Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
File:                     B97D647C1A8811EEB5AE963CC4F9AE02.roa (raw, json)
Hash identifier:          NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=
Subject key identifier:   1A:A6:48:FC:6C:B5:1A:56:C2:4C:EC:EF:DD:3B:14:8C:3A:2B:06:74
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       020C
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
Signing time:             Wed 11 Mar 2026 02:37:14 +0000
ROA not before:           Wed 11 Mar 2026 02:37:14 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.73.186.0/24 maxlen: 24
                          103.73.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 02:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Mar 11 02:37:14 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b0d55a-75aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:9e:b7:5a:ce:f3:58:79:c4:5b:79:97:b5:
                    f6:ec:81:22:b5:ef:ab:7d:80:10:df:42:30:ee:cb:
                    41:3a:98:0f:24:21:ed:f3:c5:8c:b6:c1:b2:01:b5:
                    ff:1c:f3:c8:c9:c8:c3:a3:d5:fa:8c:7e:d3:8d:28:
                    03:26:78:a1:bd:58:20:f5:97:7e:31:e1:5a:b6:bf:
                    a5:14:27:1d:68:14:1c:76:0f:b1:5e:68:61:d3:c9:
                    1e:16:a2:be:e0:42:ca:67:52:79:01:92:f8:29:68:
                    87:37:e9:0b:9b:fd:b8:9f:ce:e7:f7:7c:90:61:e9:
                    8a:6d:91:f9:66:7f:d4:41:a3:9d:34:7b:e2:7b:21:
                    c2:01:3e:f0:57:c4:35:ac:9a:6f:d4:e8:1d:3a:1c:
                    40:34:be:ec:cf:d8:30:b2:e3:2f:46:0f:54:a3:21:
                    1a:26:6d:22:ac:f9:b3:c3:25:8d:75:b2:1b:02:74:
                    44:49:8b:b3:de:df:31:da:4e:fe:67:4a:53:64:35:
                    6d:1a:63:ee:a4:85:ed:9d:2a:2e:92:a2:26:43:c6:
                    8e:94:65:bc:ef:88:7f:77:b9:7f:ba:8e:a4:0b:1b:
                    d1:6d:15:5e:bd:b7:38:02:6f:7c:ac:35:0f:dd:a9:
                    4f:30:7f:25:5c:6b:db:63:3c:9e:69:ed:d7:8f:9e:
                    db:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A6:48:FC:6C:B5:1A:56:C2:4C:EC:EF:DD:3B:14:8C:3A:2B:06:74
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:92:8e:12:d6:45:cc:7d:43:84:ad:d0:94:72:48:41:05:d4:
         4c:62:78:57:c5:b6:45:2f:62:b1:8d:ba:4c:89:be:85:f0:54:
         14:00:db:7f:63:e6:da:d4:b0:36:a4:e7:74:f4:30:ff:69:5e:
         ab:cf:2a:fe:a4:b7:98:c3:eb:10:b6:11:4a:a2:3d:ce:87:d9:
         ef:58:0c:45:08:14:a9:12:86:75:09:3d:00:d4:b3:79:41:33:
         28:10:c3:90:9c:1b:39:18:40:66:d4:66:50:71:9c:9d:89:71:
         59:65:5d:85:9a:e7:d7:23:09:ef:4f:2f:f7:43:bd:23:fc:bd:
         7f:38:95:a3:fc:99:3d:9b:71:1d:7e:96:7b:86:76:f1:00:9d:
         26:20:76:1f:4b:ec:7e:95:e5:45:1e:0e:86:59:fb:06:7f:67:
         7e:46:24:0e:5c:f0:6c:78:9b:4b:10:f7:68:14:03:6e:86:7c:
         af:66:96:0e:06:f6:64:8e:e3:a5:6f:ca:83:1e:83:66:20:07:
         0c:9d:42:c4:a0:cb:9c:0b:47:e8:be:5a:e1:84:5d:01:99:41:
         65:b1:82:33:f3:39:66:0e:fb:71:2c:c9:3e:b8:38:44:5b:54:
         04:05:6f:a1:87:84:1c:1b:02:d0:87:7d:22:3d:04:75:8d:3f:
         76:1f:e8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:33:39 2026 by rpki-client