Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa
File:                     406928720A2411F0A2D02B4AC4F9AE02.roa (raw, json)
Hash identifier:          WrfWrqSe34vKbxbu0CiEsKNesK9ErExa5RURIcivZmU=
Subject key identifier:   8B:CF:7A:EF:B0:C4:DE:BC:C5:FE:B7:9C:93:53:B2:AD:BB:1D:BF:10
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2969
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:10:06 +0000
ROA not before:           Sat 26 Jul 2025 15:54:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     30058
IP address blocks:        103.196.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10601 (0x2969)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:54:15 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48f0e-0ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d2:04:5c:9f:46:9e:5f:ea:64:83:9c:10:8b:
                    3e:32:05:63:09:b2:a6:8a:78:57:71:bc:0c:35:42:
                    13:da:15:1c:e7:61:08:94:d6:29:98:ef:0b:ad:aa:
                    c6:a8:1f:50:5c:78:27:bf:e9:d4:e3:e9:b7:5d:99:
                    5f:cc:cc:33:e7:2c:e4:40:8c:01:0e:0e:4e:ab:86:
                    41:f7:1c:79:a4:95:e5:30:0f:15:6d:ed:59:3a:7e:
                    96:10:ff:b2:92:de:49:ad:94:46:ef:28:ed:a0:61:
                    42:1f:86:1e:ef:21:f2:e9:12:66:9a:77:30:c8:af:
                    b9:71:1c:e9:69:24:f3:ef:58:35:71:48:76:e1:52:
                    7e:ce:c9:47:97:a5:88:51:5f:59:b1:c2:56:38:85:
                    e7:bf:5b:57:2e:2b:9f:6a:6f:ff:88:37:f2:3a:70:
                    1f:f7:bf:1d:39:1b:26:5a:09:94:4a:80:1e:2b:3d:
                    c1:43:47:a1:95:c9:98:79:d3:fa:2b:41:28:b6:d1:
                    7a:5f:5f:09:9b:e9:ae:75:09:18:d4:9b:1b:1d:85:
                    b2:6b:bd:eb:8a:1c:34:b0:4e:a8:d5:a6:8a:b3:3d:
                    db:90:aa:ae:ec:0e:8b:71:70:31:6d:25:c8:32:ff:
                    50:3a:91:da:bf:7a:13:b5:a5:f7:e5:0c:43:74:7d:
                    fa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CF:7A:EF:B0:C4:DE:BC:C5:FE:B7:9C:93:53:B2:AD:BB:1D:BF:10
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:86:9a:ff:ad:2d:e0:93:6b:bd:a1:92:d6:da:d5:7f:59:5f:
         04:1c:dd:fd:56:ed:91:43:b7:4e:4b:64:d0:1d:18:bb:67:50:
         a1:47:52:65:f3:f1:98:77:4d:78:d3:59:ae:be:f4:3d:b5:43:
         98:a6:8e:49:18:05:a6:48:10:0b:f5:0c:a4:19:8a:26:3b:00:
         95:1d:f8:64:32:ca:9d:dc:70:a3:91:63:48:a9:79:62:3a:bf:
         ac:9b:05:22:e3:18:e7:e4:e1:52:62:7f:c5:86:6b:23:d6:bf:
         04:0b:a8:4d:76:67:fd:2c:a1:4c:cd:39:ca:14:74:85:71:22:
         86:49:33:c0:43:46:35:7f:ef:fa:64:26:63:d5:76:d4:9b:d9:
         47:eb:65:b1:d9:66:d3:2f:0d:96:ec:9d:84:85:5e:0e:9d:f0:
         6e:bb:04:cc:e0:72:77:ce:f0:d0:28:d9:a9:1c:36:eb:67:60:
         46:dc:69:b4:f6:e6:7a:62:52:04:40:3b:b7:4f:8c:95:ec:98:
         a3:3f:4d:15:5b:bf:d6:ab:9a:7e:3f:20:ca:16:64:93:98:85:
         bb:53:59:86:47:b9:49:69:df:c4:61:53:4d:4c:27:c6:e8:fc:
         38:b7:71:ee:2d:ea:f2:68:96:93:eb:ae:6b:83:b3:04:9d:26:
         f3:9e:30:9c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjUwNzI2MTU1NDE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGYwZS0wZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkdIEXJ9Gnl/qZIOcEIs+MgVjCbKminhXcbwMNUIT2hUc52EIlNYpmO8LrarG
qB9QXHgnv+nU4+m3XZlfzMwz5yzkQIwBDg5Oq4ZB9xx5pJXlMA8Vbe1ZOn6WEP+y
kt5JrZRG7yjtoGFCH4Ye7yHy6RJmmncwyK+5cRzpaSTz71g1cUh24VJ+zslHl6WI
UV9ZscJWOIXnv1tXLiufam//iDfyOnAf978dORsmWgmUSoAeKz3BQ0ehlcmYedP6
K0EottF6X18Jm+mudQkY1JsbHYWya73rihw0sE6o1aaKsz3bkKqu7A6LcXAxbSXI
Mv9QOpHav3oTtaX35QxDdH369wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIvPeu+w
xN68xf63nJNTsq27Hb8QMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDA2OTI4NzIw
QTI0MTFGMEEyRDAyQjRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ8QWMA0GCSqGSIb3DQEBCwUAA4IBAQDRhpr/rS3gk2u9oZLW2tV/
WV8EHN39Vu2RQ7dOS2TQHRi7Z1ChR1Jl8/GYd01401muvvQ9tUOYpo5JGAWmSBAL
9QykGYomOwCVHfhkMsqd3HCjkWNIqXliOr+smwUi4xjn5OFSYn/Fhmsj1r8EC6hN
dmf9LKFMzTnKFHSFcSKGSTPAQ0Y1f+/6ZCZj1XbUm9lH62Wx2WbTLw2W7J2EhV4O
nfBuuwTM4HJ3zvDQKNmpHDbrZ2BG3Gm09uZ6YlIEQDu3T4yV7JijP00VW7/Wq5p+
PyDKFmSTmIW7U1mGR7lJad/EYVNNTCfG6Pw4t3HuLeryaJaT665rg7MEnSbznjCc
-----END CERTIFICATE-----
Generated at Fri Mar 6 23:44:31 2026 by rpki-client