Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/C9E93DD2266E11F187DDE8D8AB833773.roa
File:                     C9E93DD2266E11F187DDE8D8AB833773.roa (raw, json)
Hash identifier:          D8WTG4tbDTeoMZlkxpx4f43f9ls73L2XMbZYJ85TZSo=
Subject key identifier:   03:8A:A0:F8:05:B5:36:52:02:0E:51:EB:89:1B:4F:ED:BB:A7:15:2A
Certificate issuer:       /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Certificate serial:       0254
Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/C9E93DD2266E11F187DDE8D8AB833773.roa
Signing time:             Sat 23 May 2026 02:33:17 +0000
ROA not before:           Sat 23 May 2026 02:33:17 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        103.131.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
                          rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 03:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
        Validity
            Not Before: May 23 02:33:17 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1111ed-de1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:ae:e9:4f:89:83:20:5f:62:1c:33:7a:3f:
                    b9:41:45:69:e0:88:19:ee:f7:77:70:19:74:5a:a4:
                    66:4f:f1:88:17:bf:29:2b:4a:c8:29:11:fc:37:21:
                    d4:af:44:64:33:87:22:ff:2b:19:2e:af:8f:32:1d:
                    ef:76:93:07:fe:c7:f9:71:ed:dd:c1:bd:9d:af:f7:
                    09:03:01:dd:10:3e:f4:ad:ac:65:ad:76:83:81:06:
                    95:6a:a8:92:5b:cf:99:58:a8:83:14:16:8d:a4:d8:
                    ba:1a:30:b0:3e:f8:17:06:8e:eb:74:e8:04:37:46:
                    05:0d:d1:0d:cf:52:0c:96:32:27:5d:b9:fc:b3:c1:
                    29:ea:51:97:14:94:de:1a:f3:11:ac:d5:cf:bc:76:
                    09:68:05:20:a3:7d:08:0e:c6:f0:80:bd:38:37:45:
                    8b:34:c7:d4:a0:29:fd:bf:d0:1d:c5:78:c3:c8:6f:
                    eb:0e:3c:7c:e2:4e:4e:52:54:63:27:38:a3:27:79:
                    a5:50:d6:7c:24:47:73:4c:a2:3e:71:55:f8:9e:6d:
                    7a:61:bb:65:c0:9a:a8:e5:40:f3:65:c0:8f:5a:7c:
                    e0:8c:fa:3d:0c:6c:6f:4b:d1:39:cd:17:44:39:05:
                    bf:91:06:b0:5e:04:c1:ed:86:cc:2c:2e:70:09:ee:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8A:A0:F8:05:B5:36:52:02:0E:51:EB:89:1B:4F:ED:BB:A7:15:2A
            X509v3 Authority Key Identifier:
                keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/C9E93DD2266E11F187DDE8D8AB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:00:59:c7:21:3f:21:87:1c:ab:0f:25:2c:ac:a8:a9:64:ee:
         0e:7e:6c:97:8e:85:d4:6d:83:76:d7:67:79:a6:90:d1:78:20:
         5e:d7:f1:2c:40:bd:0c:a4:2f:5e:6f:2b:50:ea:d9:08:c5:8e:
         4f:15:62:eb:53:e4:82:cf:94:52:c7:cf:6c:51:b1:76:bb:25:
         64:a2:b4:4c:2a:29:8c:83:1b:f1:9d:f8:a4:0e:41:7b:43:2c:
         f8:25:9c:6d:93:22:ab:f7:7e:c9:e3:0e:84:c6:d3:9e:88:42:
         61:6e:38:c5:eb:a0:85:5a:3e:41:9e:5b:78:cb:a9:2e:05:1b:
         4d:2e:6a:78:53:0d:3a:94:be:d6:ab:76:5a:ed:16:07:fe:5e:
         d6:ed:20:0d:14:ba:2f:4d:e3:9e:06:98:59:1a:91:66:cb:83:
         2c:11:ba:fe:dd:17:51:a8:4d:9c:ae:1e:9c:67:46:00:8c:45:
         88:3c:1f:5e:42:56:0f:4a:66:5c:23:37:9c:e1:39:13:4c:fe:
         cd:a3:95:f0:66:88:0e:15:c1:8e:ba:3f:4f:a6:87:db:cf:d9:
         d1:db:7c:a0:d4:75:e9:c8:4b:7b:c8:2f:f0:af:fe:00:5f:3f:
         3d:74:2b:f9:51:1a:0a:e3:16:26:3b:03:b5:1f:4e:6e:4e:17:
         cc:a1:70:52
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD
MDE1NDhDQzYwHhcNMjYwNTIzMDIzMzE3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTExMTFlZC1kZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvweu6U+JgyBfYhwzej+5QUVp4IgZ7vd3cBl0WqRmT/GIF78pK0rIKRH8NyHU
r0RkM4ci/ysZLq+PMh3vdpMH/sf5ce3dwb2dr/cJAwHdED70raxlrXaDgQaVaqiS
W8+ZWKiDFBaNpNi6GjCwPvgXBo7rdOgEN0YFDdENz1IMljInXbn8s8Ep6lGXFJTe
GvMRrNXPvHYJaAUgo30IDsbwgL04N0WLNMfUoCn9v9AdxXjDyG/rDjx84k5OUlRj
JzijJ3mlUNZ8JEdzTKI+cVX4nm16YbtlwJqo5UDzZcCPWnzgjPo9DGxvS9E5zRdE
OQW/kQawXgTB7YbMLC5wCe7jsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAOKoPgF
tTZSAg5R64kbT+27pxUqMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE
MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq
TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc2NEYvQ0VEMEY4N0VERDE3MTFFRDgxNDc0NjJGQzRGOUFFMDIvQzlFOTNERDIy
NjZFMTFGMTg3RERFOEQ4QUI4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4PGMA0GCSqGSIb3DQEBCwUAA4IBAQAOAFnHIT8hhxyrDyUsrKip
ZO4OfmyXjoXUbYN212d5ppDReCBe1/EsQL0MpC9ebytQ6tkIxY5PFWLrU+SCz5RS
x89sUbF2uyVkorRMKimMgxvxnfikDkF7Qyz4JZxtkyKr937J4w6ExtOeiEJhbjjF
66CFWj5Bnlt4y6kuBRtNLmp4Uw06lL7Wq3Za7RYH/l7W7SANFLovTeOeBphZGpFm
y4MsEbr+3RdRqE2crh6cZ0YAjEWIPB9eQlYPSmZcIzec4TkTTP7No5XwZogOFcGO
uj9Ppofbz9nR23yg1HXpyEt7yC/wr/4AXz89dCv5URoK4xYmOwO1H05uThfMoXBS
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:24:02 2026 by rpki-client