Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/192C64F2252311F18B88524DC4833773.roa
File:                     192C64F2252311F18B88524DC4833773.roa (raw, json)
Hash identifier:          7vrnXHB3qUyKbQqkedi+hisuqsIblcG1yBKlH+P3Y3U=
Subject key identifier:   29:FC:6E:A2:02:C3:84:81:22:38:8F:DB:B0:AC:94:04:5F:3D:D9:38
Certificate issuer:       /CN=A9189D79/serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
Certificate serial:       2A
Authority key identifier: E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/192C64F2252311F18B88524DC4833773.roa
Signing time:             Wed 13 May 2026 09:42:28 +0000
ROA not before:           Wed 13 May 2026 09:42:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133139
IP address blocks:        103.230.88.0/24 maxlen: 24
                          103.230.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl
                          rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189D79, serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7
        Validity
            Not Before: May 13 09:42:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a044783-4767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:4b:50:50:a8:7b:91:f0:d1:70:d9:41:4f:
                    b8:33:87:93:dc:8c:3a:d0:ee:7a:b0:f2:71:83:e2:
                    44:26:d7:55:1f:e5:29:79:19:a9:4d:67:e2:1f:c8:
                    64:0a:2a:97:e7:b0:90:a2:48:26:a2:6c:03:fb:0c:
                    e8:fe:81:85:f3:17:11:99:f4:41:ae:e7:88:73:38:
                    7e:a5:70:55:16:86:a1:45:82:ed:cb:e5:8e:fe:6e:
                    65:64:ad:60:ce:4e:7b:f7:6c:4b:f4:46:40:bf:21:
                    2b:94:46:03:93:7d:19:4d:2b:17:cd:95:13:ed:94:
                    fc:99:fa:4a:6e:46:7c:9f:db:a7:aa:04:f8:13:4a:
                    cd:c4:91:55:ea:af:e4:92:61:f6:ae:90:7a:69:13:
                    1e:1a:33:85:aa:7c:13:c6:ba:39:5b:cf:67:7a:54:
                    7c:f3:dd:3b:67:c8:11:2a:0e:3c:aa:76:92:46:d8:
                    ad:41:31:c5:15:df:58:6a:8f:99:b4:2b:ee:a3:a1:
                    da:57:fa:95:d7:a0:5f:f8:da:19:a4:26:9c:6e:62:
                    96:00:8b:4e:4b:34:72:52:99:f1:c1:d9:4e:7f:9d:
                    94:00:f2:a0:e4:2c:e2:9a:0b:82:26:1e:e7:29:52:
                    4b:dd:31:ad:5a:93:f6:67:b8:c4:dc:07:df:f5:5b:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FC:6E:A2:02:C3:84:81:22:38:8F:DB:B0:AC:94:04:5F:3D:D9:38
            X509v3 Authority Key Identifier:
                keyid:E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/192C64F2252311F18B88524DC4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:88:0a:66:31:2e:01:13:d5:38:bc:c4:08:7d:33:29:4b:47:
         cc:03:05:21:85:33:36:e3:e2:8b:7f:74:1e:8d:1a:46:2e:ee:
         63:37:f5:be:d8:28:73:72:1c:0e:78:a2:9c:bc:de:a2:ef:b4:
         0c:a5:01:fa:e2:d7:8c:b6:ce:45:27:1f:e9:db:ae:b2:0e:d1:
         57:a0:ea:e2:c5:4b:d1:80:e8:e4:c4:25:e3:c7:27:23:33:6e:
         c5:fb:a2:82:8c:71:91:f3:c1:a2:cc:de:32:31:91:cb:bc:14:
         a2:5f:3c:7e:e0:5d:5d:a1:6f:13:d3:75:cb:2c:13:09:6c:a3:
         a0:2a:04:e2:15:77:03:f8:9e:e4:ee:f2:86:6f:cf:d4:f3:e1:
         ad:aa:12:63:73:eb:43:e5:2f:c0:18:51:cc:91:9b:d7:f1:1b:
         c1:45:8a:10:ea:b0:2e:96:e7:d4:67:05:d6:46:a4:79:c4:86:
         af:39:70:1b:08:d3:a5:ad:6e:da:5a:ce:b8:05:c0:f6:d5:a5:
         46:d6:a1:0d:7b:38:9e:61:7b:79:ca:e1:a6:a1:df:43:25:cb:
         e8:73:5a:b0:09:86:47:f6:33:12:d8:15:90:ad:0e:e0:90:b9:
         61:dd:ce:9c:33:48:7b:92:60:b5:7c:17:b8:99:98:03:e7:1c:
         81:5c:53:2f
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OUQ3OTExMC8GA1UEBRMoRTBFRTVGNUI0Q0NFNzJDMDJDQjFCMTY1REQ4RDZEMDNF
MTE4MTVDNzAeFw0yNjA1MTMwOTQyMjhaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMDQ0NzgzLTQ3NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8x0tQUKh7kfDRcNlBT7gzh5PcjDrQ7nqw8nGD4kQm11Uf5Sl5GalNZ+IfyGQK
KpfnsJCiSCaibAP7DOj+gYXzFxGZ9EGu54hzOH6lcFUWhqFFgu3L5Y7+bmVkrWDO
Tnv3bEv0RkC/ISuURgOTfRlNKxfNlRPtlPyZ+kpuRnyf26eqBPgTSs3EkVXqr+SS
YfaukHppEx4aM4WqfBPGujlbz2d6VHzz3TtnyBEqDjyqdpJG2K1BMcUV31hqj5m0
K+6jodpX+pXXoF/42hmkJpxuYpYAi05LNHJSmfHB2U5/nZQA8qDkLOKaC4ImHucp
UkvdMa1ak/ZnuMTcB9/1W503AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUKfxuogLD
hIEiOI/bsKyUBF892TgwHwYDVR0jBBgwFoAU4O5fW0zOcsAssbFl3Y1tA+EYFccw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDc5LzQzQzJBNjkyMjRE
QjExRjFCMUY1QkJBNUFDODMzNzczLzRPNWZXMHpPY3NBc3NiRmwzWTF0QS1FWUZj
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNE81Zlcwek9jc0Fzc2JGbDNZMXRBLUVZRmNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUQ3OS80M0MyQTY5MjI0REIxMUYxQjFGNUJCQTVBQzgzMzc3My8xOTJDNjRGMjI1
MjMxMUYxOEI4ODUyNERDNDgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFn5lgwDQYJKoZIhvcNAQELBQADggEBAGOICmYxLgET1Ti8xAh9MylL
R8wDBSGFMzbj4ot/dB6NGkYu7mM39b7YKHNyHA54opy83qLvtAylAfri14y2zkUn
H+nbrrIO0Veg6uLFS9GA6OTEJePHJyMzbsX7ooKMcZHzwaLM3jIxkcu8FKJfPH7g
XV2hbxPTdcssEwlso6AqBOIVdwP4nuTu8oZvz9Tz4a2qEmNz60PlL8AYUcyRm9fx
G8FFihDqsC6W59RnBdZGpHnEhq85cBsI06WtbtpazrgFwPbVpUbWoQ17OJ5he3nK
4aah30Mly+hzWrAJhkf2MxLYFZCtDuCQuWHdzpwzSHuSYLV8F7iZmAPnHIFcUy8=
-----END CERTIFICATE-----
Generated at Thu May 21 10:16:20 2026 by rpki-client