Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/AD25E68EBCE911F188D206D73B11F970.roa
File:                     AD25E68EBCE911F188D206D73B11F970.roa (raw, json)
Hash identifier:          diltmmmWHW+C37knALH+XbUCojZpVW6vPiqZlJaUGgI=
Subject key identifier:   73:36:76:3D:49:86:F3:C3:04:CD:2C:FF:3D:51:90:98:C7:D7:D3:FC
Certificate issuer:       /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial:       0312
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/AD25E68EBCE911F188D206D73B11F970.roa
Signing time:             Wed 30 Sep 2026 16:12:05 +0000
ROA not before:           Wed 30 Sep 2026 16:12:05 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     150740
IP address blocks:        103.20.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
                          rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
        Validity
            Not Before: Sep 30 16:12:05 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6abd34d4-c38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:8c:93:2c:1f:62:49:39:fa:e8:c7:18:35:
                    c7:39:ab:40:8a:ed:a1:a6:1d:b2:67:89:e8:83:49:
                    50:69:ed:4c:05:7b:dc:3e:43:28:8f:50:29:7c:ac:
                    f9:86:70:e9:47:ee:0f:16:db:f0:e2:e9:8f:97:f4:
                    06:61:50:50:4a:73:88:03:38:dd:98:e8:f5:2d:cd:
                    90:fc:d2:11:8b:55:fa:42:29:e7:a6:cf:a8:14:fc:
                    af:66:af:85:53:b1:cd:34:35:d2:6a:6d:98:ba:9a:
                    08:97:95:23:7f:81:9c:bd:f6:fa:18:2b:f8:9f:0b:
                    46:73:f9:f6:5f:92:d6:d4:ab:33:2c:6b:e1:36:7c:
                    79:98:41:9b:3e:6a:50:06:d5:4e:3b:81:6d:9c:38:
                    7d:63:b6:b3:a2:f3:ce:ea:48:a0:36:9c:aa:42:f6:
                    d8:80:d2:5f:e1:a4:ce:16:bf:33:89:5a:67:47:8c:
                    55:1e:d1:e3:17:40:37:71:de:e0:b3:06:ee:e1:4a:
                    87:0c:c1:68:30:0e:0c:c0:62:b7:13:47:9a:a3:5c:
                    57:0d:7e:4d:3f:ea:1c:05:8e:51:87:f7:04:12:04:
                    40:01:70:94:af:0a:c0:72:01:c1:39:cc:5e:d1:0d:
                    d3:06:cb:ce:29:5a:c7:f1:e8:3e:8e:fb:89:ab:0f:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:36:76:3D:49:86:F3:C3:04:CD:2C:FF:3D:51:90:98:C7:D7:D3:FC
            X509v3 Authority Key Identifier:
                keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/AD25E68EBCE911F188D206D73B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:39:b7:34:cf:85:2d:a8:a4:b2:42:cf:cb:65:15:24:c3:
         94:91:bc:97:47:35:db:26:56:23:e9:b7:f5:42:9a:5c:81:4a:
         65:17:27:da:e5:16:18:a9:cd:df:d1:57:0e:30:48:25:41:84:
         60:df:06:55:10:47:0d:79:1a:e4:9d:45:e5:d5:01:53:32:f2:
         b0:5d:c8:20:8d:ed:48:b3:2c:9a:a8:98:09:8b:50:3d:e7:c8:
         92:53:ca:7a:80:cb:ba:20:f9:94:bc:13:fa:44:e2:4e:d2:95:
         ae:ee:cf:41:69:d8:a4:57:d9:04:23:1d:81:59:da:52:4e:83:
         a2:88:b6:04:95:51:fd:73:4e:ec:ee:ad:bb:76:ca:cd:4c:29:
         98:50:23:d4:f1:c6:ba:47:3a:55:28:fe:b8:e4:07:c8:b7:f6:
         1e:26:0e:be:e6:c7:ae:20:c8:33:63:b8:be:74:f2:ec:a6:04:
         24:4e:0b:86:26:66:34:7a:48:60:71:03:89:5a:7f:3e:bd:33:
         ec:a1:fa:7b:59:75:4f:a8:8d:c5:29:b2:6d:f1:af:8e:79:3c:
         90:fc:3a:e8:a9:dc:97:88:c8:db:5b:3f:d1:d8:7e:02:0c:d8:
         b1:7f:d4:27:13:37:0d:53:65:54:d0:d7:fa:4c:f7:e4:bf:0a:
         e0:7b:83:f0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3
RkJCMjg5MTMwHhcNMjYwOTMwMTYxMjA1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkMzRkNC1jMzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZ6MkywfYkk5+ujHGDXHOatAiu2hph2yZ4nog0lQae1MBXvcPkMoj1ApfKz5
hnDpR+4PFtvw4umPl/QGYVBQSnOIAzjdmOj1Lc2Q/NIRi1X6Qinnps+oFPyvZq+F
U7HNNDXSam2YupoIl5Ujf4Gcvfb6GCv4nwtGc/n2X5LW1KszLGvhNnx5mEGbPmpQ
BtVOO4FtnDh9Y7azovPO6kigNpyqQvbYgNJf4aTOFr8ziVpnR4xVHtHjF0A3cd7g
swbu4UqHDMFoMA4MwGK3E0eao1xXDX5NP+ocBY5Rh/cEEgRAAXCUrwrAcgHBOcxe
0Q3TBsvOKVrH8eg+jvuJqw8SnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHM2dj1J
hvPDBM0s/z1RkJjH19P8MB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE
Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp
Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzY5MDkvOUFCQUNBQzg0RENCMTFFRDgyOTYxQjM2QzRGOUFFMDIvQUQyNUU2OEVC
Q0U5MTFGMTg4RDIwNkQ3M0IxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZxTyMA0GCSqGSIb3DQEBCwUAA4IBAQCtIzm3NM+FLaikskLPy2UV
JMOUkbyXRzXbJlYj6bf1QppcgUplFyfa5RYYqc3f0VcOMEglQYRg3wZVEEcNeRrk
nUXl1QFTMvKwXcggje1IsyyaqJgJi1A958iSU8p6gMu6IPmUvBP6ROJO0pWu7s9B
adikV9kEIx2BWdpSToOiiLYElVH9c07s7q27dsrNTCmYUCPU8ca6RzpVKP645AfI
t/YeJg6+5seuIMgzY7i+dPLspgQkTguGJmY0ekhgcQOJWn8+vTPsofp7WXVPqI3F
KbJt8a+OeTyQ/DroqdyXiMjbWz/R2H4CDNixf9QnEzcNU2VU0Nf6TPfkvwrge4Pw
-----END CERTIFICATE-----
Generated at Mon Oct 5 13:02:24 2026 by rpki-client