Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/E2E11B669E5811EEAFEC8E0EC4F9AE02.roa
File:                     E2E11B669E5811EEAFEC8E0EC4F9AE02.roa (raw, json)
Hash identifier:          2TgfBfhOOoIyM12+TZJ7XblTrgTmkcAVE7khTXWQBZQ=
Subject key identifier:   C4:6A:CE:60:E5:46:50:FA:4E:3A:9F:39:A9:3E:FA:24:E5:F5:10:91
Certificate issuer:       /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial:       08D2
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/E2E11B669E5811EEAFEC8E0EC4F9AE02.roa
Signing time:             Thu 06 Aug 2026 20:40:54 +0000
ROA not before:           Thu 06 Aug 2026 20:40:54 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132115
IP address blocks:        103.26.216.0/24 maxlen: 24
                          103.26.217.0/24 maxlen: 24
                          103.26.218.0/24 maxlen: 24
                          103.26.219.0/24 maxlen: 24
                          150.129.176.0/24 maxlen: 24
                          150.129.177.0/24 maxlen: 24
                          150.129.178.0/24 maxlen: 24
                          150.129.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
                          rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180488, serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
        Validity
            Not Before: Aug  6 20:40:54 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a74f156-a99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:cd:a7:2b:97:40:d9:b2:f0:44:59:55:bb:
                    9b:6a:ed:12:bf:5b:fe:09:65:bc:4a:8a:a8:0e:f8:
                    10:ce:60:a4:ed:e3:68:f5:84:96:78:5c:48:8f:62:
                    18:be:89:7e:b6:cd:42:b5:e1:0f:25:53:ea:5a:ed:
                    94:be:4b:71:3a:3a:4d:49:d6:00:eb:39:51:58:83:
                    d4:c9:da:59:38:b6:a3:dc:53:0f:d3:e0:39:ae:8a:
                    01:23:09:cc:2b:9a:2e:1f:73:c4:6c:c1:9a:c9:e1:
                    f5:52:4a:84:b3:e5:96:28:fa:12:be:f2:78:b3:01:
                    71:4e:e6:2f:3d:43:34:2a:65:be:1d:b0:d3:ca:53:
                    eb:7b:c6:10:ee:da:ae:d5:49:37:fd:a5:f4:d1:ea:
                    3d:27:12:9b:6c:cf:20:55:cd:29:3a:40:20:ff:18:
                    bf:d9:61:21:e9:f0:1b:f2:18:6f:6c:09:97:98:46:
                    7d:49:b3:10:a8:b2:8f:c6:4e:94:9c:c6:44:24:84:
                    58:52:69:d2:ff:41:17:f9:b7:bf:b8:d4:09:df:2b:
                    1a:84:26:f1:6a:86:3c:ec:3b:b9:98:7e:31:a9:dd:
                    49:6d:5b:ee:35:6c:45:d8:84:02:2b:45:ad:67:c9:
                    bd:e8:d2:c1:dd:99:7b:02:2a:10:be:52:80:1d:5a:
                    3b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6A:CE:60:E5:46:50:FA:4E:3A:9F:39:A9:3E:FA:24:E5:F5:10:91
            X509v3 Authority Key Identifier:
                keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/E2E11B669E5811EEAFEC8E0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.216.0/22
                  150.129.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:9c:fd:38:84:ac:d3:73:5a:90:b6:aa:c4:0a:4d:62:a4:f8:
         98:5e:8e:4e:b9:bd:80:66:65:01:d3:6c:e6:a1:45:31:8d:dd:
         aa:67:63:4b:1f:4c:ad:b1:8c:24:02:d4:05:40:d3:f2:e0:f9:
         9a:41:a3:0a:69:dd:5e:92:0d:df:c7:00:9d:34:3e:de:32:c5:
         18:5e:dd:ab:77:af:85:9a:fc:ec:b7:ee:39:09:f2:01:d2:f7:
         bd:92:98:cb:00:8f:fd:3d:7d:23:43:11:00:98:d6:97:c5:ac:
         ca:53:56:2a:65:d1:49:98:34:bb:23:51:d1:9e:78:f2:e7:3f:
         07:20:ca:72:ee:95:0d:76:85:ba:bb:ec:58:6a:59:3a:5b:07:
         53:c4:3f:0a:38:07:e6:28:ff:70:6a:52:fa:5b:2b:89:31:53:
         83:2a:18:c4:e4:9a:7d:10:a5:14:77:89:c9:e8:39:af:25:c0:
         52:a3:ae:09:eb:71:47:1b:f7:e1:97:75:ba:15:e7:76:86:8e:
         b9:b5:23:4c:de:77:3b:9c:11:e5:b3:e4:9b:c9:d1:60:b0:4b:
         d0:4d:e7:23:b7:62:5f:17:70:79:17:75:7d:ba:7d:74:f2:6a:
         d5:a4:b0:7d:c4:6b:9e:c7:d4:ce:de:ce:04:12:e0:3c:66:ee:
         11:85:ad:66
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA0ODgxMTAvBgNVBAUTKEM0RjZDOTMwRTA5QjgxQUY1RThDMDBFNzlBNTg0MkFB
NzI3M0QxMEYwHhcNMjYwODA2MjA0MDU0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc0ZjE1Ni1hOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszfNpyuXQNmy8ERZVbubau0Sv1v+CWW8SoqoDvgQzmCk7eNo9YSWeFxIj2IY
vol+ts1CteEPJVPqWu2UvktxOjpNSdYA6zlRWIPUydpZOLaj3FMP0+A5rooBIwnM
K5ouH3PEbMGayeH1UkqEs+WWKPoSvvJ4swFxTuYvPUM0KmW+HbDTylPre8YQ7tqu
1Uk3/aX00eo9JxKbbM8gVc0pOkAg/xi/2WEh6fAb8hhvbAmXmEZ9SbMQqLKPxk6U
nMZEJIRYUmnS/0EX+be/uNQJ3ysahCbxaoY87Du5mH4xqd1JbVvuNWxF2IQCK0Wt
Z8m96NLB3Zl7AioQvlKAHVo7UQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMRqzmDl
RlD6TjqfOak++iTl9RCRMB8GA1UdIwQYMBaAFMT2yTDgm4GvXowA55pYQqpyc9EP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDQ4OC82NTIwRkYwOEYx
RDAxMUVBQTQ4Q0VFNkZDNEY5QUUwMi94UGJKTU9DYmdhOWVqQURubWxoQ3FuSnow
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hQYkpNT0NiZ2E5ZWpBRG5tbGhDcW5KejBROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODA0ODgvNjUyMEZGMDhGMUQwMTFFQUE0OENFRTZGQzRGOUFFMDIvRTJFMTFCNjY5
RTU4MTFFRUFGRUM4RTBFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZxrYAwQCloGwMA0GCSqGSIb3DQEBCwUAA4IBAQB3nP04hKzTc1qQ
tqrECk1ipPiYXo5Oub2AZmUB02zmoUUxjd2qZ2NLH0ytsYwkAtQFQNPy4PmaQaMK
ad1ekg3fxwCdND7eMsUYXt2rd6+Fmvzst+45CfIB0ve9kpjLAI/9PX0jQxEAmNaX
xazKU1YqZdFJmDS7I1HRnnjy5z8HIMpy7pUNdoW6u+xYalk6WwdTxD8KOAfmKP9w
alL6WyuJMVODKhjE5Jp9EKUUd4nJ6DmvJcBSo64J63FHG/fhl3W6Fed2ho65tSNM
3nc7nBHls+SbydFgsEvQTecjt2JfF3B5F3V9un108mrVpLB9xGuex9TO3s4EEuA8
Zu4Rha1m
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:05:38 2026 by rpki-client