Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/A2ED9CA2619D11EE8699DD20C4F9AE02.roa
File:                     A2ED9CA2619D11EE8699DD20C4F9AE02.roa (raw, json)
Hash identifier:          +lWWO9i+47FRbNqWoktdoiVNQPkrt6DN94tfbAGRugY=
Subject key identifier:   1A:36:90:84:06:D5:B8:2E:24:65:A1:01:42:02:B9:CC:44:B7:96:F0
Certificate issuer:       /CN=A9181C93/serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
Certificate serial:       021E
Authority key identifier: E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/A2ED9CA2619D11EE8699DD20C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 04:52:36 +0000
ROA not before:           Mon 03 Aug 2026 04:52:36 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     151795
IP address blocks:        103.77.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl
                          rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181C93, serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
        Validity
            Not Before: Aug  3 04:52:36 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a701e94-d359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:e2:1f:7d:36:47:fb:3a:26:3d:6d:3f:82:
                    be:b4:67:e9:cc:e1:2a:7d:d5:99:2a:e2:b9:85:9c:
                    0b:5c:24:ab:37:8b:2e:b0:a7:4a:96:00:79:be:f1:
                    89:6a:f0:c0:98:9a:e8:30:3b:e2:da:d0:fd:24:12:
                    06:73:9d:c1:ac:27:39:56:19:29:bc:ca:b7:3e:8b:
                    9e:0d:0e:b8:0f:6c:32:74:59:e9:c8:b4:4a:57:10:
                    aa:07:99:fe:b0:a1:c9:64:38:ac:46:13:58:12:cf:
                    75:63:9a:e5:c3:1f:6f:32:3a:0c:76:6e:07:5e:ca:
                    c7:68:03:70:2a:ba:af:4d:bc:d5:b2:23:25:e6:2c:
                    8b:67:6c:06:17:67:11:38:0c:38:69:49:3f:7d:52:
                    74:0c:82:b8:ac:36:4d:f2:8f:ff:65:3d:1d:e2:14:
                    15:b3:78:dc:dd:60:db:6c:c1:f9:38:fe:06:a6:a9:
                    b5:dd:e4:42:81:9e:5b:56:65:43:08:7e:b0:3d:45:
                    a5:d0:61:8b:a4:d9:f9:c9:33:f9:7b:85:32:e1:b1:
                    5c:e5:fc:a9:46:db:62:f7:2a:82:a1:ce:b7:f1:d1:
                    b9:5d:9d:41:dc:ef:de:76:0f:53:83:06:ea:8a:18:
                    5c:1c:54:42:3b:c4:c5:e8:bd:98:79:7d:da:7b:35:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:36:90:84:06:D5:B8:2E:24:65:A1:01:42:02:B9:CC:44:B7:96:F0
            X509v3 Authority Key Identifier:
                keyid:E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/A2ED9CA2619D11EE8699DD20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:0b:d7:90:83:9a:dd:e9:3c:d0:c6:85:a8:ca:fa:da:eb:e1:
         62:ee:3e:81:1c:2f:17:2e:82:65:38:4a:4b:f0:19:7c:90:cd:
         10:c6:06:82:69:92:00:b9:0e:0c:f0:f9:3e:b0:ed:e0:84:23:
         04:43:10:44:2f:e9:3c:51:0a:94:62:bb:aa:92:bd:9f:3c:95:
         0b:5c:9b:23:f4:83:c4:d1:e2:a7:cf:3d:69:b1:14:ae:80:1d:
         2a:1d:63:42:b6:c6:b7:18:81:3c:89:59:cb:71:83:05:3c:ca:
         08:74:cc:80:a6:15:06:8f:a3:a4:11:50:63:8d:89:f5:09:e7:
         8f:91:32:c9:78:22:39:24:23:12:e3:02:ca:0d:25:e5:49:0e:
         d7:ef:17:c5:62:a1:b2:e8:06:eb:e4:02:dc:7e:a7:4e:b9:f6:
         98:9d:1f:a7:a9:d5:ec:7d:2d:27:a5:16:07:6f:b7:68:c2:27:
         34:7d:79:7e:83:d9:c0:0a:05:8e:75:15:7f:2c:11:30:95:99:
         70:c4:ac:30:4f:0c:2a:5f:63:de:3d:68:ca:0d:70:08:92:91:
         ec:93:23:e8:e5:a9:5f:29:ad:fa:d4:df:8a:54:4e:d9:33:32:
         ad:93:3b:a3:59:51:b4:a4:23:f1:14:3e:bf:f3:14:1f:81:45:
         3f:f0:68:88
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFDOTMxMTAvBgNVBAUTKEU3M0IyQjVCNDg5OEU0NzVGRkU4NjlCMjREMzQ4NUNF
Qzg3REQxNEIwHhcNMjYwODAzMDQ1MjM2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcwMWU5NC1kMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXriH302R/s6Jj1tP4K+tGfpzOEqfdWZKuK5hZwLXCSrN4susKdKlgB5vvGJ
avDAmJroMDvi2tD9JBIGc53BrCc5VhkpvMq3PoueDQ64D2wydFnpyLRKVxCqB5n+
sKHJZDisRhNYEs91Y5rlwx9vMjoMdm4HXsrHaANwKrqvTbzVsiMl5iyLZ2wGF2cR
OAw4aUk/fVJ0DIK4rDZN8o//ZT0d4hQVs3jc3WDbbMH5OP4Gpqm13eRCgZ5bVmVD
CH6wPUWl0GGLpNn5yTP5e4Uy4bFc5fypRtti9yqCoc638dG5XZ1B3O/edg9Tgwbq
ihhcHFRCO8TF6L2YeX3aezXzawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBo2kIQG
1bguJGWhAUICucxEt5bwMB8GA1UdIwQYMBaAFOc7K1tImOR1/+hpsk00hc7IfdFL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM5My82RDBGNjQwRTYx
OTcxMUVFQTYyQTM2NzZDNEY5QUUwMi81enNyVzBpWTVIWF82R215VFRTRnpzaDkw
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV6c3JXMGlZNUhYXzZHbXlUVFNGenNoOTBVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODFDOTMvNkQwRjY0MEU2MTk3MTFFRUE2MkEzNjc2QzRGOUFFMDIvQTJFRDlDQTI2
MTlEMTFFRTg2OTlERDIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ02yMA0GCSqGSIb3DQEBCwUAA4IBAQCMC9eQg5rd6TzQxoWoyvra
6+Fi7j6BHC8XLoJlOEpL8Bl8kM0QxgaCaZIAuQ4M8Pk+sO3ghCMEQxBEL+k8UQqU
Yruqkr2fPJULXJsj9IPE0eKnzz1psRSugB0qHWNCtsa3GIE8iVnLcYMFPMoIdMyA
phUGj6OkEVBjjYn1CeePkTLJeCI5JCMS4wLKDSXlSQ7X7xfFYqGy6Abr5ALcfqdO
ufaYnR+nqdXsfS0npRYHb7dowic0fXl+g9nACgWOdRV/LBEwlZlwxKwwTwwqX2Pe
PWjKDXAIkpHskyPo5alfKa361N+KVE7ZMzKtkzujWVG0pCPxFD6/8xQfgUU/8GiI
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:19 2026 by rpki-client