Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa
File:                     3F6EE8E42D4211F09E0C422AC4F9AE02.roa (raw, json)
Hash identifier:          8QPHRn8irHtyPflJX7FXyll2eB+IKwt/6uDtxAHI16I=
Subject key identifier:   8B:9B:01:6E:70:FC:F2:88:2F:DA:86:92:20:6F:F0:55:20:DB:0E:8E
Certificate issuer:       /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Certificate serial:       0270
Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 02:34:11 +0000
ROA not before:           Fri 03 Apr 2026 02:34:11 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     150728
IP address blocks:        103.72.199.0/24 maxlen: 24
                          2001:df3:c740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
                          rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
        Validity
            Not Before: Apr  3 02:34:11 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf2723-af9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:1f:62:7e:50:19:50:af:16:21:09:f9:7b:
                    ed:3b:14:f4:57:89:1d:c8:a5:02:87:05:67:c7:6a:
                    50:58:48:bf:80:81:04:6c:10:93:69:8a:53:a6:50:
                    8c:8d:02:83:3b:82:81:54:78:da:33:39:19:1c:13:
                    83:f1:80:74:d3:37:2e:1d:05:f8:23:f4:35:ed:5d:
                    b8:84:3b:77:7d:d8:cd:c6:34:7d:fb:83:07:f9:8b:
                    95:bc:33:55:a0:17:46:5b:94:6f:f5:5f:48:f4:16:
                    64:ca:ce:1a:20:5d:f4:87:93:54:28:99:cf:fe:b2:
                    b5:c4:d1:d9:c2:d1:34:64:d6:9f:3c:28:e9:27:18:
                    62:a2:40:52:77:1c:8e:15:56:c0:38:1f:ea:35:c7:
                    15:4a:49:b4:fe:67:11:60:60:69:1a:8e:7a:32:c2:
                    bd:f6:79:0d:f3:33:f3:fb:24:85:73:e9:da:6c:ee:
                    ed:58:68:f9:e1:5e:53:3d:80:88:14:c8:9c:df:50:
                    a6:5d:c4:1c:73:62:60:4e:84:e0:56:71:6b:e2:07:
                    24:4b:17:70:9f:9c:b9:a7:cb:92:8e:f6:53:02:6a:
                    6f:36:7c:ba:73:03:48:e8:b7:d3:12:71:3c:5a:00:
                    1d:ef:ab:7b:a0:bc:c2:d5:ce:27:9b:2a:d4:29:84:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9B:01:6E:70:FC:F2:88:2F:DA:86:92:20:6F:F0:55:20:DB:0E:8E
            X509v3 Authority Key Identifier:
                keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.199.0/24
                IPv6:
                  2001:df3:c740::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:39:32:e5:1f:3f:1d:63:71:09:f7:63:5b:13:6d:19:01:87:
         ce:f7:47:33:7a:78:23:df:f4:9b:3b:56:12:7a:1e:58:8f:1e:
         75:c4:3f:d6:f2:2a:54:41:40:ba:52:2a:95:92:09:a1:a0:25:
         7c:06:5c:8e:15:2d:3f:9f:76:25:33:c1:f2:87:28:a8:77:0d:
         7c:82:de:b5:a5:5d:51:9a:5b:5c:42:4b:c4:20:2b:5e:fa:64:
         7b:27:86:00:5e:14:31:73:47:78:1b:bc:96:63:e2:a7:3a:c7:
         97:6b:64:b9:7c:b1:b4:74:b4:ee:a0:3c:fa:3d:22:74:43:59:
         f1:11:5b:20:23:26:61:25:3b:7d:0c:99:a3:6a:f0:6e:75:b2:
         18:1d:7b:37:e6:7b:45:72:2e:63:69:2f:17:2e:72:9a:b5:48:
         8a:6d:73:f1:f3:a3:1e:f2:0f:e4:83:d3:82:f0:38:67:ab:ae:
         69:71:18:c3:ec:6e:1b:40:f1:41:2b:33:54:85:5a:37:ed:e5:
         ef:e6:3e:6d:1f:75:2f:2d:e0:32:c4:db:72:91:96:65:27:0b:
         a3:fb:01:b4:11:f2:52:d3:d4:e1:c9:22:77:9c:bf:20:80:80:
         88:4a:61:f5:be:d9:10:14:6e:0d:3c:ed:67:99:b3:8a:fb:82:
         f3:c4:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:24 2026 by rpki-client