Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F9678DA78E811E79F549F43C4F9AE02.roa
File:                     3F9678DA78E811E79F549F43C4F9AE02.roa (raw, json)
Hash identifier:          IAECYW5Wd7edCXmA3YKOJXrVx2OU+SNOm7TwCgYIdVI=
Subject key identifier:   F6:BC:A4:1C:5C:FA:A8:C7:43:C4:B2:8D:FB:2B:19:84:A6:8D:CA:90
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3B7D
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F9678DA78E811E79F549F43C4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:22:55 +0000
ROA not before:           Thu 20 Aug 2026 16:22:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133339
IP address blocks:        103.225.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15229 (0x3b7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:22:55 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a8729df-a9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a9:43:a8:2a:84:e1:e0:cf:e4:87:21:c2:6e:
                    65:fd:a2:54:21:a8:c8:e3:95:07:ee:26:47:25:e6:
                    8e:fe:0a:34:fa:0e:03:8d:ae:3a:54:e6:9a:ff:a5:
                    84:70:10:6e:88:4b:9a:a3:7e:69:d4:21:26:71:04:
                    cb:42:52:78:a2:f6:64:02:66:b1:92:6c:a7:98:c9:
                    cb:a1:bf:aa:5f:45:0b:3c:74:36:ff:c0:98:18:97:
                    60:79:e4:38:93:5c:4a:b5:b9:9e:67:8e:0f:3b:b5:
                    29:8d:11:6b:c9:92:11:5b:ad:88:cd:0b:b3:e5:4f:
                    8e:a4:85:44:bf:e4:b7:25:af:63:40:c5:45:4e:46:
                    96:54:66:90:18:4e:51:e6:49:87:2b:3e:2e:71:58:
                    12:13:bb:f8:1b:50:24:0b:53:84:ca:1c:db:0b:81:
                    ab:86:27:8e:9c:e3:65:20:1e:e1:c0:c4:b5:6e:fd:
                    9e:44:35:40:3f:97:1a:aa:c9:fd:88:f3:0d:d9:63:
                    04:1f:95:6c:09:a5:c1:f6:c0:c2:71:b6:27:da:e4:
                    5a:89:2a:88:00:58:9b:2d:78:3d:dd:dc:31:4e:44:
                    0e:85:8f:12:07:78:ad:a8:f4:4f:84:c1:2b:c9:73:
                    70:2d:8f:66:f0:98:6b:17:a6:eb:0b:9c:e6:07:89:
                    4b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BC:A4:1C:5C:FA:A8:C7:43:C4:B2:8D:FB:2B:19:84:A6:8D:CA:90
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F9678DA78E811E79F549F43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:42:21:45:b2:e2:bb:03:c9:c3:5d:cc:63:c8:36:3f:b5:65:
         b9:69:61:50:a8:b3:1f:9a:e9:04:81:1d:cf:41:61:49:50:2a:
         6f:fb:bc:bf:63:b1:97:a6:40:35:4f:7c:a6:a3:f7:5d:0e:9f:
         a7:19:5b:26:00:1b:d3:f6:3a:19:e4:71:72:5e:d3:b0:53:54:
         ba:ce:2e:6b:47:93:ac:10:aa:c7:c3:2b:40:be:5e:ed:6e:70:
         cc:ab:8e:27:01:37:30:9b:42:7f:91:41:e0:80:ab:85:79:f6:
         9c:82:de:72:56:a9:a1:e8:54:5c:21:dc:fd:99:8e:37:aa:6b:
         59:98:d3:fe:4d:e8:5e:cd:4b:80:eb:bc:75:cf:e8:5b:99:a0:
         e4:91:3a:7a:db:a5:7f:d2:16:c2:b5:4b:66:b6:a2:09:e0:4b:
         80:01:58:73:5c:d2:04:61:b8:c3:92:2d:16:03:e8:f8:a9:73:
         0c:2b:6e:ef:d2:28:c7:27:cd:f3:82:a7:82:de:8a:35:92:7f:
         02:7a:08:f3:bf:ed:8e:49:fd:08:29:f4:5d:48:c4:c4:ce:75:
         aa:b5:be:fc:0c:48:de:81:1d:c6:cf:39:dc:d9:29:15:77:ef:
         99:e7:4a:36:40:5e:e5:2b:b0:0f:4d:0d:b6:f0:f0:dc:21:ea:
         5b:cf:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:10 2026 by rpki-client