Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/8D6FCCF0B89411F19B3D06F05E11F970.roa
File:                     8D6FCCF0B89411F19B3D06F05E11F970.roa (raw, json)
Hash identifier:          BpgxC8vKKSSu92+gZlF5y9BC+cA+SxlbGNdRhsfEoVE=
Subject key identifier:   E5:14:2E:77:FF:57:B7:55:F3:46:48:A3:DD:3E:89:5C:52:68:BA:B7
Certificate issuer:       /CN=A911F4E6/serialNumber=7A124FEEB7C5CF31F4498FE4D8C11D049B438D8D
Certificate serial:       02
Authority key identifier: 7A:12:4F:EE:B7:C5:CF:31:F4:49:8F:E4:D8:C1:1D:04:9B:43:8D:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehJP7rfFzzH0SY_k2MEdBJtDjY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/8D6FCCF0B89411F19B3D06F05E11F970.roa
Signing time:             Fri 25 Sep 2026 03:52:39 +0000
ROA not before:           Fri 25 Sep 2026 03:52:39 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     24436
IP address blocks:        103.251.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/ehJP7rfFzzH0SY_k2MEdBJtDjY0.crl
                          rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/ehJP7rfFzzH0SY_k2MEdBJtDjY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehJP7rfFzzH0SY_k2MEdBJtDjY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F4E6, serialNumber=7A124FEEB7C5CF31F4498FE4D8C11D049B438D8D
        Validity
            Not Before: Sep 25 03:52:39 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ab5f007-7545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:b3:5a:42:86:78:1c:cb:39:76:99:cd:9d:
                    3d:f9:d6:01:d0:10:c3:65:66:a7:11:84:0e:c4:95:
                    9a:e9:99:5f:b3:92:da:b8:ea:40:e8:71:40:3a:af:
                    30:21:82:d0:25:de:ff:26:62:5f:cb:94:2a:be:6c:
                    9c:cd:77:22:91:1c:75:04:e1:3b:f1:4c:00:de:1a:
                    d6:35:7e:bf:ee:0f:cf:0d:c3:1c:d1:d8:a7:99:4c:
                    f6:3b:ad:89:9c:e9:c9:2c:75:c4:08:a8:12:7b:a0:
                    3b:24:f4:bc:29:9f:9c:2b:3a:7e:e4:f1:9d:17:63:
                    80:d2:07:4c:2e:04:0d:27:c7:a4:f1:13:b8:bc:68:
                    cb:3e:f3:31:fe:e2:8a:93:79:1d:c7:50:a6:94:ce:
                    8c:1e:23:8c:ce:fa:52:8e:81:14:d7:3f:12:78:a4:
                    3a:94:ba:d4:27:22:f0:e0:b5:9e:04:8c:dc:37:cd:
                    26:a1:c8:d3:23:88:4d:b2:fa:23:c0:a2:ed:40:b9:
                    45:62:ad:f5:02:98:38:31:c4:1b:af:b4:91:02:11:
                    31:ad:08:09:46:1b:fb:80:60:7f:64:f5:d0:bc:71:
                    19:36:96:3c:b1:06:b8:2e:c0:6f:32:b7:c8:b1:cf:
                    4e:bf:06:8a:64:92:18:4b:48:9d:33:97:7f:02:a3:
                    f0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:14:2E:77:FF:57:B7:55:F3:46:48:A3:DD:3E:89:5C:52:68:BA:B7
            X509v3 Authority Key Identifier:
                keyid:7A:12:4F:EE:B7:C5:CF:31:F4:49:8F:E4:D8:C1:1D:04:9B:43:8D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/ehJP7rfFzzH0SY_k2MEdBJtDjY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehJP7rfFzzH0SY_k2MEdBJtDjY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/8D6FCCF0B89411F19B3D06F05E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:32:dc:b2:13:28:2b:31:d0:c1:da:68:db:5a:e6:53:ca:ce:
         e5:f5:2e:25:44:50:1b:88:13:e0:2d:8c:f8:aa:bd:97:d6:b3:
         9c:dd:11:c6:a9:11:a0:04:45:bd:4c:7f:02:41:cf:11:f6:31:
         0f:74:5d:b9:eb:99:2e:7d:ca:ba:4f:70:23:d1:b6:2f:bb:74:
         72:7c:53:2b:8e:70:6c:bb:f7:cd:aa:53:ad:d2:6e:43:89:ad:
         2a:79:9a:ed:75:1d:16:2b:52:5b:8a:03:c1:a7:21:cb:7c:15:
         c4:39:3e:58:87:1f:45:06:b0:97:9f:75:b6:92:15:38:f5:8f:
         27:b2:b2:f1:fa:16:b0:53:8a:32:81:61:58:cd:0d:7c:7b:66:
         e8:9b:f4:b3:9e:d9:ef:bb:d5:74:fe:a0:0f:0d:7c:b7:95:25:
         df:d7:ba:18:e9:a0:89:5b:62:8d:fe:db:7e:27:b6:a1:f9:ff:
         f8:ce:11:2d:ab:01:fa:23:22:55:2f:b6:48:21:24:84:61:b9:
         70:69:0a:b3:6b:43:f0:64:c4:ec:b4:20:f8:66:76:60:19:0c:
         8a:d0:f3:42:c4:3f:53:e0:ab:1a:4e:bc:ea:dc:4f:fe:b4:4b:
         ef:e9:cc:bf:5d:90:ed:5b:48:96:6a:5f:a0:b4:4a:0a:1c:1a:
         43:11:a6:6f
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RjRFNjExMC8GA1UEBRMoN0ExMjRGRUVCN0M1Q0YzMUY0NDk4RkU0RDhDMTFEMDQ5
QjQzOEQ4RDAeFw0yNjA5MjUwMzUyMzlaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYjVmMDA3LTc1NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCYQbNaQoZ4HMs5dpnNnT351gHQEMNlZqcRhA7ElZrpmV+zktq46kDocUA6rzAh
gtAl3v8mYl/LlCq+bJzNdyKRHHUE4TvxTADeGtY1fr/uD88NwxzR2KeZTPY7rYmc
6cksdcQIqBJ7oDsk9Lwpn5wrOn7k8Z0XY4DSB0wuBA0nx6TxE7i8aMs+8zH+4oqT
eR3HUKaUzoweI4zO+lKOgRTXPxJ4pDqUutQnIvDgtZ4EjNw3zSahyNMjiE2y+iPA
ou1AuUVirfUCmDgxxBuvtJECETGtCAlGG/uAYH9k9dC8cRk2ljyxBrguwG8yt8ix
z06/BopkkhhLSJ0zl38Co/DNAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU5RQud/9X
t1XzRkij3T6JXFJourcwHwYDVR0jBBgwFoAUehJP7rfFzzH0SY/k2MEdBJtDjY0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNEU2LzQ5MzQ2QjE4Qjg5
NDExRjE5Njc5RjhEQTVFMTFGOTcwL2VoSlA3cmZGenpIMFNZX2syTUVkQkp0RGpZ
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZWhKUDdyZkZ6ekgwU1lfazJNRWRCSnREalkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjRFNi80OTM0NkIxOEI4OTQxMUYxOTY3OUY4REE1RTExRjk3MC84RDZGQ0NGMEI4
OTQxMUYxOUIzRDA2RjA1RTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABn+w8wDQYJKoZIhvcNAQELBQADggEBAEgy3LITKCsx0MHaaNta5lPK
zuX1LiVEUBuIE+AtjPiqvZfWs5zdEcapEaAERb1MfwJBzxH2MQ90XbnrmS59yrpP
cCPRti+7dHJ8UyuOcGy7982qU63SbkOJrSp5mu11HRYrUluKA8GnIct8FcQ5PliH
H0UGsJefdbaSFTj1jyeysvH6FrBTijKBYVjNDXx7Zuib9LOe2e+71XT+oA8NfLeV
Jd/XuhjpoIlbYo3+234ntqH5//jOES2rAfojIlUvtkghJIRhuXBpCrNrQ/BkxOy0
IPhmdmAZDIrQ80LEP1PgqxpOvOrcT/60S+/pzL9dkO1bSJZqX6C0SgocGkMRpm8=
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:30:18 2026 by rpki-client