Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/DB87E692ADB211E99AAEE879C4F9AE02.roa
File:                     DB87E692ADB211E99AAEE879C4F9AE02.roa (raw, json)
Hash identifier:          WSsbciJymN6UFz1blMHUZbpizK4PsjK3U2qCZW19tt4=
Subject key identifier:   C6:90:D3:4D:7D:86:F9:F4:9E:49:AE:4E:F7:98:AE:AF:3E:1A:C2:02
Certificate issuer:       /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial:       0F00
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/DB87E692ADB211E99AAEE879C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 17:35:21 +0000
ROA not before:           Thu 06 Aug 2026 17:35:21 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139339
IP address blocks:        103.141.120.0/23 maxlen: 23
                          103.141.120.0/24 maxlen: 24
                          103.141.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 17:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3840 (0xf00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
        Validity
            Not Before: Aug  6 17:35:21 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a74c5d9-b6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:e2:ef:6b:8a:e6:2c:1a:4f:df:ef:6a:41:
                    2e:7f:9c:5e:ed:8c:87:dd:4c:40:11:c7:66:e1:bb:
                    a2:51:75:4c:7a:a1:3a:5c:d0:40:16:c5:13:41:42:
                    53:43:e8:c5:3f:4a:58:d8:88:3b:fc:e9:a2:7d:d2:
                    a1:f8:2e:f7:41:12:b1:9f:61:62:75:c8:a4:c0:e7:
                    84:87:af:f6:71:17:b0:c5:b6:bd:0b:d4:ea:cc:a6:
                    b0:a5:c6:db:71:13:44:ba:7e:11:31:d8:00:cb:99:
                    00:4b:4c:87:58:04:9e:96:44:44:7f:77:13:58:44:
                    98:9b:f5:ae:24:8f:51:75:14:dd:5d:2b:e9:85:a0:
                    f4:a3:10:54:4d:ed:8b:10:db:9c:b1:c4:7d:a0:09:
                    cb:fe:94:3e:1b:3e:8d:9a:93:3f:e5:6b:5e:28:69:
                    ac:f5:d2:84:7f:24:da:13:51:49:7f:f9:b3:85:35:
                    a9:3c:9d:a2:d1:75:52:6f:51:31:33:6a:3a:9f:eb:
                    fd:29:40:f9:69:19:8b:18:2e:e9:91:7c:a0:85:79:
                    cc:94:47:47:24:78:d6:58:ef:1d:27:43:59:48:dc:
                    f4:50:21:67:dc:d5:b5:5f:a0:fa:0f:09:cc:09:3b:
                    85:ad:98:ed:82:39:70:e2:7b:28:bb:ce:af:9b:c3:
                    3e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:90:D3:4D:7D:86:F9:F4:9E:49:AE:4E:F7:98:AE:AF:3E:1A:C2:02
            X509v3 Authority Key Identifier:
                keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/DB87E692ADB211E99AAEE879C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:62:95:54:49:4b:16:cb:81:4a:46:4e:4d:d2:93:87:36:4b:
         0b:a3:65:46:69:61:95:f4:65:6a:c5:15:99:0d:ef:5c:05:38:
         a6:b7:0e:17:06:38:b3:21:55:67:71:67:d5:83:3b:0e:7e:df:
         89:f1:7f:8c:4d:50:b4:24:bb:db:43:30:7b:e8:4c:5c:2c:9e:
         01:62:b1:72:d3:b5:97:a0:52:fb:32:e8:fa:40:25:e4:9a:62:
         fd:1d:db:8b:f8:11:b6:1d:33:07:b6:0d:63:c4:23:c2:75:69:
         03:88:8c:2e:b7:b9:48:16:4b:8e:a5:1a:b9:b0:4e:54:41:c2:
         d4:9f:18:f1:0a:60:0e:05:47:a0:b6:85:b6:5b:a5:ac:bf:79:
         a8:0c:2a:31:45:3f:98:2b:77:20:e1:79:29:ae:31:95:e3:09:
         88:21:8a:49:7d:7b:10:fe:4e:cf:57:88:b8:3d:42:4e:39:48:
         d2:31:32:35:a4:c6:4f:1f:7a:f1:c5:a9:47:f4:2f:ac:16:5d:
         52:f3:b4:10:28:1b:0a:33:63:f5:5f:ef:72:ef:7c:db:31:a7:
         7e:00:26:69:b1:83:b1:8e:9e:cc:36:30:0c:ef:59:eb:a9:d2:
         fe:e5:76:3f:7c:1e:83:16:13:4c:e2:30:55:d5:e8:47:29:03:
         46:12:00:9e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTMxNTMxMTAvBgNVBAUTKDQ4QzI3RkZGQjY0MjQ3MTJGQzZGQzYyODcxRDUzNkM1
MzFGRUYxOUIwHhcNMjYwODA2MTczNTIxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc0YzVkOS1iNmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAozji72uK5iwaT9/vakEuf5xe7YyH3UxAEcdm4buiUXVMeqE6XNBAFsUTQUJT
Q+jFP0pY2Ig7/OmifdKh+C73QRKxn2FidcikwOeEh6/2cRewxba9C9TqzKawpcbb
cRNEun4RMdgAy5kAS0yHWASelkREf3cTWESYm/WuJI9RdRTdXSvphaD0oxBUTe2L
ENucscR9oAnL/pQ+Gz6NmpM/5WteKGms9dKEfyTaE1FJf/mzhTWpPJ2i0XVSb1Ex
M2o6n+v9KUD5aRmLGC7pkXyghXnMlEdHJHjWWO8dJ0NZSNz0UCFn3NW1X6D6DwnM
CTuFrZjtgjlw4nsou86vm8M+mwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMaQ0019
hvn0nkmuTveYrq8+GsICMB8GA1UdIwQYMBaAFEjCf/+2QkcS/G/GKHHVNsUx/vGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzE1My84NjA3Nzk4MEFE
QjIxMUU5OERBRUM0NzlDNEY5QUUwMi9TTUpfXzdaQ1J4TDhiOFlvY2RVMnhUSC04
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NNSl9fN1pDUnhMOGI4WW9jZFUyeFRILThacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTMxNTMvODYwNzc5ODBBREIyMTFFOThEQUVDNDc5QzRGOUFFMDIvREI4N0U2OTJB
REIyMTFFOTlBQUVFODc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ414MA0GCSqGSIb3DQEBCwUAA4IBAQAXYpVUSUsWy4FKRk5N0pOH
NksLo2VGaWGV9GVqxRWZDe9cBTimtw4XBjizIVVncWfVgzsOft+J8X+MTVC0JLvb
QzB76ExcLJ4BYrFy07WXoFL7Muj6QCXkmmL9HduL+BG2HTMHtg1jxCPCdWkDiIwu
t7lIFkuOpRq5sE5UQcLUnxjxCmAOBUegtoW2W6Wsv3moDCoxRT+YK3cg4XkprjGV
4wmIIYpJfXsQ/k7PV4i4PUJOOUjSMTI1pMZPH3rxxalH9C+sFl1S87QQKBsKM2P1
X+9y73zbMad+ACZpsYOxjp7MNjAM71nrqdL+5XY/fB6DFhNM4jBV1ehHKQNGEgCe
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:16:52 2026 by rpki-client