Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/349641F2A03111F1889724EB3511F970.roa
File:                     349641F2A03111F1889724EB3511F970.roa (raw, json)
Hash identifier:          CvTC/pIM80we377avR/pdEAzz4NkXAGS/quK/H+TxIw=
Subject key identifier:   46:99:D6:29:89:3C:3A:38:12:66:8D:03:5B:D2:F3:E2:F9:BD:B5:6B
Certificate issuer:       /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Certificate serial:       02CC
Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/349641F2A03111F1889724EB3511F970.roa
Signing time:             Tue 25 Aug 2026 03:01:02 +0000
ROA not before:           Tue 25 Aug 2026 03:01:02 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137816
IP address blocks:        103.114.192.0/22 maxlen: 24
                          2402:d1c0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl
                          rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153D75, serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
        Validity
            Not Before: Aug 25 03:01:02 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a8d056e-aca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:65:33:35:ed:b7:ee:b2:4c:46:f1:85:85:
                    d2:cb:5e:09:a6:5d:b5:1d:0e:43:f5:ae:44:76:e0:
                    18:79:58:46:63:b8:25:a9:9c:56:4f:02:45:49:a9:
                    65:27:76:47:b0:ae:48:65:b6:c1:8e:62:31:4e:7b:
                    ee:1c:d4:fa:fe:b6:83:8a:7b:32:cd:78:d9:5b:a6:
                    38:6f:cb:e1:e8:93:77:ce:6a:d7:d9:f0:d0:f2:cd:
                    d9:eb:80:3b:a0:ed:09:d5:eb:17:a3:42:b2:08:95:
                    ae:25:74:06:70:5e:55:f1:a6:a8:2a:65:a0:d8:56:
                    f1:9d:2e:7f:25:7c:c7:5a:15:f4:d2:a1:ba:17:a2:
                    07:ca:01:b3:ce:0c:ba:74:62:70:8f:86:96:56:85:
                    83:27:18:75:61:e2:43:55:bb:0e:58:03:bd:f2:28:
                    e9:cb:bd:eb:a2:a3:d6:f3:f8:79:36:a1:e1:94:01:
                    29:94:52:d5:8a:1c:d5:84:59:fe:1e:79:ed:47:de:
                    ea:af:f4:d8:ee:02:ce:47:34:1a:23:b8:ae:a2:ed:
                    40:88:00:fe:31:19:2e:8f:95:cb:ca:55:da:69:01:
                    69:ce:70:97:0a:83:56:6f:28:ab:86:2c:21:97:af:
                    a3:f8:92:3c:87:58:cd:4c:b9:15:dd:13:42:26:70:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:99:D6:29:89:3C:3A:38:12:66:8D:03:5B:D2:F3:E2:F9:BD:B5:6B
            X509v3 Authority Key Identifier:
                keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/349641F2A03111F1889724EB3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.192.0/22
                IPv6:
                  2402:d1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:19:46:82:37:f6:19:b0:36:2e:93:5c:75:8b:8b:c2:16:22:
         dd:72:cb:45:f8:8c:f0:bc:b4:fc:05:dc:73:78:66:4e:15:03:
         01:8a:28:ec:fc:55:e3:91:47:56:44:1b:3b:be:72:7b:71:ed:
         ba:85:c5:d7:62:24:14:23:2d:82:fa:3c:ed:2c:61:c8:10:f0:
         10:db:4c:05:44:67:13:b3:d3:01:19:e4:d5:dd:77:ea:22:b1:
         00:14:98:a2:33:29:b4:8a:6a:cf:46:19:52:c4:3b:31:e4:c1:
         a8:c5:95:c8:4a:61:94:2f:f4:83:ff:26:92:11:81:07:e3:41:
         0f:ad:ef:38:3c:d2:95:5d:b1:d6:78:cb:e9:9e:0d:b8:68:8a:
         d0:c4:d2:d7:ce:67:71:05:39:15:73:6f:74:c0:ce:37:46:9e:
         7f:bf:42:9a:4d:c4:0b:2b:40:04:12:7f:9f:ce:b1:1f:0b:91:
         9f:49:62:52:76:00:a9:31:5b:83:47:7f:97:fc:6e:cd:91:6e:
         04:ae:bd:37:6d:25:10:81:85:7e:5e:79:47:85:94:4c:6d:9c:
         63:24:5f:7a:a9:c5:ae:c6:26:7a:f6:39:03:ca:5a:39:d9:89:
         08:f6:a1:0e:5f:f3:c2:0c:ab:3e:fc:f7:f4:62:0b:77:49:00:
         83:f2:f6:95
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNENzUxMTAvBgNVBAUTKDJEQkM0NjVEQTY4MUI1QjMxMTg5N0FCNkM0NjhDMjU0
NzA2RTVEMkYwHhcNMjYwODI1MDMwMTAyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThkMDU2ZS1hY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQ9lMzXtt+6yTEbxhYXSy14Jpl21HQ5D9a5EduAYeVhGY7glqZxWTwJFSall
J3ZHsK5IZbbBjmIxTnvuHNT6/raDinsyzXjZW6Y4b8vh6JN3zmrX2fDQ8s3Z64A7
oO0J1esXo0KyCJWuJXQGcF5V8aaoKmWg2FbxnS5/JXzHWhX00qG6F6IHygGzzgy6
dGJwj4aWVoWDJxh1YeJDVbsOWAO98ijpy73roqPW8/h5NqHhlAEplFLVihzVhFn+
HnntR97qr/TY7gLORzQaI7iuou1AiAD+MRkuj5XLylXaaQFpznCXCoNWbyirhiwh
l6+j+JI8h1jNTLkV3RNCJnAoAQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEaZ1imJ
PDo4EmaNA1vS8+L5vbVrMB8GA1UdIwQYMBaAFC28Rl2mgbWzEYl6tsRowlRwbl0v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Q3NS81MkRFNEM0QTY0
QTMxMUVEODIyMDI0MTJDNEY5QUUwMi9MYnhHWGFhQnRiTVJpWHEyeEdqQ1ZIQnVY
UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xieEdYYWFCdGJNUmlYcTJ4R2pDVkhCdVhTOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTNENzUvNTJERTRDNEE2NEEzMTFFRDgyMjAyNDEyQzRGOUFFMDIvMzQ5NjQxRjJB
MDMxMTFGMTg4OTcyNEVCMzUxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ3LAMA0EAgACMAcDBQAkAtHAMA0GCSqGSIb3DQEBCwUAA4IBAQBX
GUaCN/YZsDYuk1x1i4vCFiLdcstF+IzwvLT8BdxzeGZOFQMBiijs/FXjkUdWRBs7
vnJ7ce26hcXXYiQUIy2C+jztLGHIEPAQ20wFRGcTs9MBGeTV3XfqIrEAFJiiMym0
imrPRhlSxDsx5MGoxZXISmGUL/SD/yaSEYEH40EPre84PNKVXbHWeMvpng24aIrQ
xNLXzmdxBTkVc290wM43Rp5/v0KaTcQLK0AEEn+fzrEfC5GfSWJSdgCpMVuDR3+X
/G7NkW4Err03bSUQgYV+XnlHhZRMbZxjJF96qcWuxiZ69jkDylo52YkI9qEOX/PC
DKs+/Pf0Ygt3SQCD8vaV
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:26:58 2026 by rpki-client