Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/62222AD0A4F711F18921778A6E11F970.roa
File:                     62222AD0A4F711F18921778A6E11F970.roa (raw, json)
Hash identifier:          NoOcaoGKf5Bs9NFrRBlo08kTVJWTKnWumARvgs6PpUM=
Subject key identifier:   D4:CF:4F:AB:9F:9D:00:FA:38:0C:A3:F1:48:14:20:D9:11:44:84:3B
Certificate issuer:       /CN=A9175848/serialNumber=57B9B1E985E67AAB70523B58BBB8D41C772B5F4F
Certificate serial:       0B
Authority key identifier: 57:B9:B1:E9:85:E6:7A:AB:70:52:3B:58:BB:B8:D4:1C:77:2B:5F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7mx6YXmeqtwUjtYu7jUHHcrX08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/62222AD0A4F711F18921778A6E11F970.roa
Signing time:             Mon 31 Aug 2026 04:50:13 +0000
ROA not before:           Mon 31 Aug 2026 04:50:13 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     133073
IP address blocks:        103.71.148.0/22 maxlen: 24
                          103.234.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/V7mx6YXmeqtwUjtYu7jUHHcrX08.crl
                          rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/V7mx6YXmeqtwUjtYu7jUHHcrX08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7mx6YXmeqtwUjtYu7jUHHcrX08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175848, serialNumber=57B9B1E985E67AAB70523B58BBB8D41C772B5F4F
        Validity
            Not Before: Aug 31 04:50:13 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a950805-b027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:b6:70:f6:c3:be:60:40:36:c7:d2:eb:27:
                    05:f3:98:98:54:53:ef:f1:ae:ea:04:54:ea:0d:c7:
                    cc:b2:dc:0b:84:22:23:6f:fe:1c:c9:22:e3:6f:4f:
                    4d:62:a1:4b:2e:52:bc:6e:cc:22:a6:29:32:70:78:
                    57:39:30:cc:1d:d1:b2:8e:7c:fe:42:9b:54:94:47:
                    88:31:f0:30:00:66:76:1c:ba:d3:5c:b8:6e:77:af:
                    dd:c2:6d:a4:98:84:24:77:44:a4:1c:e0:b2:03:0c:
                    be:4c:6f:b1:8c:85:e2:f8:c4:a8:43:92:62:14:18:
                    39:fd:56:b9:98:46:9a:38:b3:59:12:ff:1f:98:1e:
                    7c:0e:f8:00:84:a5:af:cd:5a:e0:f0:56:24:e8:51:
                    10:b6:25:91:8a:ea:3b:29:f1:9a:92:5f:43:32:87:
                    9e:0c:07:69:86:5e:20:da:fc:93:4e:7f:d0:85:85:
                    68:0e:f0:20:98:dd:3c:1b:57:21:0d:5d:a7:1b:e1:
                    7a:b1:0e:35:69:f0:21:8f:b4:72:2b:e1:05:98:f7:
                    1b:07:38:20:ab:c8:c2:59:f3:19:47:e9:a2:f0:99:
                    47:15:8f:05:39:f2:45:b6:80:73:9c:1f:44:a0:6d:
                    fb:73:df:5d:41:51:b5:97:93:77:87:d1:47:b9:d0:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CF:4F:AB:9F:9D:00:FA:38:0C:A3:F1:48:14:20:D9:11:44:84:3B
            X509v3 Authority Key Identifier:
                keyid:57:B9:B1:E9:85:E6:7A:AB:70:52:3B:58:BB:B8:D4:1C:77:2B:5F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/V7mx6YXmeqtwUjtYu7jUHHcrX08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7mx6YXmeqtwUjtYu7jUHHcrX08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/62222AD0A4F711F18921778A6E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.148.0/22
                  103.234.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:72:96:5f:37:97:b0:bc:a9:e5:f7:e7:d1:19:62:ff:dc:e1:
         13:c4:0b:1d:c9:4a:4c:e6:71:80:be:c8:87:3d:31:25:5a:39:
         03:82:3a:bc:d3:e0:b7:1d:d2:40:37:bb:c0:78:19:e5:87:9a:
         7e:05:ae:0b:6d:57:54:64:5c:8f:34:e9:32:cd:e5:01:6a:3f:
         06:ac:74:b0:07:ba:92:14:b7:bf:fa:17:a5:15:3f:f4:65:53:
         89:5b:cb:55:1f:27:ca:9a:20:ff:87:cb:cb:3e:7a:f9:c7:15:
         f4:af:57:0d:4a:82:f2:ce:d5:34:75:9b:c2:fe:81:b4:43:15:
         fc:43:fd:4b:a7:98:a0:73:c1:6f:86:40:db:c6:09:d1:79:1a:
         2c:32:e1:cd:20:ab:41:84:40:12:da:4a:6f:15:cb:5e:ad:23:
         ab:94:97:b5:4a:49:c5:5f:6f:9e:24:15:aa:c4:5c:ba:e3:bd:
         3b:e6:fd:1c:59:2c:c4:92:15:fd:03:1f:90:2a:c9:2e:2a:92:
         16:be:df:21:6a:70:09:38:8e:72:cf:3d:fe:52:9a:1e:53:61:
         12:2a:84:0e:77:0e:32:08:db:2b:a6:f0:b7:81:fe:a5:61:ca:
         58:52:37:ba:34:c5:be:d1:71:9b:d3:01:60:6e:92:e0:77:8e:
         bd:37:be:63
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NTg0ODExMC8GA1UEBRMoNTdCOUIxRTk4NUU2N0FBQjcwNTIzQjU4QkJCOEQ0MUM3
NzJCNUY0RjAeFw0yNjA4MzEwNDUwMTNaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOTUwODA1LWIwMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNLrZw9sO+YEA2x9LrJwXzmJhUU+/xruoEVOoNx8yy3AuEIiNv/hzJIuNvT01i
oUsuUrxuzCKmKTJweFc5MMwd0bKOfP5Cm1SUR4gx8DAAZnYcutNcuG53r93CbaSY
hCR3RKQc4LIDDL5Mb7GMheL4xKhDkmIUGDn9VrmYRpo4s1kS/x+YHnwO+ACEpa/N
WuDwViToURC2JZGK6jsp8ZqSX0Myh54MB2mGXiDa/JNOf9CFhWgO8CCY3TwbVyEN
Xacb4XqxDjVp8CGPtHIr4QWY9xsHOCCryMJZ8xlH6aLwmUcVjwU58kW2gHOcH0Sg
bftz311BUbWXk3eH0Ue50BS9AgMBAAGjggJmMIICYjAdBgNVHQ4EFgQU1M9Pq5+d
APo4DKPxSBQg2RFEhDswHwYDVR0jBBgwFoAUV7mx6YXmeqtwUjtYu7jUHHcrX08w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1ODQ4LzgzNUJDNEY2QTRG
MDExRjE5MkFFQzVCMDZCMTFGOTcwL1Y3bXg2WVhtZXF0d1VqdFl1N2pVSEhjclgw
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVjdteDZZWG1lcXR3VWp0WXU3alVISGNyWDA4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTg0OC84MzVCQzRGNkE0RjAxMUYxOTJBRUM1QjA2QjExRjk3MC82MjIyMkFEMEE0
RjcxMUYxODkyMTc3OEE2RTExRjk3MC5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAJnR5QDBAJn6ggwDQYJKoZIhvcNAQELBQADggEBAChyll83l7C8qeX3
59EZYv/c4RPECx3JSkzmcYC+yIc9MSVaOQOCOrzT4Lcd0kA3u8B4GeWHmn4Frgtt
V1RkXI806TLN5QFqPwasdLAHupIUt7/6F6UVP/RlU4lby1UfJ8qaIP+Hy8s+evnH
FfSvVw1KgvLO1TR1m8L+gbRDFfxD/UunmKBzwW+GQNvGCdF5Giwy4c0gq0GEQBLa
Sm8Vy16tI6uUl7VKScVfb54kFarEXLrjvTvm/RxZLMSSFf0DH5AqyS4qkha+3yFq
cAk4jnLPPf5Smh5TYRIqhA53DjII2yum8LeB/qVhylhSN7o0xb7RcZvTAWBukuB3
jr03vmM=
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:02:53 2026 by rpki-client