Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/424653EEC6CB11ECB185E43EC4F9AE02.roa
File:                     424653EEC6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier:          s3/csZ2Z16vYUIhSY9s3FRq7FIuaVzp8g/xZvWRA4Ds=
Subject key identifier:   FB:5F:B7:69:BE:82:1C:4B:EF:C7:1A:6A:62:60:8E:6B:1C:C3:4F:F7
Certificate issuer:       /CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
Certificate serial:       03C7
Authority key identifier: 78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/424653EEC6CB11ECB185E43EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:24:52 +0000
ROA not before:           Sat 11 Oct 2025 03:27:35 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132742
IP address blocks:        43.243.240.0/22 maxlen: 24
                          103.39.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl
                          rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110650, serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
        Validity
            Not Before: Oct 11 03:27:35 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a44c34-db10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:19:b9:86:da:fb:87:10:21:3d:14:1b:50:
                    ae:6a:11:d5:7e:df:7d:16:fe:12:88:cb:03:c7:2c:
                    13:f7:82:fc:9f:b0:08:79:82:33:0d:af:70:a0:5d:
                    a4:78:08:a1:0d:6b:0f:ba:5b:1a:1c:51:4a:5f:40:
                    37:33:ad:21:39:8a:e1:be:a2:b1:ac:55:36:3a:16:
                    53:9f:e2:a0:62:7a:78:1e:1d:47:08:26:53:af:dd:
                    e0:6c:d2:fc:08:40:0c:0c:c2:c5:b8:da:f7:08:c9:
                    ad:2d:39:e9:f7:51:ce:a2:4c:55:b0:04:9e:aa:e5:
                    66:fa:12:93:01:8f:e9:f1:30:75:2d:3c:64:a8:96:
                    31:27:40:7b:4d:7c:f5:0f:a4:4d:4c:e1:2a:da:7c:
                    45:6c:96:5c:ab:e4:ae:65:bd:46:0a:dd:06:fb:fc:
                    3e:d1:0f:ef:c0:4b:01:06:37:ca:30:5b:f6:b7:1d:
                    0f:c7:d4:54:42:94:da:f4:ff:75:e6:96:83:1e:9d:
                    b0:29:af:ca:eb:0b:7c:64:56:12:97:8e:bc:d2:db:
                    76:84:6c:0a:0f:7e:28:6f:5b:d6:22:95:b6:21:a1:
                    7f:97:93:a6:6e:73:1f:c6:e8:90:d0:4f:47:55:6b:
                    1e:18:3e:99:11:0f:20:f2:b3:9b:36:a1:f6:3b:09:
                    f4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5F:B7:69:BE:82:1C:4B:EF:C7:1A:6A:62:60:8E:6B:1C:C3:4F:F7
            X509v3 Authority Key Identifier:
                keyid:78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/424653EEC6CB11ECB185E43EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.240.0/22
                  103.39.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:d2:c1:f3:ae:a1:3d:40:84:fd:e7:00:98:12:16:c6:90:39:
         92:ee:32:e7:44:d2:37:78:f2:3f:58:92:19:ea:7f:6d:4b:71:
         a4:60:13:fc:fa:d4:1f:f3:f1:b0:94:d6:4b:71:ae:d4:ca:79:
         ba:f3:d0:77:95:bb:b2:80:9e:55:1d:28:15:bb:e2:a0:5a:96:
         3e:38:23:9b:a2:68:24:b5:c6:53:00:ec:e2:50:17:95:bf:12:
         8d:14:25:3a:bf:12:d2:75:5d:19:5e:9b:b1:5a:42:f8:e8:ce:
         a0:65:c2:41:93:4b:9a:04:54:19:c3:fd:a0:fb:b8:e5:20:31:
         6e:9f:11:92:14:1e:ff:20:c7:16:96:d4:37:57:dd:b0:59:72:
         6b:88:7b:f0:4d:5f:da:d7:31:6d:c4:07:ba:a5:d3:c9:6c:5b:
         f0:d7:01:6b:b8:96:48:d6:47:fe:3a:64:bc:99:56:e4:73:14:
         33:ed:f3:4b:19:47:99:8c:fd:45:9c:92:8f:7c:55:7b:bc:59:
         62:10:88:c7:a6:85:02:49:3d:0d:08:96:02:49:21:4b:50:41:
         74:c0:60:ed:67:74:1a:86:ac:0f:bd:22:c1:21:da:bc:c6:aa:
         12:0a:b8:76:cc:db:9d:44:b2:54:ea:cd:a6:b1:3f:e9:58:c4:
         48:0f:b8:06
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA2NTAxMTAvBgNVBAUTKDc4Qjc5Q0Y4Mjc1MTg2MUYyNzlBNUZBNTA0OTMxNTM4
REFEQ0RBRkEwHhcNMjUxMDExMDMyNzM1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGMzNC1kYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApjoZuYba+4cQIT0UG1CuahHVft99Fv4SiMsDxywT94L8n7AIeYIzDa9woF2k
eAihDWsPulsaHFFKX0A3M60hOYrhvqKxrFU2OhZTn+KgYnp4Hh1HCCZTr93gbNL8
CEAMDMLFuNr3CMmtLTnp91HOokxVsASequVm+hKTAY/p8TB1LTxkqJYxJ0B7TXz1
D6RNTOEq2nxFbJZcq+SuZb1GCt0G+/w+0Q/vwEsBBjfKMFv2tx0Px9RUQpTa9P91
5paDHp2wKa/K6wt8ZFYSl4680tt2hGwKD34ob1vWIpW2IaF/l5OmbnMfxuiQ0E9H
VWseGD6ZEQ8g8rObNqH2Own0lQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPtft2m+
ghxL78caamJgjmscw0/3MB8GA1UdIwQYMBaAFHi3nPgnUYYfJ5pfpQSTFTja3Nr6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDY1MC82NTk2Q0M3MkM2
MDExMUVDQTM4RjM0MTBDNEY5QUUwMi9lTGVjLUNkUmhoOG5tbC1sQkpNVk9OcmMy
dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VMZWMtQ2RSaGg4bm1sLWxCSk1WT05yYzJ2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA2NTAvNjU5NkNDNzJDNjAxMTFFQ0EzOEYzNDEwQzRGOUFFMDIvNDI0NjUzRUVD
NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK/PwAwQCZyc4MA0GCSqGSIb3DQEBCwUAA4IBAQAs0sHzrqE9QIT9
5wCYEhbGkDmS7jLnRNI3ePI/WJIZ6n9tS3GkYBP8+tQf8/GwlNZLca7Uynm689B3
lbuygJ5VHSgVu+KgWpY+OCObomgktcZTAOziUBeVvxKNFCU6vxLSdV0ZXpuxWkL4
6M6gZcJBk0uaBFQZw/2g+7jlIDFunxGSFB7/IMcWltQ3V92wWXJriHvwTV/a1zFt
xAe6pdPJbFvw1wFruJZI1kf+OmS8mVbkcxQz7fNLGUeZjP1FnJKPfFV7vFliEIjH
poUCST0NCJYCSSFLUEF0wGDtZ3QahqwPvSLBIdq8xqoSCrh2zNudRLJU6s2msT/p
WMRID7gG
-----END CERTIFICATE-----
Generated at Sat Mar 21 22:44:23 2026 by rpki-client