Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/D44CB1088D9511F18884790F3F11F970.roa
File:                     D44CB1088D9511F18884790F3F11F970.roa (raw, json)
Hash identifier:          wV1zl2AYz6koE/d18QPJJFKohfdA8vraKL1i7qfQDbc=
Subject key identifier:   E9:CF:11:96:47:2D:FB:52:48:0D:45:C0:7C:7E:2F:3E:4F:C4:D1:44
Certificate issuer:       /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial:       085B
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/D44CB1088D9511F18884790F3F11F970.roa
Signing time:             Sat 01 Aug 2026 10:43:28 +0000
ROA not before:           Sat 01 Aug 2026 10:43:28 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     142577
IP address blocks:        103.158.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
                          rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 20:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
        Validity
            Not Before: Aug  1 10:43:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a6dcdd0-5c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bf:9c:dc:67:c1:8f:20:6f:37:e6:ff:2e:5b:
                    6f:33:f2:24:6e:10:a4:e9:e7:47:90:fb:72:33:d4:
                    2e:af:5f:8c:78:0c:34:63:23:03:f4:4a:52:41:e3:
                    8a:c8:e7:22:d0:b2:b0:84:03:d4:e5:24:28:f1:d1:
                    ee:6a:d8:84:05:e4:2d:b3:6c:22:0d:8c:89:a3:72:
                    b5:89:23:08:e0:0a:fd:34:0f:2f:32:f4:53:f4:19:
                    4c:f5:5b:39:3e:ce:86:e5:c3:f5:e3:ca:6c:95:80:
                    f5:80:7b:db:2c:03:21:f7:53:10:6e:f7:79:ab:0a:
                    05:06:e5:53:36:5e:ef:2e:cb:df:95:7c:a0:7f:1f:
                    fc:b4:6a:c0:8a:4e:91:10:19:e2:e4:68:f5:90:46:
                    27:fe:71:9f:b8:9e:e8:3a:6a:f1:cc:4b:f0:3b:c3:
                    49:53:d6:dd:38:49:58:b6:4a:98:2e:07:64:79:58:
                    6f:4c:18:fa:04:be:73:51:a4:6b:c9:fe:ec:5d:b8:
                    9a:69:43:bd:c9:11:06:74:e6:4c:45:6a:7a:25:cb:
                    fa:2f:5f:bd:32:ca:74:7d:d3:fc:43:1d:bd:5c:e3:
                    8b:23:ec:f9:e0:27:f3:01:62:be:74:e4:20:de:87:
                    80:f3:f3:34:b9:65:1b:c9:6e:bf:6d:74:4a:2c:ee:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:11:96:47:2D:FB:52:48:0D:45:C0:7C:7E:2F:3E:4F:C4:D1:44
            X509v3 Authority Key Identifier:
                keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/D44CB1088D9511F18884790F3F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:de:3c:88:27:e0:47:1d:dd:43:72:b5:ac:ab:bd:b0:ba:32:
         b8:8b:bd:e4:8c:44:f5:41:7e:44:13:c0:83:56:85:75:0e:6e:
         56:8a:69:bf:d9:0e:27:fb:6a:0b:cf:bc:6e:be:3c:e8:0f:13:
         7b:18:4d:ad:d7:3d:be:96:0c:2a:a1:db:9a:be:ac:af:8a:e9:
         c0:70:ae:74:74:d0:ff:b7:6e:0b:3a:ee:82:33:bb:c7:f3:10:
         bd:9b:17:4e:a8:1e:20:6b:06:e7:c4:a5:dd:17:f3:d0:d7:19:
         45:eb:10:e9:a7:31:24:ea:37:e3:38:b6:a6:61:9a:32:af:d7:
         01:15:c9:ad:a6:81:7a:21:b5:f3:2c:f0:b2:df:3a:a8:7a:6d:
         fa:a1:19:e0:2f:92:2a:0b:0b:f4:64:2e:f0:66:0d:ab:00:91:
         1a:cd:9c:27:cd:b2:94:28:b4:d4:9f:6f:63:1e:c5:77:52:df:
         86:04:70:98:4f:c1:25:44:ea:7e:79:d0:62:19:41:30:90:78:
         09:45:72:b7:d3:7d:1b:28:fb:01:84:8b:70:d4:84:ea:a5:5b:
         54:fc:aa:84:6f:48:f4:cb:0d:3d:10:37:02:3c:ec:2e:20:5e:
         95:ab:86:36:91:a6:1b:4b:9f:3d:b5:3d:15:f9:28:30:31:6a:
         db:7e:13:3b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE
Njk5QjRGNDcwHhcNMjYwODAxMTA0MzI4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkY2RkMC01YzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7+c3GfBjyBvN+b/LltvM/IkbhCk6edHkPtyM9Qur1+MeAw0YyMD9EpSQeOK
yOci0LKwhAPU5SQo8dHuatiEBeQts2wiDYyJo3K1iSMI4Ar9NA8vMvRT9BlM9Vs5
Ps6G5cP148pslYD1gHvbLAMh91MQbvd5qwoFBuVTNl7vLsvflXygfx/8tGrAik6R
EBni5Gj1kEYn/nGfuJ7oOmrxzEvwO8NJU9bdOElYtkqYLgdkeVhvTBj6BL5zUaRr
yf7sXbiaaUO9yREGdOZMRWp6Jcv6L1+9Msp0fdP8Qx29XOOLI+z54CfzAWK+dOQg
3oeA8/M0uWUbyW6/bXRKLO640QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOnPEZZH
LftSSA1FwHx+Lz5PxNFEMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1
QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQzOEYvQzc1OTBCRDYyNUFFMTFFQjhFRUMyMjBBQzRGOUFFMDIvRDQ0Q0IxMDg4
RDk1MTFGMTg4ODQ3OTBGM0YxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ56fMA0GCSqGSIb3DQEBCwUAA4IBAQAD3jyIJ+BHHd1DcrWsq72w
ujK4i73kjET1QX5EE8CDVoV1Dm5Wimm/2Q4n+2oLz7xuvjzoDxN7GE2t1z2+lgwq
oduavqyviunAcK50dND/t24LOu6CM7vH8xC9mxdOqB4gawbnxKXdF/PQ1xlF6xDp
pzEk6jfjOLamYZoyr9cBFcmtpoF6IbXzLPCy3zqoem36oRngL5IqCwv0ZC7wZg2r
AJEazZwnzbKUKLTUn29jHsV3Ut+GBHCYT8ElROp+edBiGUEwkHgJRXK3030bKPsB
hItw1ITqpVtU/KqEb0j0yw09EDcCPOwuIF6Vq4Y2kaYbS589tT0V+SgwMWrbfhM7
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:52:36 2026 by rpki-client