Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/3ADF4748836D11EBAD2CDC13C4F9AE02.roa
File:                     3ADF4748836D11EBAD2CDC13C4F9AE02.roa (raw, json)
Hash identifier:          mf/eyMAzYh+uLV+PBLzqiCT6bfTXditreoKEp6tkGqo=
Subject key identifier:   E4:DC:99:77:51:4A:16:15:29:D9:33:0F:09:4C:26:34:3A:AF:A7:A5
Certificate issuer:       /CN=A9136B8D/serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A
Certificate serial:       06E2
Authority key identifier: EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/3ADF4748836D11EBAD2CDC13C4F9AE02.roa
Signing time:             Sun 18 Jan 2026 22:18:20 +0000
ROA not before:           Sun 18 Jan 2026 22:18:20 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141997
IP address blocks:        103.164.50.0/23 maxlen: 23
                          103.164.50.0/24 maxlen: 24
                          103.164.51.0/24 maxlen: 24
                          2001:df6:3d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl
                          rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136B8D, serialNumber=EFBFF16B3A9F6E44DA1E758E9395D1C5B714475A
        Validity
            Not Before: Jan 18 22:18:20 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=696d5c2c-76ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e4:e1:3e:e5:ae:ad:95:7a:95:06:f7:69:39:
                    f2:d7:3e:bc:c0:59:da:21:34:9a:ec:e2:13:41:9a:
                    95:5f:f4:da:7d:19:41:cf:46:d0:42:92:6a:2e:c2:
                    d7:b6:8d:2a:5d:fd:97:97:49:de:40:8a:89:f6:c0:
                    2d:08:b5:78:ef:fe:46:15:e3:95:ef:65:58:f1:ae:
                    d3:13:aa:2d:57:8c:c1:5c:92:3a:20:34:73:be:73:
                    41:5d:b5:c0:fe:81:fc:03:b3:f7:e1:9c:8f:e4:ea:
                    d0:d8:b5:29:b5:19:ff:b4:d5:46:a0:ae:fc:a0:3d:
                    68:f1:07:cd:e5:39:dd:37:08:b5:a6:64:80:0b:16:
                    4d:92:a7:f4:c7:b0:f2:0c:5b:1a:68:d1:70:4f:13:
                    4f:f9:60:df:5f:5c:19:c4:91:22:b1:42:f0:54:77:
                    67:49:af:c7:78:c1:2d:c9:3f:78:04:3e:25:dd:7b:
                    ca:c0:bd:6a:33:b1:d3:96:cd:fa:fd:d6:9a:9b:f0:
                    cb:55:7e:9a:a7:1a:65:1a:d8:6c:fb:3b:61:9a:fd:
                    1d:5a:62:fb:b8:8d:6a:74:89:c8:a8:ad:f7:49:22:
                    c6:79:67:6b:b6:95:47:67:04:d5:30:70:3b:4a:c5:
                    f1:b2:0a:41:22:a1:d0:36:ae:82:ce:99:1e:10:69:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DC:99:77:51:4A:16:15:29:D9:33:0F:09:4C:26:34:3A:AF:A7:A5
            X509v3 Authority Key Identifier:
                keyid:EF:BF:F1:6B:3A:9F:6E:44:DA:1E:75:8E:93:95:D1:C5:B7:14:47:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/77_xazqfbkTaHnWOk5XRxbcUR1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77_xazqfbkTaHnWOk5XRxbcUR1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136B8D/0DB893EC836C11EB8C1A9813C4F9AE02/3ADF4748836D11EBAD2CDC13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.50.0/23
                IPv6:
                  2001:df6:3d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:51:6a:eb:08:5e:41:96:6a:50:ad:07:7c:9d:50:d8:6f:e4:
         43:97:b5:43:e7:32:66:a6:0d:96:a8:54:45:54:d9:d8:c2:d0:
         06:43:a1:95:24:b0:9c:41:66:fb:4d:48:68:c5:ae:6a:1b:58:
         6d:c2:61:3e:1d:3e:b5:3b:23:3f:db:fd:90:16:21:4a:1e:2d:
         fb:ce:af:7e:4e:ba:20:f5:07:49:c6:d8:21:75:0a:14:7c:1e:
         ac:fe:73:25:0f:f3:35:14:5f:92:0d:30:a6:1f:22:f3:31:d9:
         a0:83:6e:d8:8f:0e:79:44:b2:4f:36:1d:41:ed:23:73:01:79:
         43:46:92:fa:1b:f0:53:22:eb:ff:69:0f:84:bc:e9:82:f0:a8:
         ee:6c:93:4c:6f:46:45:ea:94:39:87:6e:de:89:3a:dc:96:06:
         c0:d0:72:6d:56:59:ae:c4:50:32:a9:cf:8f:98:7c:1d:f1:02:
         53:64:4e:8a:74:d8:b2:86:a3:2a:71:05:51:88:88:7e:66:ad:
         cb:ac:f3:1e:e0:a2:2e:95:a6:0e:c8:f7:31:1a:f1:a5:de:db:
         36:2f:fc:74:f2:43:1c:29:24:69:86:2a:56:9e:17:57:87:60:
         97:ef:0a:6b:70:bd:8d:13:38:37:9b:52:25:0b:ef:a5:a5:fa:
         35:b9:83:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:28:26 2026 by rpki-client