Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/B3F895D691A211EDA6B67334C4F9AE02.roa
File:                     B3F895D691A211EDA6B67334C4F9AE02.roa (raw, json)
Hash identifier:          SZwSuTPzgi/B7grt+XBVk2kOuR1XNlKeb3lwzDpTWRU=
Subject key identifier:   A0:45:73:A7:07:6F:6C:EC:06:6C:EA:00:AC:2D:26:98:7F:B8:24:3D
Certificate issuer:       /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial:       02D0
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/B3F895D691A211EDA6B67334C4F9AE02.roa
Signing time:             Fri 23 Oct 2026 01:49:56 +0000
ROA not before:           Fri 23 Oct 2026 01:49:56 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     134450
IP address blocks:        103.174.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
                          rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 01:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194590, serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
        Validity
            Not Before: Oct 23 01:49:56 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6adabd44-1e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:c4:08:23:b0:a5:47:92:a2:9b:3c:5a:c4:
                    9a:42:60:04:38:ab:1a:5c:b9:d4:1c:f0:23:c2:d9:
                    a3:bb:08:05:77:00:74:20:41:1f:8f:80:12:0e:3e:
                    c5:1e:43:df:2e:03:79:84:6d:23:05:56:bd:7e:7a:
                    b2:2c:45:38:00:13:a4:db:a5:05:1a:9b:e1:ed:dd:
                    76:39:e7:ea:90:6b:da:ce:c5:2f:2e:87:c4:32:9b:
                    dd:4f:61:54:f4:11:cc:6f:d0:aa:50:08:f4:98:7f:
                    f9:e0:c9:d4:e6:3e:2d:81:bd:dc:9a:90:f6:2c:4b:
                    23:eb:df:b6:2f:ac:3f:82:3f:f6:34:fb:f5:ff:dc:
                    9d:a1:14:b8:65:c5:a9:6b:3d:bb:8e:42:0e:cf:99:
                    de:04:52:cd:5c:3e:36:54:11:f8:56:0b:fd:57:2b:
                    2a:40:aa:6e:8e:da:45:82:28:70:39:a8:4f:3b:12:
                    69:f0:f0:3f:81:00:54:37:06:f2:3f:a2:3c:9f:a2:
                    b9:0c:43:bc:7c:12:70:31:5e:d2:7f:8f:7d:ed:54:
                    c3:1b:a6:96:49:62:67:dc:f9:67:db:76:6f:41:ce:
                    5b:e0:ea:13:6c:f5:51:15:4f:d9:6e:9f:58:f0:b9:
                    69:76:07:1c:20:03:50:9c:a9:87:4b:f8:bf:e6:ab:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:45:73:A7:07:6F:6C:EC:06:6C:EA:00:AC:2D:26:98:7F:B8:24:3D
            X509v3 Authority Key Identifier:
                keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/B3F895D691A211EDA6B67334C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:fa:74:35:85:e9:23:7b:a6:9a:c0:58:fc:a0:d7:e3:ed:d2:
         9c:b5:f4:b7:e1:4a:9c:84:c7:ca:50:c6:57:41:56:27:fe:03:
         f7:c8:37:b3:78:b6:31:ba:3b:35:c6:03:b8:7e:e8:6a:e8:bc:
         b8:8b:33:fb:35:70:fb:f4:96:81:e9:da:c0:91:1b:ae:32:11:
         0c:d7:bd:4a:d1:2b:6e:4f:f3:b2:2b:64:c9:b6:12:00:a8:09:
         b5:15:1f:0e:83:1e:57:cd:8b:30:bc:18:9b:bc:9c:02:32:02:
         6f:72:60:8b:d2:14:b9:40:34:02:2c:f8:e5:96:96:e5:ef:4e:
         78:03:4e:1b:a0:f1:b3:b6:21:b6:5b:1d:73:e6:fc:35:2b:2a:
         d1:a2:f1:a4:dc:4f:75:0e:1b:7d:bb:f4:09:3d:b6:2b:fa:dd:
         52:74:1b:b3:40:3e:b0:b0:48:a1:a2:c7:99:6b:29:94:ce:79:
         8e:84:c4:fe:51:b5:87:a2:7e:ab:29:49:f4:7c:68:50:ee:94:
         72:7d:a4:0d:ba:91:11:c6:fe:6d:5c:1f:6d:48:e3:61:6d:a6:
         c0:b0:23:d1:4f:18:55:3f:cc:b2:95:c1:39:1b:e4:90:38:9f:
         5d:bd:df:00:9d:07:16:80:13:74:f5:3f:a3:d5:43:28:77:7a:
         20:8b:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:17:09 2026 by rpki-client