Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/9E54710E16D511F09EF28A4EC4F9AE02.roa
File:                     9E54710E16D511F09EF28A4EC4F9AE02.roa (raw, json)
Hash identifier:          PS353luWU5EZRXf1V5KYpvKbmWd2t8tkTqJLhBlN/tY=
Subject key identifier:   7A:05:D8:A7:58:FF:BC:A8:FA:B0:99:5B:4A:44:DC:FE:29:57:14:FC
Certificate issuer:       /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Certificate serial:       019B
Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/9E54710E16D511F09EF28A4EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:22:51 +0000
ROA not before:           Thu 31 Jul 2025 05:42:02 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     48266
IP address blocks:        103.190.232.0/24 maxlen: 24
                          2400:9320::/48 maxlen: 48
                          2400:9320:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
                          rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 04:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
        Validity
            Not Before: Jul 31 05:42:02 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58f2b-7c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:15:03:b7:b1:8c:0e:a9:bd:dd:c4:13:3b:
                    8f:f6:a3:5e:35:3a:c5:7a:dd:10:f4:d7:41:bf:36:
                    99:9e:80:b0:39:34:20:91:53:da:61:ca:61:cd:dd:
                    ab:d1:57:d4:0c:bd:3b:95:ea:5d:99:06:8e:d6:5d:
                    e5:dc:bf:79:a0:e6:fd:d2:80:44:e1:8d:06:01:2f:
                    d4:08:4e:3a:c7:96:ab:15:0d:3e:64:1f:04:73:dd:
                    c7:1d:7b:b4:22:c3:e2:5d:03:17:c2:84:53:a8:17:
                    af:52:ef:42:64:db:48:38:43:c7:9f:39:16:c6:62:
                    60:b0:16:16:27:81:c4:84:45:51:20:e8:77:5b:e9:
                    f0:98:02:2d:18:74:9d:0e:8f:0b:23:be:e3:1e:21:
                    bf:be:b2:2d:01:ee:4d:44:64:f1:68:6d:e9:5f:da:
                    37:c5:63:07:36:4a:cb:a7:78:b5:b1:ac:bd:49:fe:
                    c7:46:79:01:55:f0:51:bd:0d:e4:ae:9f:61:f3:52:
                    dc:21:8d:88:ef:5a:7f:9e:d9:bb:42:d7:d4:13:0c:
                    ff:95:1b:49:51:e6:ad:52:af:d2:c4:fc:cb:5e:76:
                    3c:ad:3a:fb:77:c8:74:24:d9:5d:60:30:76:29:48:
                    bf:3f:66:e3:7d:51:70:14:eb:52:e2:94:45:81:0e:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:05:D8:A7:58:FF:BC:A8:FA:B0:99:5B:4A:44:DC:FE:29:57:14:FC
            X509v3 Authority Key Identifier:
                keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/9E54710E16D511F09EF28A4EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.232.0/24
                IPv6:
                  2400:9320::/48
                  2400:9320:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:4a:d9:de:ec:a1:44:bb:c6:9a:c8:26:05:af:2d:9f:37:aa:
         71:08:7b:6f:e5:44:7a:cc:80:c5:58:65:51:f8:e3:79:21:76:
         20:8a:01:ca:d7:97:cf:b5:4c:53:15:ce:46:67:c4:d2:03:e5:
         dc:40:25:36:00:96:40:ef:a2:be:c7:c5:9e:c5:ef:00:2d:42:
         ef:6a:c5:af:d6:5d:46:8e:ed:f5:ac:6e:18:01:e6:73:b7:2d:
         17:30:5a:a3:88:10:c0:bc:01:57:b2:62:09:0b:bb:1e:89:11:
         fe:eb:ed:ce:ee:6a:2b:f9:44:89:f8:36:ba:87:86:fe:ef:c9:
         73:fc:8b:45:0f:fb:2c:cb:c4:f7:2f:07:f6:c1:82:79:77:f8:
         ac:a1:05:e3:a9:17:f1:74:7e:cf:9d:c4:4b:82:85:37:c1:87:
         8c:30:bb:fe:b8:2d:94:7a:69:15:d7:14:94:b7:96:11:da:26:
         fb:0d:a2:91:36:d9:5a:b9:f2:d1:46:84:2d:57:90:a2:36:be:
         09:13:e5:1d:fa:a4:b1:42:3f:aa:bd:b2:67:9a:36:f0:21:46:
         58:d3:c0:cc:a2:39:d1:ad:9e:e1:59:5a:0c:6e:93:1d:7e:fb:
         ef:b4:b2:88:89:4f:06:52:7a:68:5d:b0:45:c8:25:0e:b4:b0:
         e6:47:46:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:51:22 2026 by rpki-client