Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa
File:                     82D8082A292611EF875A5C36C4F9AE02.roa (raw, json)
Hash identifier:          4hSO5GJztFmc2Bjlelb4M86yndIsa9VSTZjFpa5DDCg=
Subject key identifier:   A3:EA:A7:82:F7:74:D6:47:67:BB:DB:AC:20:DC:EC:A7:0A:2D:FC:72
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       016F
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:02:05 +0000
ROA not before:           Sat 03 May 2025 05:42:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     4768
IP address blocks:        103.19.194.0/24 maxlen: 24
                          203.12.172.0/24 maxlen: 24
                          203.12.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: May  3 05:42:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a58a4d-ac18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:f8:27:7c:67:9e:0d:f1:2b:44:ed:9e:9f:
                    4a:05:c3:00:d2:76:66:83:3c:64:a8:b9:ec:f0:8f:
                    0c:58:76:3e:2f:19:84:2f:2b:cd:6b:aa:08:1e:5c:
                    71:df:a4:60:67:73:10:6a:22:8d:1c:8f:72:53:57:
                    dd:79:ec:e1:71:b7:c5:81:fa:ee:d2:99:08:8a:a0:
                    68:6f:76:18:78:29:7d:6d:2f:5e:c1:31:1d:d1:71:
                    a8:ef:2b:b0:44:07:1d:95:57:f3:b0:bf:da:3f:92:
                    97:72:d2:e0:4e:1d:c6:ae:9f:82:68:d8:36:a5:33:
                    d1:c2:de:18:c6:62:73:b2:13:4f:60:52:16:0a:d5:
                    38:15:b4:d2:63:35:58:bf:bb:6c:88:4b:df:6b:eb:
                    42:1e:94:41:8c:e6:a0:57:c5:55:33:be:c5:03:4a:
                    81:65:39:05:cd:c8:9c:2a:3b:16:8c:ba:8c:15:9d:
                    87:d4:ca:c3:97:10:07:e2:09:d6:e3:3b:9d:cc:11:
                    1c:99:d7:0f:89:e7:4d:dd:a7:6f:a5:41:83:1c:54:
                    5b:7a:60:d9:6f:f1:5e:88:9d:f9:2f:55:cd:97:e0:
                    88:ef:4f:7d:77:a7:76:0e:d5:50:36:05:92:67:1a:
                    67:52:8c:b4:0c:e0:8a:e7:07:42:75:f5:ef:bd:58:
                    fa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EA:A7:82:F7:74:D6:47:67:BB:DB:AC:20:DC:EC:A7:0A:2D:FC:72
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/82D8082A292611EF875A5C36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.194.0/24
                  203.12.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:ac:84:89:88:cf:47:80:ce:ea:37:6b:58:22:92:67:a1:78:
         ae:b4:39:17:2b:99:f9:1a:5f:c8:1c:9c:8e:90:a6:f6:a4:b2:
         32:57:ee:7d:b5:15:19:e9:2e:fe:1b:f2:00:13:aa:ce:a6:52:
         84:13:12:4c:9a:34:b0:94:a0:f9:05:a3:64:46:d7:27:98:7c:
         de:63:d6:2b:5d:b0:85:5a:36:e4:24:5e:38:15:0f:dd:fe:58:
         5d:c6:70:76:e8:17:7d:34:db:0d:32:d3:6a:5b:cd:8e:d1:7c:
         8b:91:7c:86:dc:ed:f2:7e:ed:68:be:e8:25:69:3c:d6:b2:ef:
         05:ca:9c:8b:24:0c:b0:1f:2e:4b:cd:70:50:de:ad:31:a1:32:
         a7:84:53:2a:8b:64:70:73:57:07:93:68:07:df:8e:2a:b1:f8:
         42:ff:c9:b5:1a:13:4a:b7:8d:6b:7e:10:d3:e7:b0:77:d2:08:
         50:ab:2a:a9:08:51:9c:34:27:c4:77:77:5b:b5:6b:53:25:17:
         f1:da:a3:5a:4e:e9:86:8f:f5:b8:fd:fe:88:3c:71:08:24:b5:
         50:c9:e4:10:ab:0a:f0:12:43:c0:c3:1d:34:8a:a9:ba:85:a2:
         14:d5:7f:86:92:fd:d2:bc:e0:60:9c:b5:66:37:91:fe:02:82:
         12:e4:67:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:51 2026 by rpki-client