Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/BA3B98B2FB0D11F098EF6A0C746F56BC.roa
File:                     BA3B98B2FB0D11F098EF6A0C746F56BC.roa (raw, json)
Hash identifier:          x05h0nUjM+m7Xj3DDk1u9/bZc6i1XSo8GdyroMYaZ8w=
Subject key identifier:   B0:F5:E9:66:38:FA:82:6F:94:1C:43:6E:F4:30:97:81:E4:5B:B2:59
Certificate issuer:       /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Certificate serial:       6B
Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/BA3B98B2FB0D11F098EF6A0C746F56BC.roa
Signing time:             Wed 28 Jan 2026 11:43:34 +0000
ROA not before:           Wed 28 Jan 2026 11:43:34 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     395793
IP address blocks:        103.95.74.0/24 maxlen: 24
                          103.95.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
                          rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
        Validity
            Not Before: Jan 28 11:43:34 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6979f666-5c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:6d:f9:89:0d:32:b4:c1:d2:58:ef:11:e2:
                    40:17:57:7a:2e:a3:d4:4d:5c:6a:06:46:30:77:44:
                    c1:c5:bd:5b:bd:7b:fd:e2:2d:7a:30:58:a8:79:be:
                    5e:98:14:8a:ad:f2:43:21:c2:48:0f:d5:af:95:00:
                    bb:4c:0e:75:fb:77:f5:25:51:5b:f1:4f:3e:6e:28:
                    47:bc:b8:99:8a:8c:63:e9:86:63:bb:57:2d:e6:31:
                    c8:0d:d6:2b:3e:aa:4e:e7:b8:86:12:b0:76:fd:4a:
                    47:12:94:1e:e1:6e:72:76:7b:d5:58:36:eb:1d:c1:
                    d9:d6:28:49:38:53:a4:c5:b3:6d:6e:95:9a:cc:6c:
                    43:79:b0:08:84:38:f7:42:74:cb:3b:2c:b0:5e:3b:
                    e9:94:b3:e3:eb:cc:a6:70:98:bb:7c:8e:62:e6:ca:
                    85:66:60:2c:20:c9:83:0d:f8:85:14:bc:46:65:70:
                    cd:0e:41:44:db:f1:d3:d0:80:0c:c3:86:93:4d:8a:
                    44:77:84:62:f4:f3:24:fc:7c:78:8a:0f:53:03:80:
                    8a:b6:b0:57:5a:21:73:7c:db:54:84:6a:6f:09:16:
                    35:9c:28:13:91:0f:29:0e:92:b7:e4:36:fb:e0:fa:
                    6d:68:ab:7a:ab:7a:ce:86:3f:8f:49:7b:e1:5f:a5:
                    ee:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F5:E9:66:38:FA:82:6F:94:1C:43:6E:F4:30:97:81:E4:5B:B2:59
            X509v3 Authority Key Identifier:
                keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/BA3B98B2FB0D11F098EF6A0C746F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:bd:48:a9:1b:92:50:bd:2f:64:5b:63:11:8a:48:37:87:38:
         0a:37:c1:37:ff:79:6e:94:1b:e4:c9:18:bc:5a:ad:f6:23:4f:
         23:bb:1d:d1:a6:35:d7:72:1a:cc:a7:1e:1f:68:72:85:13:66:
         11:bb:15:1a:88:5a:89:f1:d9:8a:9a:61:6b:8c:80:dc:dc:37:
         bb:0c:7a:b6:52:94:1c:c7:97:00:13:18:87:10:5e:89:fa:a5:
         4a:12:bb:f4:c7:7f:a0:19:5f:ee:15:37:64:5d:9b:eb:36:eb:
         aa:c6:9d:40:0d:c9:d6:45:17:64:a2:9c:58:35:28:86:ef:dc:
         33:e9:a6:2f:a1:db:f0:ea:57:ea:ab:14:d9:0a:ba:f3:4a:93:
         34:3b:e9:9d:49:e4:b7:4f:d0:4b:85:e7:38:74:c8:c8:da:14:
         c6:f7:58:8f:f4:9b:29:70:ec:e8:b9:3c:83:48:59:90:d7:ec:
         18:2d:b4:ba:b6:db:b2:0f:af:05:09:36:8f:9c:20:e5:e7:b4:
         35:82:11:c9:46:dc:0d:79:49:4a:2a:fb:8e:d2:5f:e5:9c:f4:
         df:98:ba:7b:a1:aa:8b:63:fe:a9:7f:43:2b:29:8e:43:3b:97:
         0b:93:05:f6:39:0b:6b:a9:dd:5f:1c:5b:c6:41:ae:77:50:f8:
         39:5c:05:d5
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MzA2NTExMC8GA1UEBRMoNjU0QkNGRDcwQUJDNjBCNTQxMzkyODUzMDVFRkQwRTMx
NUMzMzY4RTAeFw0yNjAxMjgxMTQzMzRaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NzlmNjY2LTVjNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjqW35iQ0ytMHSWO8R4kAXV3ouo9RNXGoGRjB3RMHFvVu9e/3iLXowWKh5vl6Y
FIqt8kMhwkgP1a+VALtMDnX7d/UlUVvxTz5uKEe8uJmKjGPphmO7Vy3mMcgN1is+
qk7nuIYSsHb9SkcSlB7hbnJ2e9VYNusdwdnWKEk4U6TFs21ulZrMbEN5sAiEOPdC
dMs7LLBeO+mUs+PrzKZwmLt8jmLmyoVmYCwgyYMN+IUUvEZlcM0OQUTb8dPQgAzD
hpNNikR3hGL08yT8fHiKD1MDgIq2sFdaIXN821SEam8JFjWcKBORDykOkrfkNvvg
+m1oq3qres6GP49Je+Ffpe5/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsPXpZjj6
gm+UHENu9DCXgeRbslkwHwYDVR0jBBgwFoAUZUvP1wq8YLVBOShTBe/Q4xXDNo4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzMDY1L0RCMzUxNEIwODIz
MzExRjA5MzlCRkYzRkM0RjlBRTAyL1pVdlAxd3E4WUxWQk9TaFRCZV9RNHhYRE5v
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWlV2UDF3cThZTFZCT1NoVEJlX1E0eFhETm80LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzA2NS9EQjM1MTRCMDgyMzMxMUYwOTM5QkZGM0ZDNEY5QUUwMi9CQTNCOThCMkZC
MEQxMUYwOThFRjZBMEM3NDZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWdfSjANBgkqhkiG9w0BAQsFAAOCAQEAqr1IqRuSUL0vZFtj
EYpIN4c4CjfBN/95bpQb5MkYvFqt9iNPI7sd0aY113IazKceH2hyhRNmEbsVGoha
ifHZippha4yA3Nw3uwx6tlKUHMeXABMYhxBeifqlShK79Md/oBlf7hU3ZF2b6zbr
qsadQA3J1kUXZKKcWDUohu/cM+mmL6Hb8OpX6qsU2Qq680qTNDvpnUnkt0/QS4Xn
OHTIyNoUxvdYj/SbKXDs6Lk8g0hZkNfsGC20urbbsg+vBQk2j5wg5ee0NYIRyUbc
DXlJSir7jtJf5Zz035i6e6Gqi2P+qX9DKymOQzuXC5MF9jkLa6ndXxxbxkGud1D4
OVwF1Q==
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:58 2026 by rpki-client