Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/A29A7DF20E2011EB81D90E2EC4F9AE02.roa
File:                     A29A7DF20E2011EB81D90E2EC4F9AE02.roa (raw, json)
Hash identifier:          edMpAdsKCKk/U5YKtWRInEEpB1MnGnib+hFAYPoQeoE=
Subject key identifier:   61:1F:B6:18:E5:3A:1D:30:48:8B:A3:41:8C:22:DB:40:6B:BA:FC:67
Certificate issuer:       /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
Certificate serial:       08C7
Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/A29A7DF20E2011EB81D90E2EC4F9AE02.roa
Signing time:             Sun 31 May 2026 21:24:38 +0000
ROA not before:           Sun 31 May 2026 21:24:38 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     139195
IP address blocks:        103.139.156.0/24 maxlen: 24
                          103.139.157.0/24 maxlen: 24
                          103.139.158.0/24 maxlen: 24
                          103.139.159.0/24 maxlen: 24
                          2404:e740::/32 maxlen: 32
                          2404:e740::/48 maxlen: 48
                          2404:e740:1::/48 maxlen: 48
                          2404:e740:2::/48 maxlen: 48
                          2404:e740:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl
                          rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2247 (0x8c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
        Validity
            Not Before: May 31 21:24:38 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1ca716-e3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:c8:2b:76:23:79:0b:19:0f:ee:52:86:3e:
                    9f:91:52:18:78:bf:61:e1:5e:47:39:33:b6:ea:24:
                    c8:3b:f5:d4:02:85:f5:2a:0f:27:b6:1a:e5:b7:60:
                    11:e8:30:cc:36:78:ac:d4:5d:34:6d:cf:9a:a2:f6:
                    11:77:73:45:b6:fc:e4:95:df:00:cb:f0:bf:3f:94:
                    db:d8:d2:52:c9:be:45:87:5b:11:0a:17:67:c6:b9:
                    d7:f4:77:df:d6:23:97:48:17:c7:18:f7:f7:cd:a2:
                    47:f1:be:2d:07:06:63:56:89:58:19:4c:3f:92:06:
                    d1:77:2b:56:40:71:de:b6:c7:2d:91:63:13:7e:98:
                    de:28:b1:f1:00:03:41:13:ef:71:97:03:5f:e9:07:
                    51:b3:99:f1:0f:48:8e:55:cd:5e:b8:e2:d6:69:49:
                    c3:82:29:b0:d2:cd:d8:57:77:c9:b7:37:f9:cd:d1:
                    0d:13:34:0f:7a:0c:f1:63:c9:d9:75:23:95:10:35:
                    7a:f3:e6:47:0f:c7:50:c6:34:99:77:df:01:22:c5:
                    cc:48:39:66:a7:ae:86:ea:96:8f:9f:97:1b:dc:00:
                    16:71:d1:03:06:cf:50:e1:87:f0:fa:4c:ac:b4:47:
                    ec:1d:61:75:8f:5e:85:76:b7:b7:8c:1d:d1:c2:4e:
                    32:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1F:B6:18:E5:3A:1D:30:48:8B:A3:41:8C:22:DB:40:6B:BA:FC:67
            X509v3 Authority Key Identifier:
                keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/A29A7DF20E2011EB81D90E2EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.156.0/22
                IPv6:
                  2404:e740::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:78:61:d3:bc:34:ee:6c:93:03:33:af:4e:73:95:b1:b8:10:
         88:af:11:12:cd:0b:79:0a:78:c1:7d:ca:3d:93:9a:b7:7e:3e:
         5f:eb:7b:c9:de:6d:ea:d3:b5:4b:46:02:f8:94:81:de:3a:b2:
         50:ec:32:0e:d4:d2:e6:15:e1:0d:51:40:74:de:12:aa:af:9a:
         65:7b:c4:fa:bb:b0:f3:3a:78:1d:dc:ac:62:a9:76:b8:fa:74:
         91:40:79:3f:e6:ed:9f:f4:c6:d3:71:b5:94:f2:42:d4:15:1b:
         39:20:c4:d9:aa:7d:ac:60:03:ba:db:85:ea:05:ae:83:f8:d2:
         f8:08:70:8b:59:bf:40:31:02:e1:91:2f:26:7e:e4:55:f7:90:
         0e:26:80:c1:a4:6b:91:c6:e1:06:7f:6f:35:c8:f9:be:c3:5e:
         9b:2b:ba:2e:74:13:ff:94:f0:2f:95:bb:e7:8e:1f:95:e1:ef:
         76:d1:89:0a:71:bb:b9:2e:a7:e8:dd:ac:1b:83:c2:9a:b9:54:
         81:a2:e3:f5:73:41:c6:65:9e:ea:11:75:06:c4:8a:b7:a6:57:
         47:7e:e8:59:90:75:6e:2d:d4:ab:12:89:d9:48:45:8b:2f:81:
         4e:31:82:ac:9f:4b:fb:f0:df:4b:5a:0f:7e:94:84:58:24:9b:
         9f:64:22:c9
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF
NTg0QUIzNjkwHhcNMjYwNTMxMjEyNDM4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjYTcxNi1lM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqATIK3YjeQsZD+5Shj6fkVIYeL9h4V5HOTO26iTIO/XUAoX1Kg8nthrlt2AR
6DDMNnis1F00bc+aovYRd3NFtvzkld8Ay/C/P5Tb2NJSyb5Fh1sRChdnxrnX9Hff
1iOXSBfHGPf3zaJH8b4tBwZjVolYGUw/kgbRdytWQHHetsctkWMTfpjeKLHxAANB
E+9xlwNf6QdRs5nxD0iOVc1euOLWaUnDgimw0s3YV3fJtzf5zdENEzQPegzxY8nZ
dSOVEDV68+ZHD8dQxjSZd98BIsXMSDlmp66G6paPn5cb3AAWcdEDBs9Q4Yfw+kys
tEfsHWF1j16Fdre3jB3Rwk4yFQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGEfthjl
Oh0wSIujQYwi20BruvxnMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2
RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJFRTkvMzI0ODQxRjRFNkZFMTFFQTgzOEVBMTQ4QzRGOUFFMDIvQTI5QTdERjIw
RTIwMTFFQjgxRDkwRTJFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ4ucMA0EAgACMAcDBQAkBOdAMA0GCSqGSIb3DQEBCwUAA4IBAQB9
eGHTvDTubJMDM69Oc5WxuBCIrxESzQt5CnjBfco9k5q3fj5f63vJ3m3q07VLRgL4
lIHeOrJQ7DIO1NLmFeENUUB03hKqr5ple8T6u7DzOngd3KxiqXa4+nSRQHk/5u2f
9MbTcbWU8kLUFRs5IMTZqn2sYAO624XqBa6D+NL4CHCLWb9AMQLhkS8mfuRV95AO
JoDBpGuRxuEGf281yPm+w16bK7oudBP/lPAvlbvnjh+V4e920YkKcbu5Lqfo3awb
g8KauVSBouP1c0HGZZ7qEXUGxIq3pldHfuhZkHVuLdSrEonZSEWLL4FOMYKsn0v7
8N9LWg9+lIRYJJufZCLJ
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:09:28 2026 by rpki-client