Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/440FD944C56F11EE8FF5FF2FC4F9AE02.roa
File:                     440FD944C56F11EE8FF5FF2FC4F9AE02.roa (raw, json)
Hash identifier:          yMXreKIoxp5m8IU40Ud6zlAgFUqnP+YkdUJy299oz/w=
Subject key identifier:   DA:0F:1E:AD:62:F2:79:15:26:6A:BA:61:D9:35:4F:D7:DB:43:A0:54
Certificate issuer:       /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial:       0189
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/440FD944C56F11EE8FF5FF2FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:45:04 +0000
ROA not before:           Fri 11 Apr 2025 05:10:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     4826
IP address blocks:        103.136.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 03:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
        Validity
            Not Before: Apr 11 05:10:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59460-982b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:c3:dd:8c:2e:8d:2c:49:83:5d:66:b4:83:
                    d3:f4:1b:4d:d9:e0:b6:0f:ed:f8:5e:80:68:a5:d0:
                    ff:93:54:00:ed:4c:fe:3a:32:65:41:b2:6f:14:11:
                    46:ec:6d:cd:91:bb:ec:aa:de:38:8c:a8:26:41:5f:
                    d0:e1:e3:a5:c5:db:4b:0b:d7:e6:fd:cf:14:3f:f9:
                    db:ac:81:9a:c3:4f:76:76:d3:eb:57:69:93:1e:87:
                    89:b0:27:56:00:ac:15:4a:8d:5c:10:8b:ca:99:a9:
                    84:ba:45:ca:c8:16:72:be:75:a9:df:d5:9b:11:50:
                    d4:60:b1:9f:24:40:87:49:35:82:d8:82:2b:1c:0c:
                    35:c8:49:7e:fd:e1:47:b3:62:8a:d6:7c:26:75:30:
                    99:ea:95:ea:b4:18:92:1a:ca:4a:4b:85:6f:ad:72:
                    03:e2:09:7f:99:b0:48:5f:cc:bb:d2:a9:a8:ab:c9:
                    75:09:e0:e1:1c:60:86:a6:28:6f:a6:8c:64:4b:8c:
                    92:c9:bd:74:41:dd:8a:cc:3d:3d:3d:45:62:5e:b1:
                    5d:51:b1:fb:9b:84:2e:cb:f9:0f:c9:ca:ea:3b:48:
                    10:a2:0a:99:53:4b:95:b3:97:64:3e:4a:d9:5c:d6:
                    27:e8:85:28:89:39:2a:25:c3:f9:ad:dc:2b:8d:a9:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0F:1E:AD:62:F2:79:15:26:6A:BA:61:D9:35:4F:D7:DB:43:A0:54
            X509v3 Authority Key Identifier:
                keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/440FD944C56F11EE8FF5FF2FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:15:43:d5:ff:d0:a7:f3:e0:57:8f:55:58:76:4e:be:97:43:
         09:55:71:67:67:3f:e6:02:25:d0:ab:61:f8:9d:f1:66:b8:59:
         6f:92:bc:d2:87:41:a6:54:84:b7:f6:2c:4b:e0:6b:29:9a:5e:
         5a:c1:c8:8c:c0:9b:35:d7:ac:8e:5d:f0:98:98:b3:53:a3:a8:
         78:a8:83:14:6d:36:70:14:04:6a:cc:c5:62:c2:01:9a:91:d0:
         32:b9:fc:92:bc:84:17:13:49:6a:f3:04:b9:10:74:bd:8c:2d:
         1e:41:d0:55:e2:66:95:ef:48:6c:5f:f9:45:2a:3e:57:8f:b0:
         7f:89:66:38:66:91:3d:4a:27:1a:aa:99:64:7c:63:d6:ce:97:
         85:7f:45:13:83:d5:f0:99:40:f5:0d:e3:2a:e5:f2:42:4e:53:
         63:e1:b4:d7:6e:02:f9:03:d2:34:96:ed:bf:f3:ea:e7:a6:9d:
         88:33:3e:eb:ab:db:17:ce:28:43:e4:db:50:a3:4e:b2:bc:e6:
         32:93:ae:10:21:95:2e:55:8e:d2:ca:0c:78:2d:25:25:44:31:
         6d:2d:b8:e3:61:0d:bc:a4:27:6f:26:fe:4e:99:99:59:cf:7c:
         0d:19:a0:40:ef:ac:05:b3:79:d3:5c:b1:95:d4:d1:f3:ca:7e:
         3f:06:a5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:45:27 2026 by rpki-client