Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
File:                     BFC00D26D18011EEB673FD69C4F9AE02.roa (raw, json)
Hash identifier:          PY0thCDzxmficncI3v4hVUVJh038lsu/s0PVJXru6H0=
Subject key identifier:   BC:40:6D:CF:1B:D1:60:87:1A:93:42:94:58:88:81:7A:81:E3:54:A4
Certificate issuer:       /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial:       0759
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
Signing time:             Sat 08 Aug 2026 08:21:03 +0000
ROA not before:           Sat 08 Aug 2026 08:21:03 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141743
IP address blocks:        103.163.94.0/24 maxlen: 24
                          103.167.10.0/24 maxlen: 24
                          2001:df6:1080::/48 maxlen: 48
                          2402:6be0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
                          rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184279, serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
        Validity
            Not Before: Aug  8 08:21:03 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a76e6ef-c731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:82:16:90:35:44:1d:4e:2e:0b:f4:6e:9e:
                    a7:78:ce:80:25:77:d2:4d:1f:6a:1d:46:e8:2f:34:
                    76:ce:e9:e9:af:64:38:ec:f3:0f:0f:16:4d:c7:59:
                    3a:14:99:b8:6e:35:ec:5d:38:a9:0a:d3:36:3a:db:
                    6d:48:22:68:4d:50:a1:93:eb:d9:25:c1:30:ae:00:
                    7b:94:e4:c6:ec:ec:e0:a5:f7:b2:f3:eb:0f:c6:cf:
                    d2:ac:f9:0d:fb:77:c2:03:19:e9:3b:c3:df:67:e5:
                    55:78:da:24:ce:c2:c8:e0:aa:bb:ea:6e:3a:63:ea:
                    42:00:d0:5f:1d:03:fd:43:ec:3e:15:4a:f7:c2:4e:
                    68:44:7b:0b:7d:99:49:af:8c:8c:66:c6:2b:61:a7:
                    82:f1:79:fe:eb:f6:d6:eb:e2:d6:6d:c2:6e:64:e2:
                    51:94:7a:62:cc:4f:a9:a9:39:4a:01:a3:e9:97:6d:
                    23:5f:95:2c:c1:a9:fd:33:fa:63:24:e0:24:5d:bc:
                    18:ae:68:56:d8:98:7e:89:57:8b:e3:00:1a:93:14:
                    f4:4f:4c:92:e2:16:14:b5:0c:36:f1:23:30:6b:e3:
                    1e:73:25:7f:86:32:1e:30:2a:a5:2f:2c:b0:40:38:
                    ff:c6:83:8c:1c:46:d2:39:89:f0:aa:71:1a:cc:e9:
                    80:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:40:6D:CF:1B:D1:60:87:1A:93:42:94:58:88:81:7A:81:E3:54:A4
            X509v3 Authority Key Identifier:
                keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.94.0/24
                  103.167.10.0/24
                IPv6:
                  2001:df6:1080::/48
                  2402:6be0::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:7e:d3:96:55:94:39:8a:2d:4f:44:12:b5:b2:45:65:cf:c7:
         51:a2:09:9b:68:48:ae:2e:28:a8:1d:86:af:de:3a:8a:8c:e5:
         58:2c:5f:07:5e:1e:ca:3c:70:a5:cc:46:68:53:13:b3:6a:6d:
         7e:31:63:3a:a0:71:f1:f6:e4:63:6a:6c:16:79:19:1c:49:af:
         73:fb:7a:b2:c5:72:4b:df:1c:44:6d:8b:86:4a:32:fc:eb:e7:
         d7:af:37:79:cd:92:4a:f6:a7:95:6a:d2:56:a2:97:c7:fb:b5:
         46:8c:da:65:d8:7f:16:40:1a:3b:7d:3c:d5:c0:2e:92:c6:64:
         b4:8c:68:b2:46:1b:64:6b:14:39:22:c5:84:7b:22:83:7c:f0:
         34:4d:9b:bf:d0:2c:12:42:8a:15:1c:25:8e:72:15:85:26:64:
         b5:a6:95:9e:2c:6e:92:0f:66:80:52:54:6e:7b:d6:0b:51:61:
         22:c7:28:0c:fb:d6:c0:1c:68:db:c6:c0:db:36:62:fe:22:a4:
         1a:8e:ca:01:0a:5e:79:1a:c3:ca:25:4a:70:1a:16:46:5e:6b:
         65:6d:4a:76:e4:cd:cf:59:3e:a3:86:b8:8a:30:ac:2a:08:c9:
         af:0c:35:d9:dd:8f:6e:68:b1:88:36:82:77:e1:fb:d2:51:06:
         17:8b:70:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:36:19 2026 by rpki-client