Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/2A9AFB320BC911EBBA11562FC4F9AE02.roa
File:                     2A9AFB320BC911EBBA11562FC4F9AE02.roa (raw, json)
Hash identifier:          IYK0qSzEebuE0KBmbImZms3PEASi26kf8B/z+PvBOXQ=
Subject key identifier:   C6:C2:37:90:6D:EA:91:76:CB:1E:F9:FF:C0:A1:71:90:D0:73:68:6F
Certificate issuer:       /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6
Certificate serial:       0D13
Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/2A9AFB320BC911EBBA11562FC4F9AE02.roa
Signing time:             Thu 06 Aug 2026 18:36:40 +0000
ROA not before:           Thu 06 Aug 2026 18:36:40 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134404
IP address blocks:        103.192.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl
                          rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3347 (0xd13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6
        Validity
            Not Before: Aug  6 18:36:40 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a74d438-1aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:ab:6b:34:4a:43:3f:bb:6d:ef:58:30:0f:
                    09:b6:ce:0d:4e:40:50:fb:49:e1:8e:67:4a:6b:37:
                    9a:cf:4f:76:e2:07:ee:d1:ce:06:5e:fa:b4:b3:15:
                    d3:55:68:97:aa:0a:63:18:c5:85:cf:52:03:70:c2:
                    7c:3d:d6:f6:5b:37:d2:b2:64:18:5b:10:71:a2:8c:
                    e9:a8:16:7a:f7:3f:1d:20:39:4a:74:df:6b:07:42:
                    d5:f2:cf:00:93:ff:59:61:0a:84:1b:16:e9:a9:97:
                    e3:66:ba:95:8c:54:1d:82:40:3e:ea:e1:f9:48:22:
                    25:f6:01:d2:4a:87:a5:25:8a:0b:90:c6:6c:47:31:
                    75:1b:31:3b:d3:33:4a:0c:e5:13:50:ea:39:6c:36:
                    89:32:ee:2d:7d:97:5d:fa:07:aa:ca:7d:04:d8:6c:
                    c3:b4:53:f8:43:12:2c:26:f5:f7:00:9b:01:95:de:
                    4c:a3:49:32:0a:2d:e4:1a:aa:9e:9a:ce:c8:67:0c:
                    f3:ae:7b:34:0e:64:ef:bc:37:24:86:55:17:6a:1f:
                    c3:71:41:02:dc:35:68:e5:db:12:ac:a9:05:d5:e0:
                    ea:9f:67:c4:84:48:25:f3:31:fb:01:07:c0:91:42:
                    b7:dc:d2:b2:f8:a3:b1:7b:e3:bd:1f:ac:08:bb:bf:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C2:37:90:6D:EA:91:76:CB:1E:F9:FF:C0:A1:71:90:D0:73:68:6F
            X509v3 Authority Key Identifier:
                keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/2A9AFB320BC911EBBA11562FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:e1:1d:70:40:a6:1c:39:9f:b7:e5:89:7b:7b:cb:14:55:56:
         58:61:36:2e:57:34:fe:06:dc:de:5b:46:26:1d:08:10:ae:bf:
         2b:96:1f:14:60:24:ca:55:67:18:19:d7:24:65:ac:6c:74:f8:
         06:a4:35:83:72:87:47:83:f9:44:58:8d:bb:c3:17:57:d8:fc:
         fb:75:94:47:97:9a:48:d6:72:51:5e:32:ae:75:7f:66:f9:2e:
         ec:5c:ff:3c:85:a8:c3:b3:58:d5:db:5f:9c:1d:ec:8a:95:e4:
         e9:e6:d8:81:33:59:04:88:d8:1d:7a:82:11:ad:14:64:90:d1:
         22:a2:0b:d9:79:88:6f:5d:b7:8c:a9:46:4b:41:b0:a2:7b:3a:
         07:40:d3:da:e5:ab:11:f8:90:b8:9b:d1:71:ff:5c:d0:8f:ea:
         d1:2e:76:84:a3:9e:de:0f:c7:ee:f9:9c:88:f7:95:bc:95:d7:
         89:b5:95:e0:c0:1b:2a:4a:05:dd:39:9e:56:52:a5:58:ff:cb:
         c9:a1:d9:be:46:15:9a:40:4e:10:fa:d1:fd:97:3b:83:f9:da:
         e3:9e:14:04:b2:ac:23:f7:69:5a:4a:35:99:17:5d:0b:87:d0:
         24:fc:71:7b:10:d7:20:59:91:76:64:b6:f2:e3:08:d4:4c:ec:
         b3:9a:f1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:53:04 2026 by rpki-client