Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/9B26CED6A5CD11F19849D7873311F970.roa
File:                     9B26CED6A5CD11F19849D7873311F970.roa (raw, json)
Hash identifier:          uOeXNTY+ygflSEqIrkiBDcYliPel/CdnXhfU/RgbeP4=
Subject key identifier:   90:DE:31:CA:C1:CD:F2:17:0A:E1:EA:A8:E2:A2:D7:BD:C8:30:C5:51
Certificate issuer:       /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial:       35DD
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/9B26CED6A5CD11F19849D7873311F970.roa
Signing time:             Tue 01 Sep 2026 06:23:12 +0000
ROA not before:           Tue 01 Sep 2026 06:23:11 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     4637
IP address blocks:        101.0.16.0/24 maxlen: 24
                          101.0.17.0/24 maxlen: 24
                          101.0.18.0/24 maxlen: 24
                          101.0.19.0/24 maxlen: 24
                          103.46.205.0/24 maxlen: 24
                          103.46.206.0/24 maxlen: 24
                          103.46.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13789 (0x35dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
        Validity
            Not Before: Sep  1 06:23:11 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a966f4f-6d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:7c:f1:ea:29:f7:09:9a:95:08:5a:84:2c:
                    88:9a:fd:a6:bf:13:12:0f:c8:ec:21:4b:23:01:59:
                    6a:e4:e3:a7:0d:9e:05:b7:f5:76:6a:d3:70:20:41:
                    d9:52:f8:18:be:a4:56:31:72:4a:e9:92:48:57:8e:
                    5e:c5:70:14:20:cf:3b:97:cd:d5:9a:86:55:7d:6d:
                    6b:c0:3d:9e:95:84:77:f3:9f:1f:70:35:f0:ae:ca:
                    b3:28:f6:96:c6:5a:2f:80:55:81:62:2c:29:9b:1f:
                    b4:c1:ae:ef:34:8e:b7:f1:82:3c:c6:12:a9:d8:7c:
                    87:31:ae:75:f7:d1:1e:24:7c:67:b0:2f:3d:68:25:
                    26:40:40:0e:51:0b:58:d0:3d:ce:68:57:52:41:df:
                    82:4b:0f:aa:15:ee:11:f7:be:e3:31:f0:32:8f:33:
                    26:52:9c:1f:ad:96:3a:e0:7d:2c:58:56:e5:e1:3d:
                    d7:6f:64:ea:3d:86:29:ba:70:ab:7a:c3:e8:cb:d7:
                    c8:68:d5:61:f6:30:76:df:d5:0c:ba:22:74:c2:54:
                    5a:7d:1e:a8:3d:8c:27:67:4b:d0:e1:40:c2:92:0f:
                    dd:8d:56:8a:9c:0b:62:77:3d:75:b7:ac:03:9f:72:
                    d9:ae:bd:c5:fb:3e:02:ca:d4:35:a6:61:9b:16:c2:
                    f8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DE:31:CA:C1:CD:F2:17:0A:E1:EA:A8:E2:A2:D7:BD:C8:30:C5:51
            X509v3 Authority Key Identifier:
                keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/9B26CED6A5CD11F19849D7873311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.16.0/22
                  103.46.205.0-103.46.207.255

    Signature Algorithm: sha256WithRSAEncryption
         71:1c:7e:d9:01:92:72:ee:54:30:ad:63:3e:de:a8:42:4d:8f:
         b0:58:f6:9e:6d:a3:c3:41:1d:84:89:3d:11:b4:a6:55:d2:93:
         64:e1:c9:41:2f:87:21:7a:be:29:fd:6b:f3:b4:14:8f:8e:22:
         b0:29:17:73:86:0e:8a:76:33:a1:c4:06:7e:d2:2a:77:87:68:
         c8:99:e8:82:c1:e6:99:84:04:55:79:05:6d:f3:40:a0:e5:dd:
         69:8d:ab:a0:4f:79:1f:09:ee:0f:33:ce:c8:67:3c:cb:4b:c3:
         84:29:bf:e4:45:d6:90:21:88:23:39:77:45:ef:c5:49:1e:75:
         cd:d2:c0:21:f8:3d:e2:d0:f2:2e:4f:53:33:8d:5a:38:2a:6f:
         ca:15:37:0c:15:b2:e2:93:bd:8a:5a:f4:a1:f1:08:ad:10:e8:
         97:42:7d:a1:b7:64:7a:c6:c7:b0:29:a1:a0:1e:21:e7:0d:3f:
         7a:4a:1e:f5:52:88:0b:5a:0a:51:9e:a9:bb:57:ee:8f:28:a4:
         d8:4a:dc:13:a1:9c:4e:4b:3f:10:d6:d4:47:8f:a0:9d:83:6a:
         a1:5b:77:85:a4:64:c7:ea:bc:ce:0b:7b:f3:14:9c:85:64:2a:
         28:03:a6:02:c2:17:97:3b:ee:7f:d9:25:1e:30:de:ff:2a:08:
         a1:1b:34:59
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICNd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB
NUE4NTQ1MjEwHhcNMjYwOTAxMDYyMzExWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk2NmY0Zi02ZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv3l88eop9wmalQhahCyImv2mvxMSD8jsIUsjAVlq5OOnDZ4Ft/V2atNwIEHZ
UvgYvqRWMXJK6ZJIV45exXAUIM87l83VmoZVfW1rwD2elYR3858fcDXwrsqzKPaW
xlovgFWBYiwpmx+0wa7vNI638YI8xhKp2HyHMa5199EeJHxnsC89aCUmQEAOUQtY
0D3OaFdSQd+CSw+qFe4R977jMfAyjzMmUpwfrZY64H0sWFbl4T3Xb2TqPYYpunCr
esPoy9fIaNVh9jB239UMuiJ0wlRafR6oPYwnZ0vQ4UDCkg/djVaKnAtidz11t6wD
n3LZrr3F+z4CytQ1pmGbFsL4KwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFJDeMcrB
zfIXCuHqqOKi173IMMVRMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE
QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvOUIyNkNFRDZB
NUNEMTFGMTk4NDlENzg3MzMxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQCZQAQMAwDBABnLs0DBARnLsAwDQYJKoZIhvcNAQELBQADggEBAHEc
ftkBknLuVDCtYz7eqEJNj7BY9p5to8NBHYSJPRG0plXSk2ThyUEvhyF6vin9a/O0
FI+OIrApF3OGDop2M6HEBn7SKneHaMiZ6ILB5pmEBFV5BW3zQKDl3WmNq6BPeR8J
7g8zzshnPMtLw4Qpv+RF1pAhiCM5d0XvxUkedc3SwCH4PeLQ8i5PUzONWjgqb8oV
NwwVsuKTvYpa9KHxCK0Q6JdCfaG3ZHrGx7ApoaAeIecNP3pKHvVSiAtaClGeqbtX
7o8opNhK3BOhnE5LPxDW1EePoJ2DaqFbd4WkZMfqvM4Le/MUnIVkKigDpgLCF5c7
7n/ZJR4w3v8qCKEbNFk=
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:40 2026 by rpki-client