Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/652283665B1A11EFA78B847EC4F9AE02.roa
File:                     652283665B1A11EFA78B847EC4F9AE02.roa (raw, json)
Hash identifier:          ZZVIQXiE0aZ7hjyDsvHTD7DoZRcUniYgYgVG4j+tVWc=
Subject key identifier:   A9:6B:5F:31:D1:C2:AA:FA:62:EB:BB:4C:B3:FC:3F:DC:EE:0E:17:A2
Certificate issuer:       /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Certificate serial:       0186
Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/652283665B1A11EFA78B847EC4F9AE02.roa
Signing time:             Fri 31 Jul 2026 06:54:28 +0000
ROA not before:           Fri 31 Jul 2026 06:54:28 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     2042
IP address blocks:        103.235.172.0/22 maxlen: 22
                          150.242.216.0/22 maxlen: 22
                          150.242.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
                          rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 04:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DD08, serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
        Validity
            Not Before: Jul 31 06:54:28 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c46a3-2206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7e:88:25:9f:dc:29:56:eb:39:3e:e2:c4:82:
                    b4:d0:0f:5c:e2:d9:68:4f:e5:aa:d6:c5:11:3a:a5:
                    db:d1:d5:56:6b:94:8f:0f:bf:a7:65:32:2e:b2:32:
                    19:74:34:cd:a5:33:b8:1a:51:94:a0:53:bb:1c:63:
                    54:69:8f:8d:94:25:9f:80:8f:d8:b7:5a:2b:83:72:
                    04:91:c8:b3:54:80:e2:27:d1:77:af:16:07:7b:7c:
                    3d:59:b1:33:95:fb:cf:18:e7:26:19:18:a9:61:56:
                    2b:47:f7:9c:c5:1c:1c:40:f0:69:ad:72:ea:b3:b8:
                    a0:a8:be:22:aa:ce:bc:9e:a4:6e:d5:00:07:c9:8b:
                    e5:fc:f5:f9:c6:31:30:1c:e5:5a:95:b2:4b:2d:9a:
                    b0:8c:d7:8f:91:b9:4c:11:9d:5b:4d:cf:12:44:e5:
                    77:9f:ad:e1:b2:a5:56:2a:68:af:8e:f4:c4:5d:9e:
                    c6:99:81:8a:b2:9f:2f:cc:e3:01:a8:e0:7f:58:3f:
                    0d:52:5f:eb:29:97:39:ec:80:9c:fd:bf:ec:16:89:
                    ef:9d:7a:c3:18:5a:d6:dd:a9:75:37:10:82:ff:9d:
                    25:4a:f1:16:1e:c1:11:dc:14:72:d1:c2:79:23:64:
                    b1:52:99:ff:5d:85:d0:1c:3b:8e:45:26:69:d8:fb:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6B:5F:31:D1:C2:AA:FA:62:EB:BB:4C:B3:FC:3F:DC:EE:0E:17:A2
            X509v3 Authority Key Identifier:
                keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/652283665B1A11EFA78B847EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.172.0/22
                  150.242.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:7b:cf:8b:b6:dd:05:0c:57:9f:b7:24:96:ea:f8:87:39:
         9b:96:a7:d6:aa:c8:b8:9f:03:2f:57:1b:ca:ae:e2:94:9b:0e:
         1f:9c:ec:00:ed:71:f6:fd:55:0b:cc:6b:ee:76:42:cd:29:e3:
         26:8f:d0:37:c7:80:0d:24:25:60:a3:49:55:f9:26:69:2a:67:
         a1:45:85:c7:89:f7:fd:2b:8b:b6:d9:9d:bd:c8:c2:fc:94:d8:
         f0:7b:95:61:dc:2c:1f:17:42:78:f7:db:eb:3e:3d:c2:80:f2:
         09:08:44:57:fb:c5:dc:ce:34:0d:15:e5:c6:eb:e2:7f:82:06:
         3c:de:22:55:2c:a8:9b:79:46:ce:3b:3e:5d:ae:a5:87:14:e5:
         6d:ab:17:fd:a8:4f:83:61:39:c0:00:42:69:3f:47:b7:75:6a:
         20:38:d0:82:09:46:98:26:cb:d6:ad:98:7e:a7:fa:11:69:2e:
         e1:b1:08:5b:03:10:fc:ad:74:21:6b:aa:91:48:7e:09:22:94:
         88:76:4a:34:be:34:89:dc:dd:f3:a5:6b:e7:3e:03:d9:ef:d9:
         67:5c:ec:a8:fc:df:29:d7:14:7e:d8:1d:a2:7b:ee:f9:49:c4:
         16:33:b8:2b:6c:58:ab:e0:24:e0:d6:0f:66:c3:1f:bd:6a:82:
         53:23:34:09
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUREMDgxMTAvBgNVBAUTKDYyQUMxQkI5NTgwQTcxMTk4MTlFN0I2QjZFQjJDMzUx
NTM0Nzg3RkQwHhcNMjYwNzMxMDY1NDI4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZjNDZhMy0yMjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5n6IJZ/cKVbrOT7ixIK00A9c4tloT+Wq1sUROqXb0dVWa5SPD7+nZTIusjIZ
dDTNpTO4GlGUoFO7HGNUaY+NlCWfgI/Yt1org3IEkcizVIDiJ9F3rxYHe3w9WbEz
lfvPGOcmGRipYVYrR/ecxRwcQPBprXLqs7igqL4iqs68nqRu1QAHyYvl/PX5xjEw
HOValbJLLZqwjNePkblMEZ1bTc8SROV3n63hsqVWKmivjvTEXZ7GmYGKsp8vzOMB
qOB/WD8NUl/rKZc57ICc/b/sFonvnXrDGFrW3al1NxCC/50lSvEWHsER3BRy0cJ5
I2SxUpn/XYXQHDuORSZp2Psz0wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKlrXzHR
wqr6Yuu7TLP8P9zuDheiMB8GA1UdIwQYMBaAFGKsG7lYCnEZgZ57a26yw1FTR4f9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREQwOC85QTVGQkI2MjVC
MTkxMUVGQkVEMEM0N0FDNEY5QUUwMi9ZcXdidVZnS2NSbUJubnRyYnJMRFVWTkho
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lxd2J1VmdLY1JtQm5udHJickxEVVZOSGhfMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUREMDgvOUE1RkJCNjI1QjE5MTFFRkJFRDBDNDdBQzRGOUFFMDIvNjUyMjgzNjY1
QjFBMTFFRkE3OEI4NDdFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ+usAwQClvLYMA0GCSqGSIb3DQEBCwUAA4IBAQB30HvPi7bdBQxX
n7cklur4hzmblqfWqsi4nwMvVxvKruKUmw4fnOwA7XH2/VULzGvudkLNKeMmj9A3
x4ANJCVgo0lV+SZpKmehRYXHiff9K4u22Z29yML8lNjwe5Vh3CwfF0J499vrPj3C
gPIJCERX+8XczjQNFeXG6+J/ggY83iJVLKibeUbOOz5drqWHFOVtqxf9qE+DYTnA
AEJpP0e3dWogONCCCUaYJsvWrZh+p/oRaS7hsQhbAxD8rXQha6qRSH4JIpSIdko0
vjSJ3N3zpWvnPgPZ79lnXOyo/N8p1xR+2B2ie+75ScQWM7grbFir4CTg1g9mwx+9
aoJTIzQJ
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:31:00 2026 by rpki-client