Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa
File:                     C01674A86BF011EA87B33D25C4F9AE02.roa (raw, json)
Hash identifier:          brgV9aJmNOwONrVV43STCn+H/BafcYN1QUNn18D97nU=
Subject key identifier:   E8:51:20:78:5F:8E:94:2A:A5:F6:CA:37:3E:49:20:19:3D:B1:F1:96
Certificate issuer:       /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Certificate serial:       0ACE
Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:47:29 +0000
ROA not before:           Fri 18 Jul 2025 20:00:53 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135590
IP address blocks:        103.95.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
                          rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2766 (0xace)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
        Validity
            Not Before: Jul 18 20:00:53 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a42751-1edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:92:82:62:7c:47:c2:84:9b:93:a2:2f:b5:c7:
                    fb:dc:b3:e3:84:4e:31:80:f5:f2:78:b6:2b:c2:d1:
                    95:04:0c:ce:72:c1:ac:f0:f0:1c:08:89:ee:43:16:
                    6a:7c:45:37:97:1d:10:63:37:b4:0f:7d:7d:3b:c6:
                    2e:8b:d5:12:88:6c:d9:1e:4f:a8:48:51:9a:23:dd:
                    4c:8e:9a:6e:aa:15:48:64:dd:f9:44:03:44:bf:bc:
                    29:11:8e:78:c4:5b:00:ca:91:c4:c0:72:d3:25:61:
                    e8:4b:a2:09:74:7c:2e:cc:64:8f:74:9c:1a:cf:6a:
                    06:90:0b:d7:16:39:5a:4f:65:db:29:0d:e5:d3:9a:
                    5d:d6:4a:d1:f6:d4:7d:32:a1:8b:47:53:e2:64:68:
                    92:d6:38:6e:58:06:42:b4:a1:2c:9d:f8:e0:61:b7:
                    0e:47:8f:a5:eb:73:b3:7e:29:13:04:9b:92:01:5f:
                    8a:fd:fb:26:e3:d7:fc:05:80:58:28:54:cd:a8:29:
                    6a:93:b4:df:6b:de:26:a3:99:dc:53:ac:fc:ef:6e:
                    d0:7c:18:81:49:22:ca:f8:ba:b1:d8:c4:12:f4:65:
                    5e:35:89:0b:ef:9d:36:08:59:2b:0e:38:0f:28:39:
                    71:42:17:59:e3:94:e3:cb:48:1f:13:ce:da:64:af:
                    0d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:51:20:78:5F:8E:94:2A:A5:F6:CA:37:3E:49:20:19:3D:B1:F1:96
            X509v3 Authority Key Identifier:
                keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:e4:64:d0:35:40:cc:05:7e:11:d5:92:5f:8c:b1:2d:8b:36:
         f8:73:e1:b8:6d:07:da:1f:77:25:40:1b:f9:16:71:ee:47:db:
         09:4b:1e:2f:1c:7a:fe:e2:42:7d:84:b2:e8:3c:5e:64:60:91:
         b6:46:ef:36:55:7e:0c:e8:a2:d8:82:f4:b3:e6:37:06:fb:6d:
         ee:3e:e8:db:a1:0e:b0:63:6f:5c:54:ee:58:ce:ac:7f:eb:c8:
         1c:8a:a7:f0:ec:2c:27:e5:d6:99:c2:73:5e:44:d2:de:50:2e:
         9b:98:24:88:9f:05:7d:d2:2c:33:47:ec:de:f0:ce:85:66:54:
         e8:f6:74:e6:13:cf:d6:3f:35:fd:14:f1:9e:7c:11:d4:b1:a9:
         30:42:d3:fa:1c:ce:38:f4:ed:da:83:18:e1:02:97:34:b2:53:
         b0:0d:87:db:51:41:4b:ef:17:cc:c7:f1:28:8f:1a:a5:92:62:
         65:00:b0:11:5c:8e:d5:f9:d9:41:7f:7f:11:9c:d5:b1:b7:0d:
         5b:1a:6e:d8:bd:33:41:5f:77:03:04:88:ad:22:10:89:68:24:
         20:ef:34:6a:02:97:91:4b:3d:7d:c0:3d:ef:87:4b:9d:30:e9:
         2e:b5:70:71:dd:65:1b:e0:60:96:07:7b:e0:23:31:74:e4:5f:
         4f:8c:a6:cb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBERUMxMTAvBgNVBAUTKEI4RDkzNTA2QzhBNzkxRDFGOUZGQTVCNjdDMzg4MTZE
REMwM0VFNkIwHhcNMjUwNzE4MjAwMDUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Mjc1MS0xZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiJKCYnxHwoSbk6Ivtcf73LPjhE4xgPXyeLYrwtGVBAzOcsGs8PAcCInuQxZq
fEU3lx0QYze0D319O8Yui9USiGzZHk+oSFGaI91MjppuqhVIZN35RANEv7wpEY54
xFsAypHEwHLTJWHoS6IJdHwuzGSPdJwaz2oGkAvXFjlaT2XbKQ3l05pd1krR9tR9
MqGLR1PiZGiS1jhuWAZCtKEsnfjgYbcOR4+l63OzfikTBJuSAV+K/fsm49f8BYBY
KFTNqClqk7Tfa94mo5ncU6z8727QfBiBSSLK+Lqx2MQS9GVeNYkL7502CFkrDjgP
KDlxQhdZ45Tjy0gfE87aZK8NowIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOhRIHhf
jpQqpfbKNz5JIBk9sfGWMB8GA1UdIwQYMBaAFLjZNQbIp5HR+f+ltnw4gW3cA+5r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMERFQy8xNzJEMEEyNDZC
RUYxMUVBQTI2QTVFMjJDNEY5QUUwMi91TmsxQnNpbmtkSDVfNlcyZkRpQmJkd0Q3
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VOazFCc2lua2RINV82VzJmRGlCYmR3RDdtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTBERUMvMTcyRDBBMjQ2QkVGMTFFQUEyNkE1RTIyQzRGOUFFMDIvQzAxNjc0QTg2
QkYwMTFFQTg3QjMzRDI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ1/QMA0GCSqGSIb3DQEBCwUAA4IBAQA25GTQNUDMBX4R1ZJfjLEt
izb4c+G4bQfaH3clQBv5FnHuR9sJSx4vHHr+4kJ9hLLoPF5kYJG2Ru82VX4M6KLY
gvSz5jcG+23uPujboQ6wY29cVO5Yzqx/68gciqfw7Cwn5daZwnNeRNLeUC6bmCSI
nwV90iwzR+ze8M6FZlTo9nTmE8/WPzX9FPGefBHUsakwQtP6HM449O3agxjhApc0
slOwDYfbUUFL7xfMx/EojxqlkmJlALARXI7V+dlBf38RnNWxtw1bGm7YvTNBX3cD
BIitIhCJaCQg7zRqApeRSz19wD3vh0udMOkutXBx3WUb4GCWB3vgIzF05F9PjKbL
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:29 2026 by rpki-client