Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa
File:                     695DB5289D9D11EC958A216AC4F9AE02.roa (raw, json)
Hash identifier:          X5PDT1MbgloBsVHEEErT26cO3WdhXztNkcjjEpdBJNM=
Subject key identifier:   F5:7D:E8:18:7C:A6:83:D7:D1:10:2B:08:B1:DA:C8:62:C4:37:50:AE
Certificate issuer:       /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182
Certificate serial:       0447
Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa
Signing time:             Wed 01 Apr 2026 00:32:32 +0000
ROA not before:           Wed 01 Apr 2026 00:32:32 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9297
IP address blocks:        103.182.168.0/23 maxlen: 23
                          2001:df0:7ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl
                          rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182
        Validity
            Not Before: Apr  1 00:32:32 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cc67a0-ff7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:84:45:01:a6:9c:b0:49:4a:84:f9:42:db:
                    66:3b:6c:47:f3:5c:be:2d:3e:cf:42:89:85:55:ad:
                    e1:66:d0:88:9f:87:38:a2:3c:74:63:90:76:76:b9:
                    56:08:a7:f6:db:34:d6:97:69:e4:8b:ce:25:eb:ba:
                    2c:c8:5d:12:f6:08:b5:9c:42:b6:38:7c:e7:91:58:
                    4c:83:18:7e:f1:46:bb:a4:3f:3f:4e:87:e1:a2:c1:
                    1a:94:4e:5f:b2:22:6c:1c:1d:ce:7f:cc:01:51:70:
                    59:8e:52:17:dd:9d:ca:d4:3d:78:da:77:28:6d:3a:
                    84:d3:ce:5c:27:6e:56:0e:71:71:6e:36:ed:63:8c:
                    55:a7:90:f9:15:1f:7d:6a:85:44:1b:38:43:99:e2:
                    ac:08:6e:3d:cd:8c:db:ea:10:37:f0:bb:4f:da:b4:
                    47:8b:aa:60:d7:87:dc:82:ec:4b:87:d6:3e:28:35:
                    a5:59:47:68:fa:67:a7:81:a7:a9:6c:a4:e8:df:ea:
                    a8:f9:26:eb:43:e6:43:86:a4:a8:dc:e6:6b:87:95:
                    2b:ff:a4:e9:7b:cc:80:e5:d0:60:c8:1e:91:68:1b:
                    c4:f6:c7:05:29:2a:79:17:0d:58:c1:7d:ef:cf:4c:
                    ba:66:c2:60:2f:55:bb:9c:91:a0:bf:3e:2a:d3:33:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7D:E8:18:7C:A6:83:D7:D1:10:2B:08:B1:DA:C8:62:C4:37:50:AE
            X509v3 Authority Key Identifier:
                keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.168.0/23
                IPv6:
                  2001:df0:7ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:2c:fb:41:15:55:d2:48:58:ef:10:b0:db:1c:19:89:28:44:
         73:87:7a:a4:67:ac:f4:85:98:5b:5b:fb:9e:bd:7a:09:d6:e0:
         11:ae:1e:31:91:a6:ad:d1:cf:74:f9:30:00:64:63:4f:9e:9a:
         6a:9f:e3:b7:90:3b:c2:65:c3:11:6e:ce:81:91:0f:38:9d:05:
         4c:da:0c:a8:a3:02:b7:78:6d:15:7d:62:e8:96:f1:79:1d:b5:
         53:dc:85:cf:97:2f:13:f3:32:ca:b5:a2:af:5e:23:23:7d:8b:
         45:85:20:79:1e:96:5b:da:ed:1f:38:13:4c:97:af:78:0a:37:
         e3:5e:c9:fd:15:9f:0c:56:4e:11:cb:a1:dc:9e:22:05:fd:5c:
         04:5e:22:69:3e:ce:13:4e:59:15:9d:e3:44:0a:24:fb:cf:42:
         ad:04:ed:c0:e2:56:c6:99:3a:07:2d:ae:a4:ab:e8:b7:36:b5:
         f7:ad:06:dc:0b:df:7f:b4:9d:b9:66:e6:aa:e1:64:1a:1b:58:
         2c:1e:aa:e6:ef:3f:51:84:b2:33:11:3f:cf:1b:45:15:cd:16:
         1e:37:59:f0:a8:e2:d9:05:26:1e:bf:4a:11:09:29:7e:e7:1e:
         72:10:d4:40:93:7d:46:4d:54:ca:50:5f:b9:c3:d6:54:4b:75:
         15:3e:d7:a9
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3
QjMwMzgxODIwHhcNMjYwNDAxMDAzMjMyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNjNjdhMC1mZjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvSeERQGmnLBJSoT5QttmO2xH81y+LT7PQomFVa3hZtCIn4c4ojx0Y5B2drlW
CKf22zTWl2nki84l67osyF0S9gi1nEK2OHznkVhMgxh+8Ua7pD8/TofhosEalE5f
siJsHB3Of8wBUXBZjlIX3Z3K1D142ncobTqE085cJ25WDnFxbjbtY4xVp5D5FR99
aoVEGzhDmeKsCG49zYzb6hA38LtP2rRHi6pg14fcguxLh9Y+KDWlWUdo+mengaep
bKTo3+qo+SbrQ+ZDhqSo3OZrh5Ur/6Tpe8yA5dBgyB6RaBvE9scFKSp5Fw1YwX3v
z0y6ZsJgL1W7nJGgvz4q0zNU1wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPV96Bh8
poPX0RArCLHayGLEN1CuMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE
OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTZEQjQvRTg0REI5OEE5RDlBMTFFQ0JBOTI4RjQ1QzRGOUFFMDIvNjk1REI1Mjg5
RDlEMTFFQzk1OEEyMTZBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ7aoMA8EAgACMAkDBwAgAQ3wfsAwDQYJKoZIhvcNAQELBQADggEB
AGYs+0EVVdJIWO8QsNscGYkoRHOHeqRnrPSFmFtb+569egnW4BGuHjGRpq3Rz3T5
MABkY0+emmqf47eQO8JlwxFuzoGRDzidBUzaDKijArd4bRV9YuiW8XkdtVPchc+X
LxPzMsq1oq9eIyN9i0WFIHkellva7R84E0yXr3gKN+Neyf0VnwxWThHLodyeIgX9
XAReImk+zhNOWRWd40QKJPvPQq0E7cDiVsaZOgctrqSr6Lc2tfetBtwL33+0nblm
5qrhZBobWCwequbvP1GEsjMRP88bRRXNFh43WfCo4tkFJh6/ShEJKX7nHnIQ1ECT
fUZNVMpQX7nD1lRLdRU+16k=
-----END CERTIFICATE-----
Generated at Mon Apr 6 18:20:17 2026 by rpki-client