Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa
File:                     EF1E7F70E82411EE9005BA2DC4F9AE02.roa (raw, json)
Hash identifier:          At643elqRJd2BjPQAPdTeEaxQov7oAvsnBfXaIpuNvo=
Subject key identifier:   9B:10:39:D6:A9:B0:BE:0C:64:5B:66:AF:38:5C:D1:E8:1E:D3:6C:3F
Certificate issuer:       /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial:       01E1
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 04:54:04 +0000
ROA not before:           Thu 03 Sep 2026 04:54:03 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     151630
IP address blocks:        103.142.246.0/24 maxlen: 24
                          103.142.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
        Validity
            Not Before: Sep  3 04:54:03 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a98fd6b-23f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:03:29:72:1e:67:c9:bd:f7:ee:ab:1a:8e:
                    58:45:bd:31:e6:26:01:5c:12:c5:c2:27:cc:5f:5e:
                    c8:33:cd:6b:ff:5c:f4:1e:f7:a3:2d:d9:20:e9:0b:
                    2f:8b:77:94:05:a0:73:ec:63:d3:11:5e:97:d8:ff:
                    ad:dc:6c:13:56:ec:f1:ee:4a:81:99:8f:1a:02:5d:
                    76:3a:fc:90:bb:6f:12:67:5c:89:99:62:61:00:4c:
                    58:de:e2:95:9e:ff:f5:8a:49:e2:de:43:8f:37:ff:
                    f7:bc:0d:32:d5:3e:b8:5b:5d:ac:2b:c1:09:87:72:
                    90:67:ad:3d:95:54:b0:f5:b5:73:7d:21:3c:4a:97:
                    06:fe:7c:9a:fe:c7:43:f1:ea:7a:96:85:33:ad:1a:
                    f9:77:7b:4f:e9:bf:c2:7f:9b:20:9b:46:23:1c:07:
                    fa:bf:8b:4e:a3:5d:40:8e:cf:9a:95:9d:af:d8:0b:
                    a6:51:15:30:00:b5:b4:97:65:00:f2:0f:8b:af:ce:
                    0e:81:8a:f0:da:c1:a3:07:de:3f:9b:54:3d:ec:7e:
                    61:a6:5a:36:37:cf:4b:0f:2e:73:e3:8c:a3:2f:66:
                    a2:37:0e:fa:05:a7:98:34:84:96:33:e2:22:3b:9c:
                    c7:48:dc:ad:5f:0d:30:ee:27:cd:b0:5a:80:74:3a:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:10:39:D6:A9:B0:BE:0C:64:5B:66:AF:38:5C:D1:E8:1E:D3:6C:3F
            X509v3 Authority Key Identifier:
                keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:5d:30:ac:37:be:5f:e9:b6:ff:79:05:bf:a1:37:82:73:
         85:1b:55:e9:b3:66:14:b9:8c:23:35:10:24:dd:87:40:7e:a7:
         4e:94:72:65:e6:2a:65:e5:96:54:14:a7:fa:b4:f7:02:b3:16:
         8b:66:2e:7e:8e:70:ed:e2:fc:e4:9f:96:1c:00:a8:30:91:1b:
         85:c5:cd:d9:05:1d:a7:45:3a:f6:5f:a3:db:8b:45:a1:a7:34:
         bd:e4:80:79:b5:1e:82:1b:c0:74:7a:e0:d3:1f:d2:4a:37:77:
         65:b5:46:be:59:7a:12:ad:c4:c2:94:55:eb:bf:74:72:89:0b:
         e1:aa:24:c0:5c:83:6e:89:8e:bf:49:8b:19:f6:52:3b:9e:aa:
         bb:e7:e3:18:f4:80:85:19:fb:67:9c:e0:c4:78:1c:29:bb:4c:
         17:1b:73:d2:bc:2a:a4:49:f4:3b:8e:8f:ad:5a:db:6b:71:ce:
         fc:d6:dd:23:63:a4:2b:3f:5d:db:86:fc:36:39:15:78:1c:39:
         d2:ad:2e:9f:85:69:3c:a1:fa:c8:4d:99:f4:ff:44:1b:86:f7:
         a5:8a:42:7b:a6:c6:7c:e2:69:17:2b:99:d7:b0:3e:0d:03:8d:
         bf:93:99:45:71:e3:89:3c:22:f8:b9:63:e2:2a:53:be:2f:26:
         6a:62:4d:fb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNCMjkxMTAvBgNVBAUTKEM1NTE4N0IwMEIxQTczMzc1Rjg0NTY4ODVGNkExMDdF
RTFEOTM1Q0YwHhcNMjYwOTAzMDQ1NDAzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4ZmQ2Yi0yM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsasDKXIeZ8m99+6rGo5YRb0x5iYBXBLFwifMX17IM81r/1z0HvejLdkg6Qsv
i3eUBaBz7GPTEV6X2P+t3GwTVuzx7kqBmY8aAl12OvyQu28SZ1yJmWJhAExY3uKV
nv/1ikni3kOPN//3vA0y1T64W12sK8EJh3KQZ609lVSw9bVzfSE8SpcG/nya/sdD
8ep6loUzrRr5d3tP6b/Cf5sgm0YjHAf6v4tOo11Ajs+alZ2v2AumURUwALW0l2UA
8g+Lr84OgYrw2sGjB94/m1Q97H5hplo2N89LDy5z44yjL2aiNw76BaeYNISWM+Ii
O5zHSNytXw0w7ifNsFqAdDorpQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJsQOdap
sL4MZFtmrzhc0ege02w/MB8GA1UdIwQYMBaAFMVRh7ALGnM3X4RWiF9qEH7h2TXP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IyOS82MTdFOTQ0OEU4
MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6ZGZoRmFJWDJvUWZ1SFpO
YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5jOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzNCMjkvNjE3RTk0NDhFODI0MTFFRUFGQjdEQTdEQzRGOUFFMDIvRUYxRTdGNzBF
ODI0MTFFRTkwMDVCQTJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ472MA0GCSqGSIb3DQEBCwUAA4IBAQA/b10wrDe+X+m2/3kFv6E3
gnOFG1Xps2YUuYwjNRAk3YdAfqdOlHJl5ipl5ZZUFKf6tPcCsxaLZi5+jnDt4vzk
n5YcAKgwkRuFxc3ZBR2nRTr2X6Pbi0WhpzS95IB5tR6CG8B0euDTH9JKN3dltUa+
WXoSrcTClFXrv3RyiQvhqiTAXINuiY6/SYsZ9lI7nqq75+MY9ICFGftnnODEeBwp
u0wXG3PSvCqkSfQ7jo+tWttrcc781t0jY6QrP13bhvw2ORV4HDnSrS6fhWk8ofrI
TZn0/0QbhvelikJ7psZ84mkXK5nXsD4NA42/k5lFceOJPCL4uWPiKlO+LyZqYk37
-----END CERTIFICATE-----
Generated at Sun Sep 20 04:07:30 2026 by rpki-client