Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/851515FC1C8711EF964ED80AC4F9AE02.roa
File:                     851515FC1C8711EF964ED80AC4F9AE02.roa (raw, json)
Hash identifier:          MAtmMwfjtzQ9R8LyZXq78h+1kb3Yy15h8cOKjzlP4LM=
Subject key identifier:   6A:23:FF:6F:D8:95:C5:B9:04:6D:4A:7D:9A:8E:5F:E8:80:B8:34:1A
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       0195
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/851515FC1C8711EF964ED80AC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 05:41:46 +0000
ROA not before:           Wed 29 Apr 2026 05:41:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9790
IP address blocks:        103.19.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 05:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: Apr 29 05:41:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f19a1a-0331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:aa:16:fa:0d:f7:00:4f:1c:f3:45:91:52:
                    84:9b:e1:3b:10:55:2a:93:fa:0c:b1:97:59:d0:37:
                    0a:c3:b5:af:d1:6b:44:0d:d9:3e:4a:24:cb:a1:93:
                    da:42:e0:92:2d:81:4e:9f:a1:14:95:c7:89:c5:52:
                    b0:56:b3:25:01:b0:9a:9a:28:94:eb:ae:3d:7b:4f:
                    c7:db:5c:5b:11:55:bb:ea:6f:55:9d:5d:5f:fa:08:
                    e1:84:56:8a:d9:32:43:40:42:90:bf:c6:29:65:39:
                    46:4d:ba:dc:93:db:90:bd:bc:aa:18:3b:bb:a3:d0:
                    d4:51:19:92:54:8a:e5:56:9b:e7:f9:f4:2a:56:8a:
                    98:f6:ac:12:f4:07:f4:a3:57:37:2f:df:18:2a:6c:
                    a5:e0:37:0b:50:44:9d:47:00:9f:8a:34:6d:a7:9f:
                    13:50:23:c4:9a:a1:17:69:37:21:97:8f:c3:de:98:
                    b2:03:5c:43:d0:00:3f:1f:11:2f:33:6c:4a:2d:5a:
                    3c:ad:81:de:c5:f1:cc:18:c2:27:b8:66:2e:01:66:
                    62:9a:5f:d9:da:1a:8e:17:fe:82:96:97:3a:f5:de:
                    3e:0b:93:2e:4f:01:fb:5c:b5:69:fb:db:40:e4:57:
                    7c:88:32:56:46:4c:0b:d7:52:e4:df:7d:c9:b9:7c:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:23:FF:6F:D8:95:C5:B9:04:6D:4A:7D:9A:8E:5F:E8:80:B8:34:1A
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/851515FC1C8711EF964ED80AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:37:dd:05:fe:ac:5a:a0:59:69:73:5f:43:ba:85:c7:cf:26:
         14:36:bd:18:af:8d:12:0b:35:7e:d7:50:d2:a0:91:21:79:cc:
         b2:1a:3c:df:a4:72:95:f8:5c:46:37:79:28:d7:2a:45:de:bd:
         22:97:05:39:f4:75:c6:73:64:41:7a:f5:d8:af:58:6e:25:d2:
         03:6f:e8:c7:4d:78:d5:56:50:21:ba:b2:82:99:0f:ee:0b:02:
         22:f6:78:62:1f:97:96:a6:95:8e:c3:c6:1f:8a:4f:cb:ee:3d:
         66:fc:2f:ec:a0:0e:d1:44:c4:aa:db:90:87:99:42:cb:b2:9b:
         98:70:c3:c1:70:a2:6b:90:d7:e0:20:b4:db:ed:4d:2f:6a:6c:
         dd:73:e6:8d:cd:71:1e:41:99:4e:30:70:63:98:a5:3a:78:fa:
         8f:89:d7:32:94:28:67:70:d6:18:78:79:d4:5e:b8:48:d3:c0:
         51:d1:60:d3:01:ed:89:47:85:66:39:b9:bd:59:45:2f:eb:a3:
         62:55:58:b0:ce:f6:af:78:21:0c:ea:5d:1d:73:c5:1b:86:a8:
         f5:24:39:40:d7:30:86:c6:a3:1f:0e:34:dd:f2:af:0f:d4:85:
         c1:eb:09:6d:24:5f:f1:f9:92:2e:cb:98:6e:e7:8b:a3:1e:08:
         33:b8:ef:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 12:53:29 2026 by rpki-client