Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/01A09AD4529A11F1B2F4C97190833773.roa
File:                     01A09AD4529A11F1B2F4C97190833773.roa (raw, json)
Hash identifier:          NfdzF777/UwYTCe/PzbVSLCJnNVSjxZR+DIbcSpMCqY=
Subject key identifier:   33:1B:0D:E7:37:0A:12:03:9C:72:1B:B7:0E:22:DB:E9:E5:83:58:71
Certificate issuer:       /CN=A9191BBE/serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
Certificate serial:       3C
Authority key identifier: 20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/01A09AD4529A11F1B2F4C97190833773.roa
Signing time:             Sat 29 Aug 2026 08:58:22 +0000
ROA not before:           Sat 29 Aug 2026 08:58:22 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     55925
IP address blocks:        103.105.73.0/24 maxlen: 24
                          202.94.73.0/24 maxlen: 24
                          2001:df1:6400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl
                          rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 08:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191BBE, serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
        Validity
            Not Before: Aug 29 08:58:22 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a929f2d-52ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:c4:e3:b4:0d:f8:f5:fc:fb:23:d1:3b:85:
                    5e:32:4f:2d:64:a3:2f:13:db:b0:e8:a5:85:57:e0:
                    b2:fa:a0:93:80:d7:69:81:25:5b:f5:23:ee:86:fe:
                    1b:4c:a7:1b:c4:a8:bf:63:f7:99:44:cd:04:7f:8c:
                    94:fe:a3:a6:a3:0d:e6:9c:3c:29:ec:ea:02:de:d2:
                    40:99:99:ed:43:47:da:c0:f0:62:68:ae:f0:79:7b:
                    f3:49:9e:ec:58:87:c8:8f:b0:d9:00:66:df:dd:6d:
                    37:32:4d:b7:b1:d5:11:c4:99:cf:0d:fd:4d:f8:f8:
                    03:dd:47:e1:82:75:a2:f4:b4:20:4c:69:41:27:61:
                    22:3b:18:9a:3f:c1:ec:07:8f:8a:3f:d6:fc:94:bf:
                    ea:7b:d0:73:5d:88:bc:2b:4a:e7:09:ec:0b:79:31:
                    89:61:91:46:36:49:d3:b4:53:10:d6:ea:2e:bd:4f:
                    43:ea:4e:b4:28:0f:19:3e:d1:8a:8a:c9:af:2b:e3:
                    d7:ab:2f:0f:d1:af:f6:b4:82:00:5b:52:0d:6d:7f:
                    44:72:63:dc:01:89:53:e7:b9:6e:02:f5:88:05:ea:
                    12:ca:73:c3:51:3b:ab:d0:e3:99:1d:97:bb:03:f5:
                    c4:3d:ed:47:e4:a2:76:f0:7f:70:0f:b5:b1:21:bc:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1B:0D:E7:37:0A:12:03:9C:72:1B:B7:0E:22:DB:E9:E5:83:58:71
            X509v3 Authority Key Identifier:
                keyid:20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/01A09AD4529A11F1B2F4C97190833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.73.0/24
                  202.94.73.0/24
                IPv6:
                  2001:df1:6400::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:fe:59:e8:69:20:a6:7c:b9:bc:fb:14:b4:8a:cc:a2:fc:8e:
         b2:41:c6:5e:ae:dd:ee:6f:14:d0:bc:11:ad:69:92:a7:94:f0:
         e8:1e:f6:16:cc:06:47:62:46:06:a7:aa:0b:eb:cc:39:82:40:
         61:28:be:51:c1:8c:21:fd:68:6c:72:ae:2b:01:41:d8:6a:9d:
         a7:7f:8e:b7:be:f8:f7:3a:d9:44:1d:b3:3a:bf:96:fd:e9:dd:
         ac:be:e4:08:d7:5d:e0:6c:d0:86:9c:bc:ae:9f:9c:52:1c:3d:
         e2:e6:76:2a:70:7d:b2:93:d9:f9:18:76:6f:5a:4d:35:b8:bd:
         34:05:e6:23:0f:69:2d:73:84:d3:7a:8f:0f:2a:68:92:9a:02:
         63:e8:d3:e0:19:82:d9:ac:47:4d:53:04:fe:c1:97:33:15:82:
         ff:a3:6c:e2:06:3d:ef:11:ee:85:3c:f0:72:5d:26:1a:42:db:
         1e:66:29:ea:f0:47:dd:5c:23:50:0f:f2:37:73:3a:3a:6c:d3:
         b8:38:bd:d6:7d:57:56:10:65:8a:ca:02:09:bd:30:bc:b2:1f:
         0e:50:75:a5:3e:56:e4:cb:5b:7d:d0:a9:c0:89:28:14:07:04:
         19:bd:89:67:d6:3b:5c:b5:f8:77:20:ef:17:9b:16:2c:c3:a0:
         1f:1c:80:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:37:30 2026 by rpki-client