Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/625827FC74D811EB99569279C4F9AE02.roa
File:                     625827FC74D811EB99569279C4F9AE02.roa (raw, json)
Hash identifier:          a/mz5m3Ht/Pw0t2/lkibfts+EiDU4lBsPnKxTS7Fd0I=
Subject key identifier:   28:CB:60:6F:20:AD:61:03:7B:9C:CF:14:F9:31:FE:FE:93:2F:2B:2E
Certificate issuer:       /CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312
Certificate serial:       0787
Authority key identifier: BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/625827FC74D811EB99569279C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 21:43:09 +0000
ROA not before:           Wed 02 Sep 2026 21:43:09 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     139768
IP address blocks:        103.149.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl
                          rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EBC, serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312
        Validity
            Not Before: Sep  2 21:43:09 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a98986c-e4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:db:f8:09:1c:0b:41:62:9f:c1:85:0c:83:
                    07:4a:31:b4:29:b1:4d:03:45:12:25:c6:36:f9:19:
                    f1:e4:32:c6:fc:91:73:cb:3f:fc:83:70:0a:e7:ee:
                    17:12:2a:13:21:8e:0f:7d:36:6a:d4:92:a3:69:6c:
                    6f:6d:9d:93:d7:96:9b:53:b2:fe:f3:bf:45:14:46:
                    02:c0:c0:1e:a1:9f:e9:cd:61:f4:72:50:26:c2:e3:
                    e7:95:31:1c:8d:8d:f9:70:ac:74:87:2e:62:98:24:
                    99:45:75:36:99:e4:97:d9:45:da:b0:b6:51:54:e3:
                    f8:ba:1d:e9:54:6a:3f:02:06:52:93:aa:9d:62:01:
                    44:0f:f5:40:8a:40:a6:4d:3e:01:10:55:77:7b:7d:
                    b7:66:d1:8b:fa:33:6b:73:58:d0:7c:fe:a8:14:05:
                    84:fe:a1:fc:05:3b:c6:76:c5:0a:67:f4:71:8c:cd:
                    33:e3:fa:e0:bf:3d:2f:41:f5:8b:89:c8:fd:23:e1:
                    85:62:64:98:5c:c9:2d:25:6b:82:f9:ee:c9:e8:1e:
                    eb:29:d7:a0:90:e2:44:66:8b:4c:8d:8c:8b:ab:9b:
                    0a:33:35:2a:15:aa:ca:56:d2:51:6d:a8:09:07:6d:
                    c3:9a:58:7b:b2:ee:d4:de:15:16:23:6d:84:bc:15:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:60:6F:20:AD:61:03:7B:9C:CF:14:F9:31:FE:FE:93:2F:2B:2E
            X509v3 Authority Key Identifier:
                keyid:BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/625827FC74D811EB99569279C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:34:30:21:28:57:42:6b:a5:95:78:00:f7:33:42:a4:41:2a:
         4c:a1:aa:dd:0e:12:21:b6:35:8f:37:2a:38:e6:ea:32:22:bc:
         6f:b0:00:86:f6:e4:25:50:d0:f8:a8:3b:e5:f4:f9:19:11:03:
         77:b4:29:4c:dc:28:70:b6:ea:a2:0f:71:a8:95:0c:19:04:bf:
         36:b3:6e:b9:2c:e4:75:74:47:01:85:5f:23:f7:4e:dc:b9:b9:
         d5:68:4f:b5:e9:87:a6:13:46:83:4d:a2:c8:b5:72:8e:03:7d:
         aa:ad:3d:8b:ce:2f:32:bf:02:1d:d9:61:bc:1b:fd:00:a0:90:
         6c:5d:00:b2:d3:cb:de:e7:76:92:f5:c6:43:22:11:1b:10:8a:
         7e:42:a9:89:f7:18:a1:f7:44:fc:9c:51:cd:56:dc:25:4a:1f:
         31:67:b4:7f:9a:98:2d:38:c9:e8:85:0b:72:86:bc:2d:3d:ab:
         37:49:f9:74:96:6f:94:84:e4:c8:db:4f:0c:81:f5:a8:dd:cd:
         aa:78:2a:ac:99:99:b1:fd:3d:8c:9d:34:3b:ef:b3:5b:f9:18:
         13:30:73:f8:7c:fd:3b:8b:7c:b8:e5:18:16:a4:1a:fe:cc:82:
         1c:84:cc:fa:db:58:ec:e2:a6:bd:fc:60:e8:56:4d:3d:70:bf:
         d0:98:ae:1d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFFQkMxMTAvBgNVBAUTKEJENDhCQUZBMzJBRDJFOTNCODg5Q0YzRTM4NjlBQzAz
NEExNzIzMTIwHhcNMjYwOTAyMjE0MzA5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4OTg2Yy1lNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6rb+AkcC0Fin8GFDIMHSjG0KbFNA0USJcY2+Rnx5DLG/JFzyz/8g3AK5+4X
EioTIY4PfTZq1JKjaWxvbZ2T15abU7L+879FFEYCwMAeoZ/pzWH0clAmwuPnlTEc
jY35cKx0hy5imCSZRXU2meSX2UXasLZRVOP4uh3pVGo/AgZSk6qdYgFED/VAikCm
TT4BEFV3e323ZtGL+jNrc1jQfP6oFAWE/qH8BTvGdsUKZ/RxjM0z4/rgvz0vQfWL
icj9I+GFYmSYXMktJWuC+e7J6B7rKdegkOJEZotMjYyLq5sKMzUqFarKVtJRbagJ
B23Dmlh7su7U3hUWI22EvBVw3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCjLYG8g
rWEDe5zPFPkx/v6TLysuMB8GA1UdIwQYMBaAFL1IuvoyrS6TuInPPjhprANKFyMS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVCQy8zODgzNDE0ODc0
RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExwTzRpYzgtT0dtc0Ewb1hJ
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZVaTYtakt0THBPNGljOC1PR21zQTBvWEl4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODFFQkMvMzg4MzQxNDg3NEQ2MTFFQkJDQkRGQTczQzRGOUFFMDIvNjI1ODI3RkM3
NEQ4MTFFQjk5NTY5Mjc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5XKMA0GCSqGSIb3DQEBCwUAA4IBAQCdNDAhKFdCa6WVeAD3M0Kk
QSpMoardDhIhtjWPNyo45uoyIrxvsACG9uQlUND4qDvl9PkZEQN3tClM3Chwtuqi
D3GolQwZBL82s265LOR1dEcBhV8j907cubnVaE+16YemE0aDTaLItXKOA32qrT2L
zi8yvwId2WG8G/0AoJBsXQCy08ve53aS9cZDIhEbEIp+QqmJ9xih90T8nFHNVtwl
Sh8xZ7R/mpgtOMnohQtyhrwtPas3Sfl0lm+UhOTI208MgfWo3c2qeCqsmZmx/T2M
nTQ777Nb+RgTMHP4fP07i3y45RgWpBr+zIIchMz621js4qa9/GDoVk09cL/QmK4d
-----END CERTIFICATE-----
Generated at Fri Sep 18 23:00:00 2026 by rpki-client