea:46:72:00:21:84:de:41:b9:d6:4b:8d:11:9f:e7:71:ee:95:
         65:bb:d4:37:e7:32:22:79:51:cb:f1:ad:f3:89:2b:91:5a:32:
         e3:1c:f8:76:ed:f6:de:74:e6:f5:0f:dc:f6:0a:a0:3a:0e:f5:
         27:a5:0c:af:34:e3:73:43:fe:88:ff:f2:4c:51:5c:1f:51:f9:
         61:02:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:07 2026 by rpki-client