Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/6B62D92248D511EEBE05CC7FC4F9AE02.roa
File:                     6B62D92248D511EEBE05CC7FC4F9AE02.roa (raw, json)
Hash identifier:          AMcI9xgYxHxdQu4g+tQ95lHKxwxXG5Ho2A2KTEJlMfs=
Subject key identifier:   EA:E2:88:14:C3:E4:BD:B0:5D:83:AD:33:A8:34:EA:36:66:B1:AE:9F
Certificate issuer:       /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Certificate serial:       01DA
Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/6B62D92248D511EEBE05CC7FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:19:21 +0000
ROA not before:           Wed 17 Sep 2025 04:11:31 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     211895
IP address blocks:        103.42.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl
                          rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 02:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
        Validity
            Not Before: Sep 17 04:11:31 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a412a9-c2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:b2:1f:91:d4:bf:4a:9f:0b:d9:8f:cb:e6:
                    be:da:50:82:72:fd:d0:33:98:0f:f7:76:8b:d9:df:
                    a1:14:d0:f2:a2:46:a0:74:81:55:b6:e2:db:26:ef:
                    a3:2a:e1:47:d5:ce:c4:ca:90:4f:49:82:12:6b:c5:
                    23:0f:b4:40:4c:c1:b8:6b:bd:6f:4c:65:9c:03:76:
                    2f:82:bb:6d:95:7b:16:0f:ec:fe:5c:16:67:c9:4c:
                    ae:4b:fc:64:c8:02:ed:36:a1:43:73:c6:47:dc:54:
                    75:33:62:94:ef:d8:4b:ce:73:8b:b0:14:cd:6b:87:
                    2e:1f:f7:8d:86:9e:c7:e3:9d:54:9d:8c:0f:20:d5:
                    21:ba:21:51:59:b8:75:85:61:48:3e:ac:8f:b5:46:
                    31:69:64:5f:42:bc:21:6a:6e:bb:e5:22:45:82:11:
                    b1:37:64:49:b8:02:8d:96:9f:dd:11:96:7c:75:b3:
                    f2:c7:7b:9c:54:a7:a8:28:81:0a:cb:0b:d2:39:ec:
                    f7:04:97:ab:11:fd:24:b2:93:0f:49:92:c7:2b:b4:
                    4a:b0:b9:2d:c1:64:22:61:7a:2b:6f:f0:59:c4:fd:
                    44:47:93:87:d1:77:81:20:bf:fc:a4:76:31:c1:68:
                    1c:a5:46:42:bf:3e:bb:b0:0c:44:c0:33:d8:94:6b:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E2:88:14:C3:E4:BD:B0:5D:83:AD:33:A8:34:EA:36:66:B1:AE:9F
            X509v3 Authority Key Identifier:
                keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/6B62D92248D511EEBE05CC7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:c8:6c:22:08:6c:ab:65:b5:7d:5b:7e:5b:f7:bb:33:f3:
         2e:5e:be:98:c5:b9:25:7e:c5:99:42:99:24:e2:6d:b8:67:de:
         d1:f2:90:11:d4:25:f4:47:81:0b:61:f5:ae:26:4b:1d:f9:73:
         ea:61:4e:c6:33:b3:8a:69:0c:e3:d8:47:be:f0:62:df:33:59:
         b6:8a:1e:21:11:36:7b:b9:7a:fe:69:ee:27:ce:12:17:f7:e8:
         af:ed:b2:c5:3c:74:7a:38:b5:22:dc:1c:64:6d:3e:21:cc:7c:
         7b:17:8f:6d:50:a4:fb:e2:25:bc:b2:12:34:80:43:c6:da:71:
         34:2d:a8:63:a8:af:eb:37:b4:30:b7:64:12:1f:d8:dc:09:fc:
         11:c5:72:18:34:76:61:7e:f5:0e:44:0c:de:9c:45:3b:13:b0:
         2b:01:bf:b8:cb:e7:c0:88:91:aa:97:4e:b6:62:58:a2:04:fc:
         9f:d3:cd:0d:03:a3:88:19:d0:8d:8f:7f:0d:56:b6:4f:61:c4:
         27:9b:06:45:a0:f1:bb:8d:5f:51:b2:f9:c4:24:9b:20:58:80:
         4c:f7:b7:55:d5:39:6a:8a:10:82:3e:cb:a0:71:6d:79:c3:a3:
         3a:4e:7c:cc:29:39:f5:1c:67:09:50:93:91:66:15:65:88:3e:
         0b:c5:03:05
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZCQ0MxMTAvBgNVBAUTKEZENDVDQzU0MDNDNjRDRkIyMzBBQTdERUVEMTBCQzY4
MjI4RDc0NzMwHhcNMjUwOTE3MDQxMTMxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTJhOS1jMmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYmyH5HUv0qfC9mPy+a+2lCCcv3QM5gP93aL2d+hFNDyokagdIFVtuLbJu+j
KuFH1c7EypBPSYISa8UjD7RATMG4a71vTGWcA3YvgrttlXsWD+z+XBZnyUyuS/xk
yALtNqFDc8ZH3FR1M2KU79hLznOLsBTNa4cuH/eNhp7H451UnYwPINUhuiFRWbh1
hWFIPqyPtUYxaWRfQrwham675SJFghGxN2RJuAKNlp/dEZZ8dbPyx3ucVKeoKIEK
ywvSOez3BJerEf0kspMPSZLHK7RKsLktwWQiYXorb/BZxP1ER5OH0XeBIL/8pHYx
wWgcpUZCvz67sAxEwDPYlGstfwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOriiBTD
5L2wXYOtM6g06jZmsa6fMB8GA1UdIwQYMBaAFP1FzFQDxkz7Iwqn3u0QvGgijXRz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkJDQy85MDRFNTBGMDQ4
RDQxMUVFQjVENkExN0JDNEY5QUUwMi9fVVhNVkFQR1RQc2pDcWZlN1JDOGFDS05k
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19VWE1WQVBHVFBzakNxZmU3UkM4YUNLTmRITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODZCQ0MvOTA0RTUwRjA0OEQ0MTFFRUI1RDZBMTdCQzRGOUFFMDIvNkI2MkQ5MjI0
OEQ1MTFFRUJFMDVDQzdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZyrwMA0GCSqGSIb3DQEBCwUAA4IBAQCe4shsIghsq2W1fVt+W/e7
M/MuXr6YxbklfsWZQpkk4m24Z97R8pAR1CX0R4ELYfWuJksd+XPqYU7GM7OKaQzj
2Ee+8GLfM1m2ih4hETZ7uXr+ae4nzhIX9+iv7bLFPHR6OLUi3BxkbT4hzHx7F49t
UKT74iW8shI0gEPG2nE0LahjqK/rN7Qwt2QSH9jcCfwRxXIYNHZhfvUORAzenEU7
E7ArAb+4y+fAiJGql062YliiBPyf080NA6OIGdCNj38NVrZPYcQnmwZFoPG7jV9R
svnEJJsgWIBM97dV1TlqihCCPsugcW15w6M6TnzMKTn1HGcJUJORZhVliD4LxQMF
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:06:05 2026 by rpki-client