Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/7B86E2347F0711F0B9016941C4F9AE02.roa
File:                     7B86E2347F0711F0B9016941C4F9AE02.roa (raw, json)
Hash identifier:          RJ2sx6p2KIpfuzWkhVi9i2Tb6z+LWx+fgMZmXi47440=
Subject key identifier:   19:F5:0F:68:57:7F:13:D0:87:AD:96:CF:0F:AE:D0:E9:35:6E:74:D1
Certificate issuer:       /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial:       75
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/7B86E2347F0711F0B9016941C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 07:45:03 +0000
ROA not before:           Tue 03 Mar 2026 07:45:03 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     150706
IP address blocks:        103.147.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
                          rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 06:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
        Validity
            Not Before: Mar  3 07:45:03 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a6917f-509b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:88:31:4c:90:89:c9:9d:e2:8b:9e:ca:16:
                    27:1c:74:05:24:37:f0:66:e7:ac:f1:7c:0a:87:fd:
                    42:87:59:40:4d:d1:68:10:be:61:c8:1c:70:5f:82:
                    43:61:55:46:77:78:8d:db:a3:72:81:55:93:ad:2f:
                    ef:be:b3:f5:80:73:18:e8:27:c5:44:34:f6:13:04:
                    4b:52:30:d2:43:19:2c:8e:42:75:7a:9a:4c:81:a5:
                    cd:06:5c:7a:29:3b:dc:5c:79:1f:1f:7b:1a:a1:1e:
                    c5:6a:5f:2d:e3:e2:12:e0:d5:09:66:88:de:64:4b:
                    18:40:5a:8f:d3:5c:c7:c8:b0:90:14:cd:f7:3b:23:
                    65:e9:33:58:ee:fd:3d:27:7d:71:0d:f4:e5:62:d5:
                    b4:6d:bb:9e:66:18:df:63:58:60:75:39:c9:84:6a:
                    3f:42:9f:4f:22:d3:37:fa:53:fa:ff:97:ae:e2:71:
                    cd:06:90:f8:b7:c8:0b:f7:7a:e2:f8:5d:e6:9a:51:
                    a6:d0:f9:60:d7:68:9b:3c:25:17:2d:15:42:7b:60:
                    f4:79:60:43:1b:15:2b:78:10:ac:24:32:6f:7f:75:
                    88:3b:53:3e:fe:0b:5a:8a:b8:4e:01:5b:70:7f:2c:
                    d9:d8:b3:da:0e:eb:6c:67:38:4b:d8:9a:b4:05:aa:
                    86:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F5:0F:68:57:7F:13:D0:87:AD:96:CF:0F:AE:D0:E9:35:6E:74:D1
            X509v3 Authority Key Identifier:
                keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/7B86E2347F0711F0B9016941C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:06:46:89:80:5c:4b:b6:31:61:9f:46:d3:97:9a:21:2a:66:
         c8:6c:a4:19:89:97:a4:8f:67:6f:b3:da:fb:e2:7e:3f:67:25:
         c5:eb:d5:e7:32:ad:a2:58:2e:04:41:ff:dd:22:55:92:31:e8:
         95:81:6c:79:b5:c5:6a:64:7c:32:1b:7b:e1:55:dc:9f:99:f4:
         be:87:a2:a6:90:75:06:84:ba:a6:c4:f9:20:a0:47:27:e3:77:
         12:d9:d0:e9:a2:96:60:2e:07:b0:fc:e7:dc:4b:7f:5d:f0:fc:
         15:68:8a:50:9c:79:6d:70:98:75:03:82:51:8e:0f:de:5c:c2:
         6a:4a:0a:f8:f7:2b:4e:ce:28:40:a3:13:40:98:22:b2:c7:3b:
         94:ba:73:ff:ef:e8:1d:df:37:cc:20:44:71:10:60:33:40:b4:
         9b:a3:56:5a:bf:03:0f:35:4c:7e:63:63:0f:78:b5:c1:ad:9a:
         92:56:04:64:6e:ca:11:3c:f8:8f:8e:de:53:aa:0f:e4:11:e5:
         42:2f:0c:4a:a5:fe:94:62:84:f1:7a:45:d0:95:8e:f8:b4:41:
         df:73:41:0c:19:36:c6:87:1b:8d:96:99:7c:c1:25:23:a6:7b:
         d5:78:2a:a4:d2:7f:a2:8e:88:0c:2f:d4:81:f1:c3:b8:67:6f:
         04:e5:7e:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 6 09:58:27 2026 by rpki-client