Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/9D5E76267A5B11EFAB107D22C4F9AE02.roa
File:                     9D5E76267A5B11EFAB107D22C4F9AE02.roa (raw, json)
Hash identifier:          sXzFdcB2zs92es9/hGK2HcYanncZGMY7hAT9tfHHwG4=
Subject key identifier:   70:02:A1:A4:62:81:9C:B4:C7:52:BB:7D:66:41:F4:A7:34:02:2F:C5
Certificate issuer:       /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial:       0444
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/9D5E76267A5B11EFAB107D22C4F9AE02.roa
Signing time:             Fri 29 May 2026 00:29:50 +0000
ROA not before:           Fri 29 May 2026 00:29:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140674
IP address blocks:        103.185.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DEF, serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
        Validity
            Not Before: May 29 00:29:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a18ddfe-3694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:4e:81:74:be:0c:16:0b:03:77:82:32:26:
                    85:50:c4:d5:24:8b:21:5d:b4:fc:a9:9f:01:48:3a:
                    d3:8a:23:91:06:9e:31:f7:83:15:36:15:f8:78:cd:
                    08:64:a1:4a:f1:ff:43:18:75:95:75:af:ba:ec:91:
                    25:53:63:f1:ee:62:a3:ec:1c:1c:e0:b9:56:57:ef:
                    84:f3:ba:b9:fc:2b:45:37:c1:26:c1:04:f0:9d:ad:
                    8b:2b:aa:20:b5:d0:cd:64:7f:73:bf:be:6f:dc:d1:
                    d2:8c:c4:a6:f6:31:57:db:60:cf:d7:e1:04:59:2f:
                    e0:5d:19:ed:a1:cd:1c:31:b6:ed:6b:1f:3d:d8:ce:
                    91:6f:92:66:c0:73:13:52:aa:a1:29:d6:f9:53:17:
                    d4:ab:40:46:7b:ab:de:fc:0f:27:ca:1f:c0:42:8d:
                    19:9f:db:64:55:03:e1:9a:c0:a5:d5:d5:7e:0a:c3:
                    c7:f9:d8:89:7d:0a:58:53:6d:e4:9f:73:73:3d:03:
                    65:25:e6:4b:93:43:95:c5:5e:67:34:f9:48:79:ee:
                    38:9d:ea:16:6e:25:e0:33:d5:d4:a3:f2:a3:8c:26:
                    59:68:f8:4d:b1:eb:d3:e7:89:14:72:fa:2a:80:11:
                    96:90:4a:37:b3:ee:05:81:a3:01:eb:4a:fc:cb:72:
                    ba:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:02:A1:A4:62:81:9C:B4:C7:52:BB:7D:66:41:F4:A7:34:02:2F:C5
            X509v3 Authority Key Identifier:
                keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/9D5E76267A5B11EFAB107D22C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:5a:46:0a:8c:c2:7d:7a:b8:25:01:ed:56:67:47:f0:19:95:
         4c:58:aa:64:66:ab:0f:68:b8:cc:cb:57:91:a2:83:ca:59:5c:
         56:72:39:11:0c:0c:9a:dd:ce:00:0e:93:1f:9a:53:1b:08:4e:
         c5:48:93:2f:b6:39:66:93:a5:c1:8d:22:e0:3c:e5:a1:0b:e9:
         6f:fd:2a:d8:89:33:cb:a8:18:e1:34:44:02:d2:e9:75:b8:e7:
         5f:f8:f8:ac:2a:d9:e0:53:65:92:fc:60:23:18:12:bc:de:2a:
         6b:ec:16:ff:f7:6c:56:98:71:4d:90:f5:08:21:39:eb:a5:07:
         b0:67:08:26:b0:a5:c0:ca:50:66:20:1c:d1:29:7d:1d:c7:90:
         5a:30:2b:19:95:8a:54:d1:d2:bf:28:a5:0c:d5:ac:05:1c:b3:
         8f:56:d0:75:f7:02:8b:09:86:e2:f1:d4:fc:a8:f6:cc:b4:3c:
         9a:a5:2f:80:87:3d:ec:15:eb:7d:03:93:34:6a:b6:2e:17:55:
         06:48:b3:94:d7:3b:c3:d8:6d:6e:71:30:43:ec:ee:ca:fa:05:
         c1:30:24:14:a3:1e:fa:57:9d:e5:6b:78:7a:67:68:54:db:fc:
         17:49:24:25:4e:ea:99:6a:ab:f2:19:0f:a2:45:c5:be:42:c9:
         ce:63:2e:f3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJERUYxMTAvBgNVBAUTKEUzRUI5NTRCNDQ3MjFFNDExQUFGMDkzODMxMENDMTAz
RUE0QzhCQjQwHhcNMjYwNTI5MDAyOTUwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE4ZGRmZS0zNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm09OgXS+DBYLA3eCMiaFUMTVJIshXbT8qZ8BSDrTiiORBp4x94MVNhX4eM0I
ZKFK8f9DGHWVda+67JElU2Px7mKj7Bwc4LlWV++E87q5/CtFN8EmwQTwna2LK6og
tdDNZH9zv75v3NHSjMSm9jFX22DP1+EEWS/gXRntoc0cMbbtax892M6Rb5JmwHMT
UqqhKdb5UxfUq0BGe6ve/A8nyh/AQo0Zn9tkVQPhmsCl1dV+CsPH+diJfQpYU23k
n3NzPQNlJeZLk0OVxV5nNPlIee44neoWbiXgM9XUo/KjjCZZaPhNsevT54kUcvoq
gBGWkEo3s+4FgaMB60r8y3K6pwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHACoaRi
gZy0x1K7fWZB9Kc0Ai/FMB8GA1UdIwQYMBaAFOPrlUtEch5BGq8JODEMwQPqTIu0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRFRi8xOEY2OTg3Q0Iz
RDUxMUVDQjNBMEE4ODJDNEY5QUUwMi80LXVWUzBSeUhrRWFyd2s0TVF6QkEtcE1p
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQtdVZTMFJ5SGtFYXJ3azRNUXpCQS1wTWk3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTJERUYvMThGNjk4N0NCM0Q1MTFFQ0IzQTBBODgyQzRGOUFFMDIvOUQ1RTc2MjY3
QTVCMTFFRkFCMTA3RDIyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7nhMA0GCSqGSIb3DQEBCwUAA4IBAQCcWkYKjMJ9erglAe1WZ0fw
GZVMWKpkZqsPaLjMy1eRooPKWVxWcjkRDAya3c4ADpMfmlMbCE7FSJMvtjlmk6XB
jSLgPOWhC+lv/SrYiTPLqBjhNEQC0ul1uOdf+PisKtngU2WS/GAjGBK83ipr7Bb/
92xWmHFNkPUIITnrpQewZwgmsKXAylBmIBzRKX0dx5BaMCsZlYpU0dK/KKUM1awF
HLOPVtB19wKLCYbi8dT8qPbMtDyapS+Ahz3sFet9A5M0arYuF1UGSLOU1zvD2G1u
cTBD7O7K+gXBMCQUox76V53la3h6Z2hU2/wXSSQlTuqZaqvyGQ+iRcW+QsnOYy7z
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:51:04 2026 by rpki-client