Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/79F6C038BD0911F18D2197FD4411F970.roa
File:                     79F6C038BD0911F18D2197FD4411F970.roa (raw, json)
Hash identifier:          veYmhqxf4+3jynUT9KoMotn0IkmJGU2+O+BOimv8Rfs=
Subject key identifier:   F5:97:BC:FA:FF:0B:CC:C6:92:00:60:EF:A9:C6:D3:5D:2C:5A:17:64
Certificate issuer:       /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
Certificate serial:       0178
Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/79F6C038BD0911F18D2197FD4411F970.roa
Signing time:             Wed 30 Sep 2026 21:04:12 +0000
ROA not before:           Wed 30 Sep 2026 21:04:12 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152605
IP address blocks:        103.163.48.0/24 maxlen: 24
                          103.163.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 23:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
        Validity
            Not Before: Sep 30 21:04:12 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6abd794c-3394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:61:90:fb:06:57:d7:1c:d9:e5:b8:f5:d1:
                    4d:7f:a2:3d:03:0d:33:cd:1c:44:d4:2d:46:fa:1c:
                    34:7f:86:3d:c1:87:5f:03:f9:d4:81:94:bd:17:d2:
                    c6:2c:aa:3b:31:2f:6a:4f:70:d5:80:84:7e:55:52:
                    47:95:bf:38:1e:d2:64:21:cf:cb:fe:64:b1:d0:a7:
                    4b:4b:c7:d6:8e:24:e4:eb:0c:1d:9f:a6:88:8d:62:
                    8e:a0:be:83:f7:05:56:80:f9:1b:8c:d4:59:c1:65:
                    b1:de:5c:9a:02:1c:fb:5b:5e:f5:21:28:71:97:8c:
                    50:73:b2:c3:61:c1:d0:90:0c:25:ef:b3:9a:03:6e:
                    1d:a3:58:18:40:62:ac:b7:0e:56:0e:e6:67:e0:73:
                    29:27:99:79:e2:d4:12:5b:32:91:27:02:8d:7e:6b:
                    2d:4b:42:9a:31:e1:b9:a5:e8:df:17:c6:9c:fd:e2:
                    10:46:f2:5f:00:71:ee:a1:78:ed:0b:90:b8:98:cd:
                    b3:78:94:04:03:02:a2:0c:89:f5:62:18:66:33:ca:
                    d2:ef:88:6b:04:16:ec:46:34:64:3d:1c:c5:0f:53:
                    16:1e:27:b6:cd:79:a3:2d:6d:08:e9:65:95:0b:9b:
                    c5:cb:ba:29:04:93:49:a9:94:78:39:45:7e:9a:c8:
                    d2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:97:BC:FA:FF:0B:CC:C6:92:00:60:EF:A9:C6:D3:5D:2C:5A:17:64
            X509v3 Authority Key Identifier:
                keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/79F6C038BD0911F18D2197FD4411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:9f:0c:df:16:4d:f8:95:69:e6:30:70:73:c6:5d:88:24:5d:
         cb:bb:4c:94:f7:87:ba:1e:95:ed:5f:ea:39:55:8b:6c:a4:91:
         fe:e8:de:dc:03:9f:42:16:77:fd:b3:c3:37:b8:4a:06:5c:d4:
         19:ab:31:f2:e6:81:7b:73:25:ff:be:d2:ba:20:31:04:b8:37:
         44:ac:53:37:91:e9:0f:35:af:30:87:e2:a4:79:cc:e2:7a:dd:
         c9:da:ae:13:cc:28:6e:55:33:65:01:c4:73:8f:c8:f4:ff:60:
         29:79:d0:54:8d:9f:2b:35:3c:43:dd:66:b2:db:83:83:42:b5:
         a7:e4:e8:bc:34:5e:93:3c:ec:3d:04:44:47:05:83:46:ab:3d:
         96:26:97:11:03:08:be:70:ec:9b:89:65:eb:6a:66:48:a7:56:
         39:76:f9:0d:6d:4e:d4:04:81:db:21:9a:a3:b8:20:c3:f1:aa:
         9b:a9:e3:18:46:30:e0:08:76:a8:c0:08:94:a9:85:17:cb:c9:
         e4:03:e8:74:1d:b7:5e:c1:f5:23:9d:39:d6:92:95:93:7c:e0:
         0e:25:28:f0:f4:ad:b1:74:b4:c3:bb:e7:28:3c:a9:9d:10:d9:
         e5:ee:4c:07:f2:bc:b0:bb:47:f7:0f:10:42:5c:8e:b6:69:10:
         8e:9f:aa:44
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzNjMxMTAvBgNVBAUTKDc4OEZCNEQ5NkI2MDFEQkE2MTZERERDOTlDRkU0NjVE
NjBDMzhGMjEwHhcNMjYwOTMwMjEwNDEyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkNzk0Yy0zMzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAueJhkPsGV9cc2eW49dFNf6I9Aw0zzRxE1C1G+hw0f4Y9wYdfA/nUgZS9F9LG
LKo7MS9qT3DVgIR+VVJHlb84HtJkIc/L/mSx0KdLS8fWjiTk6wwdn6aIjWKOoL6D
9wVWgPkbjNRZwWWx3lyaAhz7W171IShxl4xQc7LDYcHQkAwl77OaA24do1gYQGKs
tw5WDuZn4HMpJ5l54tQSWzKRJwKNfmstS0KaMeG5pejfF8ac/eIQRvJfAHHuoXjt
C5C4mM2zeJQEAwKiDIn1YhhmM8rS74hrBBbsRjRkPRzFD1MWHie2zXmjLW0I6WWV
C5vFy7opBJNJqZR4OUV+msjSPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPWXvPr/
C8zGkgBg76nG010sWhdkMB8GA1UdIwQYMBaAFHiPtNlrYB26YW3dyZz+Rl1gw48h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD
QkExMUVDOEFBMTNFMjRDNEY5QUUwMi9lSS0wMld0Z0hicGhiZDNKblA1R1hXRERq
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VJLTAyV3RnSGJwaGJkM0puUDVHWFdERGp5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTkzNjMvMzFFQURGQTQ1Q0JBMTFFQzhBQTEzRTI0QzRGOUFFMDIvNzlGNkMwMzhC
RDA5MTFGMThEMjE5N0ZENDQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6MwMA0GCSqGSIb3DQEBCwUAA4IBAQCdnwzfFk34lWnmMHBzxl2I
JF3Lu0yU94e6HpXtX+o5VYtspJH+6N7cA59CFnf9s8M3uEoGXNQZqzHy5oF7cyX/
vtK6IDEEuDdErFM3kekPNa8wh+Kkecziet3J2q4TzChuVTNlAcRzj8j0/2ApedBU
jZ8rNTxD3Way24ODQrWn5Oi8NF6TPOw9BERHBYNGqz2WJpcRAwi+cOybiWXramZI
p1Y5dvkNbU7UBIHbIZqjuCDD8aqbqeMYRjDgCHaowAiUqYUXy8nkA+h0HbdewfUj
nTnWkpWTfOAOJSjw9K2xdLTDu+coPKmdENnl7kwH8rywu0f3DxBCXI62aRCOn6pE
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:24 2026 by rpki-client