Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa
File:                     9BC8AC96555C11F0AF866966C4F9AE02.roa (raw, json)
Hash identifier:          j5O+lKdp1W7ImA51bVdi15GYc+ALaPNlnwcaq1b+F4s=
Subject key identifier:   6E:C2:2B:02:BD:87:8A:5A:28:CA:DC:49:9B:0C:B5:BD:DF:1A:37:C4
Certificate issuer:       /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Certificate serial:       B7
Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa
Signing time:             Tue 19 May 2026 01:32:06 +0000
ROA not before:           Tue 19 May 2026 01:32:06 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     148976
IP address blocks:        103.175.34.0/23 maxlen: 24
                          2400:9de0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
                          rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
        Validity
            Not Before: May 19 01:32:06 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a0bbd96-efe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:8c:d6:a7:1e:2f:d5:5f:1e:2c:75:a6:ca:
                    c2:a1:9b:08:03:ef:a7:03:c2:ba:03:2e:af:7a:fe:
                    26:2d:ad:70:e9:a1:db:0a:e6:a9:d9:7d:6b:7b:e9:
                    dc:49:6f:bd:55:e0:89:8d:1c:cc:d7:a6:62:cc:47:
                    67:26:c1:d1:5b:fc:78:73:3f:88:f4:b9:39:e3:49:
                    e5:f8:b2:df:e8:c0:5a:fb:3a:b2:b1:52:1b:36:9f:
                    c7:8e:64:e9:c6:e2:5e:4a:1f:44:8a:37:11:91:a7:
                    ed:23:3e:2c:0e:0e:a0:2d:b0:d1:40:ca:f3:ed:76:
                    71:7c:ee:5c:71:74:95:1d:19:a6:21:49:6f:31:1d:
                    ff:52:35:63:af:ea:54:ec:04:11:a6:5d:94:31:51:
                    39:22:6b:f0:82:f6:02:60:1d:51:b2:1f:d7:c4:02:
                    ca:72:47:e1:c9:9a:e7:c1:b1:07:1a:67:21:25:63:
                    f5:3f:c2:89:b3:f0:59:cd:37:0f:c5:6a:c7:d8:81:
                    c9:55:88:80:f2:60:27:d1:4b:0b:6d:70:cf:3c:7b:
                    6d:07:7f:ca:e5:05:d2:d3:41:9e:68:8c:e6:a2:08:
                    e2:42:23:04:23:7c:93:b8:8a:c0:94:b9:d7:81:c4:
                    ca:43:77:3e:37:6a:92:d1:36:ac:9b:92:7f:d5:fd:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C2:2B:02:BD:87:8A:5A:28:CA:DC:49:9B:0C:B5:BD:DF:1A:37:C4
            X509v3 Authority Key Identifier:
                keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.34.0/23
                IPv6:
                  2400:9de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:b7:29:af:04:3b:01:b0:f7:b0:c4:36:20:c8:65:b4:6d:8d:
         16:33:50:03:05:62:79:32:93:08:6b:5a:88:f4:58:20:29:bd:
         da:de:ee:88:17:df:6b:ff:33:9e:d8:0b:ae:dc:15:ac:f6:34:
         e5:fc:0c:a3:66:f0:9c:1c:36:b4:2e:ff:67:3f:a9:f8:89:4f:
         6d:a9:9b:58:75:dd:fc:71:ae:95:93:a8:2f:cc:73:7c:63:75:
         23:4a:c6:9d:58:f6:a5:9b:bc:8a:a3:bc:b6:31:8a:79:47:26:
         58:35:e7:d8:be:4f:e5:f4:1f:38:03:ad:f1:1a:13:bc:d9:0f:
         cb:0a:8e:6e:28:22:86:56:03:1a:86:77:c5:c9:1b:78:f3:09:
         5d:8b:f6:96:0f:84:6f:0f:62:81:76:59:67:bc:dc:2c:6c:6b:
         0a:30:50:61:f3:e5:83:3a:10:81:79:26:20:1b:0a:fc:bc:a6:
         1c:59:c6:c5:79:0a:c8:2c:28:a3:9b:54:8a:8b:a4:28:d4:75:
         95:1d:60:c7:3c:0d:e3:ca:15:a6:78:09:7b:a3:58:75:1f:6a:
         6a:32:c4:a5:2b:78:59:5f:08:88:ad:af:0a:93:82:e6:6e:96:
         0f:66:18:9c:bb:e9:17:59:a0:84:fc:b2:0e:78:dd:32:e5:76:
         a5:fe:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:59:22 2026 by rpki-client