Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/670DF186232111EB9896B783C4F9AE02.roa
File:                     670DF186232111EB9896B783C4F9AE02.roa (raw, json)
Hash identifier:          JDnnr+gXElLZfFNqxroiEtHe91q0ZicgMHi1XY427Ss=
Subject key identifier:   62:7F:2C:F4:88:3E:D4:25:96:54:1F:CB:7C:DE:DD:43:A0:B9:8E:AC
Certificate issuer:       /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA
Certificate serial:       0EC5
Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/670DF186232111EB9896B783C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:27:38 +0000
ROA not before:           Thu 28 Aug 2025 18:08:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137969
IP address blocks:        103.140.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl
                          rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3781 (0xec5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA
        Validity
            Not Before: Aug 28 18:08:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4770a-50eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:11:90:c3:d6:53:4d:d6:44:73:ac:67:e3:
                    a7:45:be:2a:8a:1d:ec:ce:55:d7:62:fc:5d:3e:67:
                    7a:9d:76:72:aa:97:b8:83:1c:03:9b:ae:a9:ef:a6:
                    b8:33:8a:45:a2:69:48:83:64:29:0c:60:01:ef:5e:
                    01:7d:7e:7a:cc:c9:1a:cf:b5:df:2e:dc:14:a2:7e:
                    48:f0:fd:d1:ee:09:7c:a7:24:f6:fb:ea:51:d4:3b:
                    09:9f:c0:4d:52:79:01:30:16:e8:ce:7f:f0:9c:cd:
                    21:20:6a:55:f1:2e:68:90:82:13:b7:33:6b:96:e1:
                    11:6c:ee:67:ec:96:b4:e8:65:2b:5f:c9:9c:2c:16:
                    19:f5:eb:85:9d:7e:54:d7:1d:89:55:ea:9d:28:b4:
                    8a:1f:9d:a0:17:4c:62:2b:51:15:dc:4d:1b:d1:1f:
                    68:1b:56:66:67:d0:b6:65:ab:dc:23:04:0a:1e:20:
                    9d:e6:4c:44:c9:44:84:8d:57:22:32:98:4c:0b:9c:
                    2f:b7:4e:72:b3:d8:6b:b3:4c:a8:b6:c4:ea:24:6d:
                    30:97:fc:28:97:71:43:22:14:f6:d9:a1:e6:a3:82:
                    4c:7e:84:78:18:0f:1b:7a:0c:ab:ac:49:a1:97:89:
                    10:c8:2a:48:0f:ee:fb:62:c3:8e:94:3e:1e:dd:da:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7F:2C:F4:88:3E:D4:25:96:54:1F:CB:7C:DE:DD:43:A0:B9:8E:AC
            X509v3 Authority Key Identifier:
                keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/670DF186232111EB9896B783C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:1e:d1:91:15:d8:61:33:6f:a4:d3:2e:eb:b1:96:9a:ce:e6:
         d0:bd:85:82:9d:c0:97:fa:37:a2:36:66:b0:fc:96:ed:df:0c:
         58:7d:65:6c:32:69:26:4d:6f:cf:af:e1:68:a1:a8:9c:fe:2c:
         13:f4:cf:53:1b:7d:e7:41:17:e6:0c:e1:f9:c2:af:61:c8:da:
         41:f4:09:a6:5d:2b:db:57:11:d8:80:cf:d9:81:45:db:fb:76:
         31:49:7c:99:d6:f7:66:10:ce:73:f2:ab:49:65:27:6e:fa:d0:
         fc:75:0d:01:d3:1a:f9:ff:ea:2e:e4:c9:84:95:9c:df:57:dc:
         bd:be:34:4c:ff:b7:1d:55:63:65:09:70:b8:9a:78:c9:18:1e:
         47:a7:cb:c5:67:0d:0c:27:11:ad:9e:2f:76:6a:f1:55:8e:c7:
         bf:a7:74:52:1d:2e:48:ec:75:8d:2a:74:12:1e:0f:77:8a:ab:
         3f:ff:3c:86:31:fa:c2:c0:14:04:11:a1:da:8c:a0:84:74:2c:
         29:31:00:1f:c1:6e:d9:3f:c2:67:d6:a4:06:c8:8d:b3:11:da:
         56:d7:57:b3:05:61:23:20:05:53:69:c6:6e:05:10:c4:13:52:
         50:2a:af:b2:c7:c1:29:32:ee:96:97:45:d0:51:ab:10:44:4d:
         51:4a:50:9f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB
ODcyMDdCRUEwHhcNMjUwODI4MTgwODIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzcwYS01MGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtY4RkMPWU03WRHOsZ+OnRb4qih3szlXXYvxdPmd6nXZyqpe4gxwDm66p76a4
M4pFomlIg2QpDGAB714BfX56zMkaz7XfLtwUon5I8P3R7gl8pyT2++pR1DsJn8BN
UnkBMBbozn/wnM0hIGpV8S5okIITtzNrluERbO5n7Ja06GUrX8mcLBYZ9euFnX5U
1x2JVeqdKLSKH52gF0xiK1EV3E0b0R9oG1ZmZ9C2ZavcIwQKHiCd5kxEyUSEjVci
MphMC5wvt05ys9hrs0yotsTqJG0wl/wol3FDIhT22aHmo4JMfoR4GA8begyrrEmh
l4kQyCpID+77YsOOlD4e3don0QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGJ/LPSI
PtQlllQfy3ze3UOguY6sMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE
Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl
LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTgwMjIvQzYxQzI1NkFBRENDMTFFOUFDNjcyRjRCQzRGOUFFMDIvNjcwREYxODYy
MzIxMTFFQjk4OTZCNzgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4zkMA0GCSqGSIb3DQEBCwUAA4IBAQA5HtGRFdhhM2+k0y7rsZaa
zubQvYWCncCX+jeiNmaw/Jbt3wxYfWVsMmkmTW/Pr+Fooaic/iwT9M9TG33nQRfm
DOH5wq9hyNpB9AmmXSvbVxHYgM/ZgUXb+3YxSXyZ1vdmEM5z8qtJZSdu+tD8dQ0B
0xr5/+ou5MmElZzfV9y9vjRM/7cdVWNlCXC4mnjJGB5Hp8vFZw0MJxGtni92avFV
jse/p3RSHS5I7HWNKnQSHg93iqs//zyGMfrCwBQEEaHajKCEdCwpMQAfwW7ZP8Jn
1qQGyI2zEdpW11ezBWEjIAVTacZuBRDEE1JQKq+yx8EpMu6Wl0XQUasQRE1RSlCf
-----END CERTIFICATE-----
Generated at Thu Mar 12 19:55:56 2026 by rpki-client