Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9F2D848CA0E311F1844F74386C11F970.roa
File:                     9F2D848CA0E311F1844F74386C11F970.roa (raw, json)
Hash identifier:          dH9YfKUbsvJ5hh5nULM+GIEXsS2WvXs6hxtzgZ4VWd4=
Subject key identifier:   A0:DC:E3:40:AB:93:D9:35:B9:B3:76:E2:8A:64:3F:DF:C2:54:30:B0
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3E03
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9F2D848CA0E311F1844F74386C11F970.roa
Signing time:             Wed 26 Aug 2026 00:21:05 +0000
ROA not before:           Wed 26 Aug 2026 00:21:05 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.6.75.0/24 maxlen: 24
                          112.196.198.0/24 maxlen: 24
                          112.196.204.0/24 maxlen: 24
                          112.196.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 14:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15875 (0x3e03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug 26 00:21:05 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a8e3171-2242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:60:d0:8c:bb:ac:e0:9c:f5:06:a2:10:4e:
                    51:c4:10:48:8c:6e:49:1b:8f:c7:1a:9f:da:1a:8d:
                    18:49:05:94:0e:5d:c7:bd:08:fa:d0:36:fa:dd:f2:
                    26:dd:ae:bc:c7:ea:78:65:aa:91:35:b6:7d:b5:34:
                    14:ce:da:2e:b7:81:53:1f:f6:99:3d:6b:12:d6:6f:
                    48:81:04:45:46:6f:27:3a:5c:38:bd:69:1e:4d:0d:
                    54:95:6a:fa:5b:66:dd:48:5a:15:c1:e2:e2:7c:05:
                    57:34:65:ca:6a:df:c9:bc:81:3e:14:84:a3:01:a6:
                    ce:92:2b:1c:7a:a1:70:21:ab:b0:9f:ea:b9:18:60:
                    38:a6:18:70:a6:4b:b5:09:c8:95:d3:d4:2a:41:98:
                    dd:bb:e2:06:d8:65:d8:f9:98:0d:e7:16:b1:db:fa:
                    f2:74:fd:e5:31:59:f5:1a:65:ec:34:aa:a6:23:bb:
                    b0:8e:27:94:e5:00:c7:a7:0f:ca:e4:bf:bb:4c:45:
                    1d:aa:71:27:82:ee:97:9e:b8:4b:ad:b3:a9:1a:56:
                    b7:a3:04:29:d0:4e:61:c0:a0:0b:e3:c7:0e:4c:5f:
                    ca:d5:84:e3:05:36:83:12:85:62:ad:12:67:21:61:
                    41:1b:0a:09:ae:19:0c:1e:58:c3:1e:e8:c5:a2:24:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DC:E3:40:AB:93:D9:35:B9:B3:76:E2:8A:64:3F:DF:C2:54:30:B0
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9F2D848CA0E311F1844F74386C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.75.0/24
                  112.196.198.0/24
                  112.196.204.0/24
                  112.196.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:2c:75:b9:f7:d5:b0:93:e1:fa:55:34:16:04:81:01:76:1a:
         42:bd:b5:c3:35:84:4d:06:d7:96:ef:e7:bc:c2:a0:5e:ca:76:
         9d:80:9c:2a:25:82:d2:24:45:72:09:11:60:48:a7:60:2a:0b:
         4f:3e:e8:92:a7:91:19:2d:f7:46:1e:88:53:ce:e2:20:de:9f:
         c1:ac:f5:92:e2:89:f1:a8:9e:45:c3:8b:f3:58:2e:ed:99:dd:
         53:56:e7:6d:11:50:cd:37:80:e8:26:d3:f2:a4:4e:70:17:55:
         99:9a:2d:09:7b:90:67:8b:4e:e7:31:49:9b:d9:45:fb:7d:55:
         2e:a1:a9:5a:8a:ff:69:14:48:74:0f:8c:9a:3b:34:f7:41:e4:
         ef:f1:f6:54:fe:ad:a9:de:5c:05:66:71:8f:d9:77:30:1e:5b:
         03:d4:a9:52:4f:e9:e4:84:4a:5f:c9:76:41:9b:8f:09:59:3a:
         f9:1d:3f:26:03:da:fe:29:bd:a6:df:5c:1e:e9:a0:9f:bd:c4:
         29:5b:4b:75:6d:d3:42:58:61:bf:9f:49:f7:0a:0b:bd:cc:05:
         0a:57:5c:36:3e:72:42:99:93:c5:5f:49:a9:fc:a0:7d:64:9f:
         b7:a6:d2:f6:ed:4c:12:c6:ea:4f:be:2f:6d:ef:11:07:82:66:
         93:c5:71:2e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICPgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjYwODI2MDAyMTA1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThlMzE3MS0yMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3f9g0Iy7rOCc9QaiEE5RxBBIjG5JG4/HGp/aGo0YSQWUDl3HvQj60Db63fIm
3a68x+p4ZaqRNbZ9tTQUztout4FTH/aZPWsS1m9IgQRFRm8nOlw4vWkeTQ1UlWr6
W2bdSFoVweLifAVXNGXKat/JvIE+FISjAabOkisceqFwIauwn+q5GGA4phhwpku1
CciV09QqQZjdu+IG2GXY+ZgN5xax2/rydP3lMVn1GmXsNKqmI7uwjieU5QDHpw/K
5L+7TEUdqnEngu6XnrhLrbOpGla3owQp0E5hwKAL48cOTF/K1YTjBTaDEoVirRJn
IWFBGwoJrhkMHljDHujFoiSJgwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFKDc40Cr
k9k1ubN24opkP9/CVDCwMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvOUYyRDg0OENB
MEUzMTFGMTg0NEY3NDM4NkMxMUY5NzAucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQAZwZLAwQAcMTGAwQAcMTMAwQAcMTYMA0GCSqGSIb3DQEBCwUAA4IB
AQCjLHW599Wwk+H6VTQWBIEBdhpCvbXDNYRNBteW7+e8wqBeynadgJwqJYLSJEVy
CRFgSKdgKgtPPuiSp5EZLfdGHohTzuIg3p/BrPWS4onxqJ5Fw4vzWC7tmd1TVudt
EVDNN4DoJtPypE5wF1WZmi0Je5Bni07nMUmb2UX7fVUuoalaiv9pFEh0D4yaOzT3
QeTv8fZU/q2p3lwFZnGP2XcwHlsD1KlST+nkhEpfyXZBm48JWTr5HT8mA9r+Kb2m
31we6aCfvcQpW0t1bdNCWGG/n0n3Cgu9zAUKV1w2PnJCmZPFX0mp/KB9ZJ+3ptL2
7UwSxupPvi9t7xEHgmaTxXEu
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:48:55 2026 by rpki-client