Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A80715221A7711EAA20A077FC4F9AE02.roa
File:                     A80715221A7711EAA20A077FC4F9AE02.roa (raw, json)
Hash identifier:          AdTxHqZB78HC5nvRr+rubqCxl7v2U8bQB16ej3Sal5o=
Subject key identifier:   F9:55:73:6C:6D:82:E3:87:31:BC:2C:39:E4:FC:DA:CC:F1:95:63:8C
Certificate issuer:       /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Certificate serial:       0C92
Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A80715221A7711EAA20A077FC4F9AE02.roa
Signing time:             Tue 14 Apr 2026 19:23:06 +0000
ROA not before:           Tue 14 Apr 2026 19:23:06 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.85.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
                          rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3218 (0xc92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112B4C, serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
        Validity
            Not Before: Apr 14 19:23:06 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69de941a-8b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:d8:17:64:1f:6d:9b:08:f4:d6:a8:cf:35:
                    55:16:48:4a:75:b5:71:4b:58:02:47:7a:89:cb:e3:
                    9e:a0:f4:e6:e9:84:c7:42:f2:48:c0:c4:4b:e1:34:
                    90:a3:22:ec:f1:41:c1:2e:e7:c7:7a:6c:8c:04:73:
                    c7:64:e2:f0:41:8e:5c:9b:80:63:4e:38:ce:b9:93:
                    6f:9f:59:2a:10:f2:46:56:17:06:62:f0:79:af:2b:
                    19:25:52:1b:f8:70:16:81:dd:b6:2b:89:19:11:38:
                    0d:44:1a:b8:ce:cf:0c:49:ff:15:91:1c:fa:28:29:
                    26:98:b5:a7:11:58:f0:38:00:9e:f0:77:be:ef:2e:
                    79:81:de:3a:23:05:67:bf:55:af:13:29:e1:56:f3:
                    17:8f:fc:fa:af:41:63:6f:1d:88:99:77:87:e0:7e:
                    59:73:07:de:f3:60:97:d1:5d:5a:c8:e6:fa:61:e4:
                    20:bb:8d:4b:32:a5:ce:22:f9:da:c2:78:45:2a:62:
                    ce:09:51:3a:6e:8b:4e:36:ba:14:7c:ec:a2:6f:8c:
                    ee:ca:82:72:a1:fd:d9:e9:15:ee:2f:31:56:c1:c5:
                    02:dc:f0:ff:9f:63:a8:66:c3:ca:ca:32:6b:1b:c0:
                    83:af:8b:c5:d1:bd:61:5e:f1:88:b2:84:a6:ff:16:
                    5c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:55:73:6C:6D:82:E3:87:31:BC:2C:39:E4:FC:DA:CC:F1:95:63:8C
            X509v3 Authority Key Identifier:
                keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A80715221A7711EAA20A077FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ed:3d:92:43:6f:de:9b:70:0f:dc:6f:40:8c:4a:72:2f:9d:
         6e:d2:07:9a:98:93:96:16:09:8d:46:88:9d:66:83:ca:50:85:
         8f:2c:0d:ee:c4:08:f9:7f:9c:b2:05:39:01:72:28:70:03:19:
         af:05:43:fa:32:6e:ba:ab:f0:bb:69:6d:c3:ed:2c:5e:ab:1a:
         67:2e:20:c0:88:11:1b:e5:03:4c:e1:67:0e:43:26:87:f1:18:
         85:e4:ce:2b:2b:b4:3c:e0:f6:ce:ee:3a:22:18:19:80:c1:10:
         08:2a:67:68:d9:cd:ab:80:ea:da:59:5c:77:63:ed:94:a2:35:
         ca:39:74:2b:bb:11:99:45:76:1e:ac:60:0c:34:96:c5:28:83:
         6a:ca:96:e6:07:d1:57:f0:58:19:37:e2:cc:a7:04:4b:04:92:
         85:e3:ec:99:c6:e6:57:4a:fb:0c:ab:25:3e:c5:f3:4c:5a:b3:
         e1:33:89:69:ad:b3:c3:69:57:74:3a:2b:8b:12:2c:be:5b:31:
         17:19:70:13:35:a8:e3:5e:0d:7c:59:db:b4:ff:f0:96:20:55:
         06:c0:af:42:6b:f7:1a:87:01:73:cb:1f:1f:f3:b9:d8:f3:be:
         4c:7d:c5:36:64:d3:34:46:87:44:ed:9e:0d:55:df:6d:06:40:
         7e:09:3b:f5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJCNEMxMTAvBgNVBAUTKDEyMDA4REJBQjc4Q0IzMUYyOTk0RTE0ODRFQTNGMjQy
NzRCOUQxQTgwHhcNMjYwNDE0MTkyMzA2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWRlOTQxYS04YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAze/YF2QfbZsI9NaozzVVFkhKdbVxS1gCR3qJy+OeoPTm6YTHQvJIwMRL4TSQ
oyLs8UHBLufHemyMBHPHZOLwQY5cm4BjTjjOuZNvn1kqEPJGVhcGYvB5rysZJVIb
+HAWgd22K4kZETgNRBq4zs8MSf8VkRz6KCkmmLWnEVjwOACe8He+7y55gd46IwVn
v1WvEynhVvMXj/z6r0Fjbx2ImXeH4H5Zcwfe82CX0V1ayOb6YeQgu41LMqXOIvna
wnhFKmLOCVE6botONroUfOyib4zuyoJyof3Z6RXuLzFWwcUC3PD/n2OoZsPKyjJr
G8CDr4vF0b1hXvGIsoSm/xZcSQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPlVc2xt
guOHMbwsOeT82szxlWOMMB8GA1UdIwQYMBaAFBIAjbq3jLMfKZThSE6j8kJ0udGo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkI0Qy83QkE1NDI1ODFB
NzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4OHBsT0ZJVHFQeVFuUzUw
YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VnQ051cmVNc3g4cGxPRklUcVB5UW5TNTBhZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTJCNEMvN0JBNTQyNTgxQTc1MTFFQUFFMTlFMzdBQzRGOUFFMDIvQTgwNzE1MjIx
QTc3MTFFQUEyMEEwNzdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1XVMA0GCSqGSIb3DQEBCwUAA4IBAQCU7T2SQ2/em3AP3G9AjEpy
L51u0geamJOWFgmNRoidZoPKUIWPLA3uxAj5f5yyBTkBcihwAxmvBUP6Mm66q/C7
aW3D7SxeqxpnLiDAiBEb5QNM4WcOQyaH8RiF5M4rK7Q84PbO7joiGBmAwRAIKmdo
2c2rgOraWVx3Y+2UojXKOXQruxGZRXYerGAMNJbFKINqypbmB9FX8FgZN+LMpwRL
BJKF4+yZxuZXSvsMqyU+xfNMWrPhM4lprbPDaVd0OiuLEiy+WzEXGXATNajjXg18
Wdu0//CWIFUGwK9Ca/cahwFzyx8f87nY875MfcU2ZNM0RodE7Z4NVd9tBkB+CTv1
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:41 2026 by rpki-client