Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/1818C91A5C1611F0AEC3F02BC4F9AE02.roa
File:                     1818C91A5C1611F0AEC3F02BC4F9AE02.roa (raw, json)
Hash identifier:          vvlwkhzUvE0FKB5grEYGUNi8KcaEXKrEcNbY2LoLmZ8=
Subject key identifier:   39:F6:39:AA:8D:1D:1A:67:DB:12:A6:6B:CA:20:D5:88:5E:1A:10:FD
Certificate issuer:       /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial:       276E
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/1818C91A5C1611F0AEC3F02BC4F9AE02.roa
Signing time:             Wed 22 Apr 2026 16:19:26 +0000
ROA not before:           Wed 22 Apr 2026 16:19:26 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137812
IP address blocks:        103.139.234.0/24 maxlen: 24
                          2400:eb80:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
                          rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10094 (0x276e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
        Validity
            Not Before: Apr 22 16:19:26 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e8f50d-200b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:d9:31:63:3f:54:23:bb:44:b5:81:ed:0e:
                    b7:29:49:01:2a:58:d3:2b:12:fb:b0:20:97:66:ed:
                    99:8a:72:a1:50:79:7a:91:99:9c:ef:27:8f:f9:74:
                    a3:b1:9c:7a:18:4b:64:70:30:e9:73:90:a6:59:9d:
                    e1:0c:00:30:29:26:0e:71:d1:0a:f7:33:6a:23:b2:
                    17:57:9e:50:06:48:b8:87:f5:84:25:59:3e:29:f0:
                    e9:0a:6b:91:9d:2e:45:63:4e:71:85:72:13:5f:fa:
                    4f:74:5a:c0:ba:c8:c9:50:4f:30:97:be:8c:8a:82:
                    c2:b0:93:64:00:4d:36:49:9b:5f:51:03:9e:10:96:
                    1a:c3:e9:9d:4e:ae:61:bb:1a:ff:5e:4a:81:d6:e5:
                    81:49:47:fc:fe:28:0b:e5:74:9e:b0:f8:84:7a:19:
                    27:6f:02:5e:dc:a7:0c:4f:3a:0d:f9:72:21:f3:af:
                    10:de:64:d5:bc:d7:3f:42:b8:7b:1d:3c:98:29:bf:
                    89:cd:af:d6:58:20:f9:a4:fb:83:03:69:e5:9d:cc:
                    e3:a3:00:30:20:37:4e:6b:c7:2b:e0:39:72:74:14:
                    04:94:fb:bf:fb:16:9a:53:1d:4f:d7:0e:d5:81:c1:
                    eb:a7:e1:3e:b2:6d:9e:0c:17:a2:e3:98:1f:e6:df:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F6:39:AA:8D:1D:1A:67:DB:12:A6:6B:CA:20:D5:88:5E:1A:10:FD
            X509v3 Authority Key Identifier:
                keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/1818C91A5C1611F0AEC3F02BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.234.0/24
                IPv6:
                  2400:eb80:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:7a:5c:10:05:ea:09:64:ab:72:08:93:fc:4e:82:54:da:e4:
         b3:c2:15:1f:4f:57:d2:eb:8c:85:b0:b9:6c:97:2d:85:92:2e:
         e8:7b:44:d1:a4:6c:09:f5:ce:33:44:1a:6d:76:a5:65:76:7c:
         2f:bd:55:32:2d:44:62:fe:b3:51:09:1d:e9:43:3b:d3:05:1e:
         39:dc:91:70:11:2c:1d:e9:9f:31:66:00:a3:8c:58:c4:04:74:
         02:e8:c5:02:21:24:cd:85:aa:10:68:37:22:76:01:86:82:e1:
         0c:e1:f0:65:10:94:71:cc:25:3a:64:5a:23:76:44:bb:af:d5:
         4e:f3:a0:90:4f:e2:c0:61:d0:d7:32:76:1b:85:3a:17:72:77:
         2e:de:0e:6e:93:8d:0f:2f:42:ed:1a:29:83:dc:4a:81:31:8a:
         84:3e:ef:6d:37:28:2c:94:ee:76:f4:78:9b:d7:df:56:dd:54:
         91:03:fb:f5:d8:f4:61:0e:85:50:f3:c0:82:53:cd:6f:21:b6:
         f7:d4:63:a8:03:dd:8d:6d:ee:c2:dc:de:97:62:e1:74:0c:07:
         ef:57:78:fd:40:88:de:23:68:2d:e8:ec:0f:17:50:c8:33:64:
         42:9c:1c:5b:bd:e3:70:44:2c:24:b0:01:dc:a6:f6:f1:a0:be:
         72:7f:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:57:56 2026 by rpki-client