Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/C9D1E34E3E6511F18329E1A9CD833773.roa
File:                     C9D1E34E3E6511F18329E1A9CD833773.roa (raw, json)
Hash identifier:          fxREVBfLQ0OUrc4Pzc878YVu0ctHMKvERrQEBHifNvg=
Subject key identifier:   AD:EE:0F:83:95:E4:B4:E8:D2:E1:3D:F0:3B:F5:CE:70:47:4F:82:0D
Certificate issuer:       /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
Certificate serial:       023E
Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/C9D1E34E3E6511F18329E1A9CD833773.roa
Signing time:             Wed 22 Apr 2026 16:10:32 +0000
ROA not before:           Wed 22 Apr 2026 16:10:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149765
IP address blocks:        103.122.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl
                          rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 02:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF
        Validity
            Not Before: Apr 22 16:10:32 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69e8f2f8-712e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:4d:c5:a5:ae:f0:5f:6f:4c:ae:bd:51:4c:
                    7a:58:58:40:fe:c7:a7:f7:5e:a5:03:c4:11:21:fc:
                    d4:d2:31:ba:44:e8:31:6a:fa:17:87:5e:9d:24:4b:
                    53:1b:1a:9b:de:46:19:50:41:69:63:cc:c9:9e:80:
                    3b:83:d3:43:dd:d3:b4:be:a2:c7:39:46:44:23:2d:
                    12:0d:29:68:f5:54:f7:6e:5e:18:28:ff:94:d8:ee:
                    23:b2:e3:41:49:af:10:1b:95:12:04:2e:87:5b:61:
                    b7:21:2b:57:6b:05:56:a3:69:4e:6c:bc:0c:3e:ef:
                    c6:e9:15:fe:7f:1b:7f:a0:7f:6e:16:36:02:9f:b1:
                    9f:14:76:9f:d0:ae:8d:d7:ba:9a:23:0e:9d:12:1c:
                    47:5f:83:15:e8:ee:e1:98:16:ba:03:bb:6d:b0:81:
                    ab:29:61:e3:1e:ee:67:db:9d:cb:29:d5:76:9c:d4:
                    d6:93:3b:67:7e:49:4f:1b:5e:53:79:85:39:79:52:
                    dc:6b:bf:9f:f8:45:19:29:23:a7:31:09:97:67:97:
                    d3:a7:02:f5:44:a0:c3:2b:62:26:f4:69:5b:5f:27:
                    45:09:8f:89:24:cf:21:60:6a:f7:63:49:32:ea:0d:
                    04:38:b4:1e:37:0d:67:99:7c:0b:22:8c:0f:61:9f:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EE:0F:83:95:E4:B4:E8:D2:E1:3D:F0:3B:F5:CE:70:47:4F:82:0D
            X509v3 Authority Key Identifier:
                keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/C9D1E34E3E6511F18329E1A9CD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:7d:82:93:54:b6:96:d5:c6:22:97:a1:64:f7:cc:a9:d2:92:
         a2:c6:81:aa:09:00:c1:3a:61:1a:5f:6d:d9:b6:e3:de:a7:40:
         d7:19:a5:76:f5:f9:43:e8:7e:73:38:59:68:e3:08:12:d2:90:
         f0:b8:f1:e9:0c:0e:20:e7:f2:57:26:5b:f8:56:b3:fa:f7:a9:
         65:c7:00:05:ce:62:87:e1:f1:1a:3a:ab:6f:d9:ad:fc:9c:5b:
         ac:c9:ca:15:69:65:a8:ca:f7:fb:2e:11:d5:9e:f5:1a:35:58:
         e8:e1:c9:d5:8f:08:a6:cf:f9:b2:41:f7:c7:ff:d8:c5:d8:34:
         35:39:98:2f:48:59:2e:13:4b:4e:f0:a7:e0:b0:30:d3:75:64:
         41:45:b4:e6:94:02:4e:52:fc:98:d1:71:ba:95:72:dc:09:88:
         54:ff:14:4e:d5:b1:14:55:f8:fa:3d:e0:f2:1f:32:d1:a9:5b:
         b4:4c:48:d8:7c:4c:ee:b8:b8:8f:bb:7a:bd:a1:28:e9:a7:c5:
         68:a9:6b:59:02:e4:bf:36:18:fc:ae:08:a1:8b:52:91:78:9c:
         b9:94:2f:3b:86:4f:1e:90:ac:0d:c4:92:ab:d9:08:46:60:9a:
         9d:5f:5f:39:77:87:59:02:90:16:c9:98:c0:7e:01:46:fe:51:
         22:3d:7a:d9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI2NzcxMTAvBgNVBAUTKDBBOTUzODUyN0RBNTMyRkUzMUQ3NTBEMTM2OTZFNUNF
QUYyQTlCQ0YwHhcNMjYwNDIyMTYxMDMyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWU4ZjJmOC03MTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1RVNxaWu8F9vTK69UUx6WFhA/sen916lA8QRIfzU0jG6ROgxavoXh16dJEtT
Gxqb3kYZUEFpY8zJnoA7g9ND3dO0vqLHOUZEIy0SDSlo9VT3bl4YKP+U2O4jsuNB
Sa8QG5USBC6HW2G3IStXawVWo2lObLwMPu/G6RX+fxt/oH9uFjYCn7GfFHaf0K6N
17qaIw6dEhxHX4MV6O7hmBa6A7ttsIGrKWHjHu5n253LKdV2nNTWkztnfklPG15T
eYU5eVLca7+f+EUZKSOnMQmXZ5fTpwL1RKDDK2Im9GlbXydFCY+JJM8hYGr3Y0ky
6g0EOLQeNw1nmXwLIowPYZ9iTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK3uD4OV
5LTo0uE98Dv1znBHT4INMB8GA1UdIwQYMBaAFAqVOFJ9pTL+MddQ0TaW5c6vKpvP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY3Ny82NDU3REZEOEQ4
MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12NHgxMURSTnBibHpxOHFt
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NwVTRVbjJsTXY0eDExRFJOcGJsenE4cW04OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzI2NzcvNjQ1N0RGRDhEODM3MTFFRDhDMDk2NjI5QzRGOUFFMDIvQzlEMUUzNEUz
RTY1MTFGMTgzMjlFMUE5Q0Q4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3qPMA0GCSqGSIb3DQEBCwUAA4IBAQCAfYKTVLaW1cYil6Fk98yp
0pKixoGqCQDBOmEaX23ZtuPep0DXGaV29flD6H5zOFlo4wgS0pDwuPHpDA4g5/JX
Jlv4VrP696llxwAFzmKH4fEaOqtv2a38nFusycoVaWWoyvf7LhHVnvUaNVjo4cnV
jwimz/myQffH/9jF2DQ1OZgvSFkuE0tO8KfgsDDTdWRBRbTmlAJOUvyY0XG6lXLc
CYhU/xRO1bEUVfj6PeDyHzLRqVu0TEjYfEzuuLiPu3q9oSjpp8VoqWtZAuS/Nhj8
rgihi1KReJy5lC87hk8ekKwNxJKr2QhGYJqdX185d4dZApAWyZjAfgFG/lEiPXrZ
-----END CERTIFICATE-----
Generated at Tue Apr 28 11:33:44 2026 by rpki-client