Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/C73BE8A654F311E7AC64ED3AC4F9AE02.roa
File:                     C73BE8A654F311E7AC64ED3AC4F9AE02.roa (raw, json)
Hash identifier:          WHFTgTdN91JmiwgkjLTnaveiREzYpYdH00fsH4EjbJg=
Subject key identifier:   54:27:EF:D3:E6:76:FD:32:16:B5:CA:2F:C5:FC:40:8F:2E:73:B1:84
Certificate issuer:       /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Certificate serial:       243F
Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/C73BE8A654F311E7AC64ED3AC4F9AE02.roa
Signing time:             Sun 02 Aug 2026 16:28:03 +0000
ROA not before:           Sun 02 Aug 2026 16:28:03 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     58629
IP address blocks:        103.12.72.0/22 maxlen: 24
                          2001:df0:2c5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl
                          rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9279 (0x243f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
        Validity
            Not Before: Aug  2 16:28:03 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6f7013-1691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:74:93:f0:c8:2c:05:b7:ca:ed:ce:1d:84:fb:
                    cb:b9:83:2f:b6:45:8d:12:f8:43:5c:1a:0b:7a:23:
                    a7:9e:5d:6d:f8:51:84:ec:61:61:33:8e:4a:04:37:
                    9f:2d:cc:f3:66:e4:7b:f5:80:03:57:36:69:74:c3:
                    4f:53:38:93:e2:e1:1f:44:a8:86:e4:4d:7a:82:24:
                    a9:a7:94:30:63:e8:59:cd:9e:31:a6:e9:5a:0f:bd:
                    58:92:52:cd:9c:97:87:aa:9f:3b:51:3c:1a:7c:e4:
                    37:96:e5:57:d5:77:96:12:d5:08:10:f1:28:62:c0:
                    88:01:24:ce:86:e6:f5:f3:76:91:a2:31:48:c4:e3:
                    89:eb:64:d7:06:3d:de:be:38:2a:c1:ed:c3:5a:d2:
                    24:ed:c5:55:29:5a:b9:49:2c:d3:ea:ed:1f:40:4c:
                    aa:6f:47:d1:91:06:88:2f:9c:70:fb:90:f3:0d:e9:
                    94:00:f7:c3:64:20:2a:8b:f6:b7:c0:ee:21:2c:aa:
                    db:c3:53:99:e8:c6:0b:00:9c:d3:67:fd:6d:51:05:
                    f8:db:f3:b2:96:d5:01:4f:b5:ee:3c:c0:63:07:42:
                    d8:c2:89:92:3a:8e:e5:60:94:77:25:5a:00:a8:8f:
                    13:f4:ee:da:e8:69:b3:2b:24:dd:b6:dc:32:67:05:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:27:EF:D3:E6:76:FD:32:16:B5:CA:2F:C5:FC:40:8F:2E:73:B1:84
            X509v3 Authority Key Identifier:
                keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/C73BE8A654F311E7AC64ED3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.72.0/22
                IPv6:
                  2001:df0:2c5::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:db:35:20:24:d8:0b:80:46:0b:02:7c:76:46:d2:2b:24:
         33:94:ab:1c:c0:32:b2:d6:dd:6f:90:9f:66:04:ff:6a:04:40:
         d0:f1:61:a8:6b:67:ae:04:0b:b0:73:18:8b:98:6c:e7:af:2b:
         33:07:d9:43:c6:55:f9:14:bd:b2:e8:62:e0:9d:86:0e:89:93:
         62:43:2e:dc:bc:63:41:4d:bf:4c:df:b3:18:e6:bc:07:66:2b:
         b6:ce:81:0b:b2:1d:d1:50:4a:38:32:2e:a5:91:ed:9c:03:ea:
         ec:f4:53:db:c9:86:a0:67:25:dd:3f:d9:52:72:1b:2c:a6:15:
         b4:69:17:3d:06:0f:ea:aa:93:12:c7:04:57:e3:fa:0c:dc:e0:
         96:08:80:67:c3:29:bd:95:ed:8c:63:ed:1a:ea:84:53:5d:1d:
         91:9c:0d:fe:e3:31:5b:20:7a:f2:f1:98:9d:46:80:7c:b7:8a:
         61:06:c6:b1:36:5d:cd:59:c4:e4:4d:79:d6:8b:60:5d:cf:82:
         48:d0:df:fb:58:ec:e4:c8:75:e3:f7:f8:55:19:8d:a0:43:31:
         92:58:61:28:48:a8:9c:3b:f0:31:a5:96:e7:3e:54:cd:04:c4:
         50:8f:2d:78:dd:60:bb:6f:d5:eb:de:6d:a6:a3:24:e6:8e:d5:
         b2:9b:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:21:09 2026 by rpki-client