Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7D281FE0CAF911E9912CF92FC4F9AE02.roa
File:                     7D281FE0CAF911E9912CF92FC4F9AE02.roa (raw, json)
Hash identifier:          3Fgf6UR8QBPXbBrQ1CB+DxYJic1gNiveRvCM1Bw9Fck=
Subject key identifier:   A6:91:FB:C6:FC:DE:BF:AB:47:2C:FE:19:FB:9A:AB:79:13:E7:4C:3C
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3B89
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7D281FE0CAF911E9912CF92FC4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:23:19 +0000
ROA not before:           Thu 20 Aug 2026 16:23:19 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136841
IP address blocks:        103.100.27.0/24 maxlen: 24
                          103.100.172.0/24 maxlen: 24
                          103.100.173.0/24 maxlen: 24
                          103.100.174.0/24 maxlen: 24
                          103.100.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15241 (0x3b89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:23:19 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a8729f7-b68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:8e:cc:2e:65:57:e4:ea:c3:a2:0b:2a:ab:
                    cc:40:4a:93:6c:b4:2c:2e:a8:90:70:ed:7c:e2:7d:
                    8c:be:cb:87:39:69:1b:18:27:21:c9:92:e2:11:cb:
                    36:dc:51:d0:45:c1:ee:42:c9:26:93:af:98:53:39:
                    2c:f2:7c:56:e3:3f:f1:e8:08:6f:9b:56:c5:44:c7:
                    6b:7a:1d:a8:a9:ea:eb:9e:a3:68:00:45:f0:49:2b:
                    83:3d:bf:1f:fd:d4:cd:f9:2c:31:03:f8:71:d1:03:
                    86:68:3e:de:a5:3e:96:0c:3d:c1:e7:5d:61:14:fa:
                    97:ea:ad:ae:9b:8e:4d:6d:b0:a2:ff:b3:2e:ed:4b:
                    8e:e5:0e:03:38:1d:d3:d7:e5:44:a1:fd:7c:05:23:
                    1c:b0:2a:6c:6b:07:0a:61:b5:3d:fe:92:ba:e1:5a:
                    a9:a6:c1:5c:ed:f3:2a:36:f9:45:ec:e8:68:98:69:
                    6f:1d:e3:82:4c:0f:84:f0:df:f7:3a:d8:87:13:58:
                    75:98:03:63:94:7b:f5:95:a7:f9:5f:50:66:25:c4:
                    92:40:b7:5e:c1:86:61:41:4f:40:65:ff:12:98:20:
                    4c:42:9b:39:8e:1b:db:06:9e:02:46:b8:69:51:ee:
                    eb:86:51:42:83:a8:e7:4b:d4:bd:d4:18:d0:be:a9:
                    55:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:91:FB:C6:FC:DE:BF:AB:47:2C:FE:19:FB:9A:AB:79:13:E7:4C:3C
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7D281FE0CAF911E9912CF92FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.27.0/24
                  103.100.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:60:d6:ce:85:ea:92:29:48:ae:83:2f:2a:a1:76:93:1c:13:
         50:49:e9:ec:44:01:c6:40:6f:03:a2:52:9c:04:b2:3e:e6:76:
         3f:82:a0:72:f1:98:93:44:1e:c2:de:8c:1b:52:36:46:6e:80:
         8c:18:46:57:45:4d:fe:86:5b:d3:12:13:f3:2d:1d:22:b3:bb:
         f4:7e:34:4b:a4:c9:7e:44:5e:c7:97:fb:a1:ec:b8:c7:4b:b8:
         ab:25:18:b3:41:e4:03:5c:69:e6:73:78:1a:f2:f9:8b:a0:47:
         c4:4e:d9:5b:4c:7a:7b:0f:cd:9c:7a:40:0e:5b:1b:ee:3d:74:
         64:80:1c:6f:f7:a9:b8:01:d6:d3:d8:83:75:f0:ff:46:54:e2:
         df:0e:4c:f8:2f:8c:a8:95:e2:31:f8:05:31:13:46:e7:1a:e3:
         bf:b9:1e:af:61:9a:ae:84:5d:4f:52:0c:87:92:e8:aa:49:80:
         f9:c5:aa:f1:3a:c7:91:06:9a:ff:e9:5c:f4:a7:ff:8a:eb:e1:
         38:30:0e:d0:3b:fa:69:3f:39:29:fe:1a:6c:a1:ff:38:95:18:
         d8:e2:0a:4d:b8:15:52:78:ca:22:7a:72:52:e3:52:d9:57:bd:
         83:ad:5e:45:67:64:e0:2d:71:74:21:5a:40:ff:6b:f9:b4:5b:
         ea:3e:6b:2c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICO4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwODIwMTYyMzE5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3MjlmNy1iNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyiqOzC5lV+Tqw6ILKqvMQEqTbLQsLqiQcO184n2MvsuHOWkbGCchyZLiEcs2
3FHQRcHuQskmk6+YUzks8nxW4z/x6Ahvm1bFRMdreh2oqerrnqNoAEXwSSuDPb8f
/dTN+SwxA/hx0QOGaD7epT6WDD3B511hFPqX6q2um45NbbCi/7Mu7UuO5Q4DOB3T
1+VEof18BSMcsCpsawcKYbU9/pK64VqppsFc7fMqNvlF7OhomGlvHeOCTA+E8N/3
OtiHE1h1mANjlHv1laf5X1BmJcSSQLdewYZhQU9AZf8SmCBMQps5jhvbBp4CRrhp
Ue7rhlFCg6jnS9S91BjQvqlVdQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKaR+8b8
3r+rRyz+Gfuaq3kT50w8MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvN0QyODFGRTBD
QUY5MTFFOTkxMkNGOTJGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ2QbAwQCZ2SsMA0GCSqGSIb3DQEBCwUAA4IBAQB4YNbOheqSKUiu
gy8qoXaTHBNQSensRAHGQG8DolKcBLI+5nY/gqBy8ZiTRB7C3owbUjZGboCMGEZX
RU3+hlvTEhPzLR0is7v0fjRLpMl+RF7Hl/uh7LjHS7irJRizQeQDXGnmc3ga8vmL
oEfETtlbTHp7D82cekAOWxvuPXRkgBxv96m4AdbT2IN18P9GVOLfDkz4L4yoleIx
+AUxE0bnGuO/uR6vYZquhF1PUgyHkuiqSYD5xarxOseRBpr/6Vz0p/+K6+E4MA7Q
O/ppPzkp/hpsof84lRjY4gpNuBVSeMoienJS41LZV72DrV5FZ2TgLXF0IVpA/2v5
tFvqPmss
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:41:39 2026 by rpki-client