Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/9E54710E16D511F09EF28A4EC4F9AE02.roa
File:                     9E54710E16D511F09EF28A4EC4F9AE02.roa (raw, json)
Hash identifier:          Y5OchRYZWCfXmYyEmnL2P8kc7yv28yWNLEvFTKE+MGg=
Subject key identifier:   C5:30:97:65:D5:3F:1B:8F:2E:12:01:09:D0:9D:D6:99:9D:94:2A:EA
Certificate issuer:       /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Certificate serial:       01E4
Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/9E54710E16D511F09EF28A4EC4F9AE02.roa
Signing time:             Fri 17 Jul 2026 05:31:13 +0000
ROA not before:           Fri 17 Jul 2026 05:31:13 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     48266
IP address blocks:        103.190.232.0/24 maxlen: 24
                          2400:9320::/48 maxlen: 48
                          2400:9320:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
                          rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 05:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
        Validity
            Not Before: Jul 17 05:31:13 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a59be21-0143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:e1:bd:96:1a:2e:7a:d5:75:bb:be:88:d4:
                    48:cc:68:51:a9:46:2e:42:a3:ba:fb:71:08:b9:ed:
                    a0:fb:77:9e:f4:62:13:84:c1:59:af:39:15:3f:65:
                    7b:4a:b7:6c:04:e9:24:2a:85:3f:93:ac:20:e9:27:
                    cc:97:7e:5f:3f:26:e4:51:f4:b1:e9:a6:18:8b:93:
                    8f:d2:71:b1:0c:0c:b1:77:15:dc:4b:7f:75:ca:cb:
                    f5:d2:1c:5f:6e:64:bc:17:f5:95:b4:9a:cb:ea:70:
                    68:61:52:b0:00:44:a6:40:88:c7:43:0e:30:d0:f4:
                    b4:fd:f9:28:0b:2c:09:ee:9f:52:81:a6:5e:3b:6a:
                    48:fb:9d:32:84:69:09:52:e0:36:e8:0b:bf:bb:a5:
                    44:56:85:e1:69:5f:4a:68:4a:51:2d:60:0d:16:5f:
                    34:65:72:7e:4f:ff:f0:22:ad:14:96:27:cc:19:08:
                    4e:af:00:ec:c6:3f:88:da:63:1a:cf:ee:4f:82:0f:
                    fa:14:da:c7:f9:4a:27:1d:4f:e4:f9:3f:97:76:fc:
                    3c:03:3d:90:4c:a5:15:c4:25:45:3d:10:0e:6c:52:
                    0f:b8:e5:5f:30:ff:19:8c:d8:40:62:e5:d7:45:b5:
                    5f:41:8d:94:a4:a3:7d:bc:74:28:15:3e:be:22:d1:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:30:97:65:D5:3F:1B:8F:2E:12:01:09:D0:9D:D6:99:9D:94:2A:EA
            X509v3 Authority Key Identifier:
                keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/9E54710E16D511F09EF28A4EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.232.0/24
                IPv6:
                  2400:9320::/48
                  2400:9320:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:68:2e:45:f0:6d:a8:b1:1d:a3:1f:d6:0d:b5:ab:0e:80:
         9c:bd:09:16:28:54:a2:49:ae:f7:62:3a:30:18:52:91:1e:4f:
         19:1b:f1:49:5f:9b:f1:65:9d:02:12:d3:6c:ba:81:b8:45:8b:
         c7:26:a0:fc:f8:42:fb:f5:19:8a:14:3c:1d:e5:ce:62:0f:67:
         df:65:e8:9b:9e:59:af:dc:03:19:e8:9e:58:88:a5:3b:48:d8:
         11:87:6a:60:8b:2b:b4:8e:f5:fd:6a:56:b3:c8:b1:c3:4a:73:
         eb:18:7d:ca:4d:dc:4a:d5:28:4f:e9:6e:a8:87:9b:ea:a6:85:
         b0:41:88:98:23:e1:15:4f:b2:ac:d0:c0:cb:80:63:a5:0e:4f:
         55:3e:c3:dc:97:6d:16:d7:34:c3:0b:7a:09:23:b3:db:42:70:
         86:db:27:9f:f3:51:a5:4a:9c:dc:74:d9:2f:f2:be:e3:9f:79:
         33:2d:d7:ff:1d:3e:19:d3:a5:75:5f:22:26:76:4b:c6:f3:2b:
         19:40:8b:25:63:38:e5:fa:d8:bd:2e:8e:fa:1a:2e:a2:8b:8a:
         c0:cb:ba:9c:68:80:95:e8:17:e1:e4:10:f6:3a:5a:b4:dc:af:
         f4:b4:68:bf:e1:da:00:cb:e7:90:3f:2e:66:0e:0a:de:4b:05:
         f9:31:83:27
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF
NUQwNkE0NEIwHhcNMjYwNzE3MDUzMTEzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU5YmUyMS0wMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz5bhvZYaLnrVdbu+iNRIzGhRqUYuQqO6+3EIue2g+3ee9GIThMFZrzkVP2V7
SrdsBOkkKoU/k6wg6SfMl35fPybkUfSx6aYYi5OP0nGxDAyxdxXcS391ysv10hxf
bmS8F/WVtJrL6nBoYVKwAESmQIjHQw4w0PS0/fkoCywJ7p9SgaZeO2pI+50yhGkJ
UuA26Au/u6VEVoXhaV9KaEpRLWANFl80ZXJ+T//wIq0UlifMGQhOrwDsxj+I2mMa
z+5Pgg/6FNrH+UonHU/k+T+Xdvw8Az2QTKUVxCVFPRAObFIPuOVfMP8ZjNhAYuXX
RbVfQY2UpKN9vHQoFT6+ItHmEQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFMUwl2XV
PxuPLhIBCdCd1pmdlCrqMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC
NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUY5QTgvQjkyMzA2RkVFQjZBMTFFRTlDMDNCNzExQzRGOUFFMDIvOUU1NDcxMEUx
NkQ1MTFGMDlFRjI4QTRFQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM
BAIAATAGAwQAZ77oMBgEAgACMBIDBwAkAJMgAAADBwAkAJMgAAIwDQYJKoZIhvcN
AQELBQADggEBAIzZaC5F8G2osR2jH9YNtasOgJy9CRYoVKJJrvdiOjAYUpEeTxkb
8Ulfm/FlnQIS02y6gbhFi8cmoPz4Qvv1GYoUPB3lzmIPZ99l6JueWa/cAxnonliI
pTtI2BGHamCLK7SO9f1qVrPIscNKc+sYfcpN3ErVKE/pbqiHm+qmhbBBiJgj4RVP
sqzQwMuAY6UOT1U+w9yXbRbXNMMLegkjs9tCcIbbJ5/zUaVKnNx02S/yvuOfeTMt
1/8dPhnTpXVfIiZ2S8bzKxlAiyVjOOX62L0ujvoaLqKLisDLupxogJXoF+HkEPY6
WrTcr/S0aL/h2gDL55A/LmYOCt5LBfkxgyc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:17 2026 by rpki-client