Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/9D2C024A96AC11F0AFADA123C4F9AE02.roa
File:                     9D2C024A96AC11F0AFADA123C4F9AE02.roa (raw, json)
Hash identifier:          Jr+uvL5Lzwj0xIH/fgWXn5OBXagya0JsBhe+PUP4Sn8=
Subject key identifier:   29:47:33:3C:40:F0:2F:A0:F9:FB:F5:D2:B2:C6:52:4F:F7:60:54:8E
Certificate issuer:       /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Certificate serial:       C5
Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/9D2C024A96AC11F0AFADA123C4F9AE02.roa
Signing time:             Tue 07 Jul 2026 08:35:35 +0000
ROA not before:           Tue 07 Jul 2026 08:35:35 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136760
IP address blocks:        103.95.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
                          rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
        Validity
            Not Before: Jul  7 08:35:35 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4cba57-5af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:5b:e2:30:e2:fa:93:f5:83:17:da:07:ef:
                    de:8d:9a:04:4d:f1:74:63:7e:8a:34:8e:39:42:04:
                    b3:04:a0:ef:3f:37:f5:53:84:52:2d:94:65:a0:50:
                    0d:13:af:55:a2:3d:96:53:a4:13:01:a1:81:54:53:
                    c4:c7:0c:48:c9:d5:5a:0e:a0:fa:3f:b1:b2:49:48:
                    fb:8f:b0:47:73:4d:ad:f8:f4:d2:ed:e4:e5:67:93:
                    c5:cf:8d:62:6a:96:79:5e:75:55:00:ca:16:ba:d6:
                    88:16:3f:ca:b8:77:d7:03:74:e4:44:1c:ca:f3:ac:
                    6f:af:18:d9:a1:cf:2f:e7:5a:19:f6:5f:09:9c:e6:
                    26:f5:6d:7c:bf:b3:01:13:e4:d6:0c:da:f5:cf:7d:
                    40:44:e0:f9:eb:ef:5a:df:33:d2:b6:85:dc:16:a1:
                    fa:43:2d:7e:81:99:ef:c9:6c:7b:58:b2:bb:7d:23:
                    ee:80:44:24:26:c6:59:5c:37:91:2b:fa:59:16:2f:
                    fd:43:be:6a:05:09:f3:4a:d6:53:32:9e:cb:a1:76:
                    20:ec:f1:fb:17:74:a5:2a:ce:94:a8:66:84:5b:4a:
                    ef:31:7f:45:3d:19:1a:a0:50:e8:25:d0:e9:24:e0:
                    50:99:a9:f1:67:05:e4:42:6d:f5:11:3b:2c:52:79:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:47:33:3C:40:F0:2F:A0:F9:FB:F5:D2:B2:C6:52:4F:F7:60:54:8E
            X509v3 Authority Key Identifier:
                keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/9D2C024A96AC11F0AFADA123C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:68:5e:b2:57:fa:4c:b9:24:6b:f6:cc:8d:25:a8:04:c9:7f:
         13:7d:82:ef:ac:a2:85:09:bb:4a:a7:18:14:d1:c3:9b:8c:f7:
         9c:2e:8f:27:f9:ad:23:bf:60:16:c6:9e:ae:46:a8:61:c9:eb:
         89:77:8d:53:46:1e:2d:fb:1b:8b:0b:c1:c2:e9:3d:fb:d3:23:
         ab:90:32:97:9e:50:42:32:56:1e:ca:33:a8:12:32:78:ee:01:
         82:7b:35:fa:76:4e:72:f3:c0:f9:53:71:fe:66:56:0b:46:ed:
         0b:5f:13:18:d1:a4:84:f4:95:f2:a2:5d:df:b8:23:20:fe:d6:
         ae:52:dd:3a:d9:b7:a1:cf:cd:7d:4c:0d:b8:e6:b3:5d:d6:84:
         09:b8:3c:62:06:2d:dc:8d:06:ec:ad:53:bb:9c:0e:66:2c:b5:
         39:e0:ac:82:87:19:13:d6:a7:1c:e0:11:04:6d:9d:bd:0b:2c:
         dd:89:f6:16:a2:65:6c:d9:9c:c1:bc:7c:4f:ee:76:ee:fc:7c:
         c5:58:41:b7:3b:6e:32:01:bf:60:a0:70:10:0b:67:cf:6a:41:
         a5:de:73:12:b8:cd:02:e8:1a:20:77:18:82:ef:d2:60:b2:e2:
         44:33:d6:bd:08:fc:50:80:33:81:8b:9d:84:dc:ee:4d:dd:f0:
         bc:1a:0e:dc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzMwNjUxMTAvBgNVBAUTKDY1NEJDRkQ3MEFCQzYwQjU0MTM5Mjg1MzA1RUZEMEUz
MTVDMzM2OEUwHhcNMjYwNzA3MDgzNTM1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjYmE1Ny01YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwRb4jDi+pP1gxfaB+/ejZoETfF0Y36KNI45QgSzBKDvPzf1U4RSLZRloFAN
E69Voj2WU6QTAaGBVFPExwxIydVaDqD6P7GySUj7j7BHc02t+PTS7eTlZ5PFz41i
apZ5XnVVAMoWutaIFj/KuHfXA3TkRBzK86xvrxjZoc8v51oZ9l8JnOYm9W18v7MB
E+TWDNr1z31AROD56+9a3zPStoXcFqH6Qy1+gZnvyWx7WLK7fSPugEQkJsZZXDeR
K/pZFi/9Q75qBQnzStZTMp7LoXYg7PH7F3SlKs6UqGaEW0rvMX9FPRkaoFDoJdDp
JOBQmanxZwXkQm31ETssUnnrbQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFClHMzxA
8C+g+fv10rLGUk/3YFSOMB8GA1UdIwQYMBaAFGVLz9cKvGC1QTkoUwXv0OMVwzaO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzA2NS9EQjM1MTRCMDgy
MzMxMUYwOTM5QkZGM0ZDNEY5QUUwMi9aVXZQMXdxOFlMVkJPU2hUQmVfUTR4WERO
bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pVdlAxd3E4WUxWQk9TaFRCZV9RNHhYRE5vNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzMwNjUvREIzNTE0QjA4MjMzMTFGMDkzOUJGRjNGQzRGOUFFMDIvOUQyQzAyNEE5
NkFDMTFGMEFGQURBMTIzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ19IMA0GCSqGSIb3DQEBCwUAA4IBAQC1aF6yV/pMuSRr9syNJagE
yX8TfYLvrKKFCbtKpxgU0cObjPecLo8n+a0jv2AWxp6uRqhhyeuJd41TRh4t+xuL
C8HC6T370yOrkDKXnlBCMlYeyjOoEjJ47gGCezX6dk5y88D5U3H+ZlYLRu0LXxMY
0aSE9JXyol3fuCMg/tauUt062behz819TA245rNd1oQJuDxiBi3cjQbsrVO7nA5m
LLU54KyChxkT1qcc4BEEbZ29CyzdifYWomVs2ZzBvHxP7nbu/HzFWEG3O24yAb9g
oHAQC2fPakGl3nMSuM0C6BogdxiC79JgsuJEM9a9CPxQgDOBi52E3O5N3fC8Gg7c
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:28:30 2026 by rpki-client