Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/99A1A6E612EB11F1974F37D30E3D8C67.roa
File:                     99A1A6E612EB11F1974F37D30E3D8C67.roa (raw, json)
Hash identifier:          krSEEGj8JBaBT3dtph2qYPkJB0ngCt4zrPtIkCd9l3w=
Subject key identifier:   C3:27:17:37:83:11:88:6D:4A:CF:78:BB:40:DD:2F:2C:04:47:75:E4
Certificate issuer:       /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial:       144A
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/99A1A6E612EB11F1974F37D30E3D8C67.roa
Signing time:             Sun 01 Mar 2026 17:27:26 +0000
ROA not before:           Sat 28 Feb 2026 11:36:03 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     401783
IP address blocks:        103.116.45.0/24 maxlen: 24
                          103.129.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
                          rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5194 (0x144a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
        Validity
            Not Before: Feb 28 11:36:03 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a476fe-790c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:e7:12:66:09:8c:a4:93:02:58:6f:fa:b2:
                    42:d2:ac:3d:6c:9f:2c:00:77:47:55:c7:5e:a8:58:
                    aa:23:fe:cd:3d:6d:df:a7:11:17:85:d0:a8:9c:9c:
                    a6:f6:9e:9b:c4:6c:fa:67:f9:86:41:0d:f3:09:9d:
                    aa:91:26:b8:2d:39:56:06:72:87:c3:b2:27:04:95:
                    7a:d5:09:f1:83:b7:c9:c4:1e:24:a1:3a:ae:2f:4c:
                    61:9c:d8:db:d7:66:5f:67:34:65:36:cc:97:f3:f2:
                    0e:d4:ca:5d:78:2b:0a:17:f9:bf:1a:49:f3:54:04:
                    88:a9:af:cc:b4:53:30:26:6b:e7:ff:d8:02:20:01:
                    40:42:f1:e8:c7:01:9e:c3:02:3e:87:2b:4e:76:0c:
                    a9:c4:9f:f2:fb:a9:a5:50:b7:40:c3:e1:09:e0:56:
                    13:0a:6f:c0:dd:29:d8:cb:5e:d1:06:4e:05:05:82:
                    12:cd:60:8e:5e:db:30:51:43:29:72:ff:50:e5:ce:
                    17:78:bd:ae:a3:ca:b3:01:cf:aa:8a:58:63:39:3b:
                    ab:34:6a:f7:a7:95:f2:77:63:7e:eb:e2:cc:78:79:
                    b2:b4:e2:7f:fb:7a:d5:2d:0a:76:bb:48:6c:dd:b9:
                    4d:62:4b:fa:d6:85:42:08:54:3f:20:e5:e9:bf:84:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:27:17:37:83:11:88:6D:4A:CF:78:BB:40:DD:2F:2C:04:47:75:E4
            X509v3 Authority Key Identifier:
                keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/99A1A6E612EB11F1974F37D30E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.45.0/24
                  103.129.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:db:a6:b7:0e:93:ce:b2:6d:8b:35:68:50:4e:ee:13:a8:13:
         63:31:be:bb:f1:18:7c:2c:1f:39:ab:6f:54:77:e5:8d:9b:8b:
         8b:d3:08:dc:45:d5:4c:9c:f1:4c:8a:0e:6e:3d:c8:83:36:3b:
         0d:7a:b5:a6:fa:b5:7e:3b:f3:9f:b1:49:38:af:e6:eb:66:2f:
         78:79:66:4f:4d:ac:7a:9e:fa:9c:e7:08:71:3f:86:e2:77:a3:
         cd:fd:dd:02:43:85:b8:ce:92:b9:75:cd:59:dd:ac:24:5d:e2:
         bb:32:82:32:0f:67:ce:de:69:ca:73:b4:9f:97:52:3f:1b:f3:
         97:6b:5a:0e:0d:4f:9a:91:de:d5:a7:07:85:30:9d:88:17:97:
         2b:cc:5c:53:8d:94:b0:c3:4e:28:aa:bd:7a:92:4f:6f:70:97:
         4a:23:54:58:25:d5:be:04:74:31:77:c6:f7:94:28:4d:58:f1:
         2d:b9:e7:80:95:5f:e9:b8:25:5e:4c:ca:a2:a4:2b:dd:3f:4f:
         c4:3e:57:d2:94:15:2a:f2:01:9c:53:0b:bf:b9:d3:01:01:2a:
         61:78:8e:4c:25:68:f2:ec:72:c6:f8:18:ea:9c:f0:f6:d9:3a:
         ca:d9:61:f2:e2:30:c8:f7:f2:01:a3:2b:70:98:f7:ce:6f:13:
         0b:f0:86:dd
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICFEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC
MzVFODU5RjkwHhcNMjYwMjI4MTEzNjAzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzZmZS03OTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsybnEmYJjKSTAlhv+rJC0qw9bJ8sAHdHVcdeqFiqI/7NPW3fpxEXhdConJym
9p6bxGz6Z/mGQQ3zCZ2qkSa4LTlWBnKHw7InBJV61Qnxg7fJxB4koTquL0xhnNjb
12ZfZzRlNsyX8/IO1MpdeCsKF/m/GknzVASIqa/MtFMwJmvn/9gCIAFAQvHoxwGe
wwI+hytOdgypxJ/y+6mlULdAw+EJ4FYTCm/A3SnYy17RBk4FBYISzWCOXtswUUMp
cv9Q5c4XeL2uo8qzAc+qilhjOTurNGr3p5Xyd2N+6+LMeHmytOJ/+3rVLQp2u0hs
3blNYkv61oVCCFQ/IOXpv4Q2XQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMMnFzeD
EYhtSs94u0DdLywER3XkMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez
NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X
ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjBGMEQvMDhFQzJCMENBMzZFMTFFOEI4OTY2NjJCQzRGOUFFMDIvOTlBMUE2RTYx
MkVCMTFGMTk3NEYzN0QzMEUzRDhDNjcucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ3QtAwQAZ4HEMA0GCSqGSIb3DQEBCwUAA4IBAQAV26a3DpPOsm2L
NWhQTu4TqBNjMb678Rh8LB85q29Ud+WNm4uL0wjcRdVMnPFMig5uPciDNjsNerWm
+rV+O/OfsUk4r+brZi94eWZPTax6nvqc5whxP4bid6PN/d0CQ4W4zpK5dc1Z3awk
XeK7MoIyD2fO3mnKc7Sfl1I/G/OXa1oODU+akd7VpweFMJ2IF5crzFxTjZSww04o
qr16kk9vcJdKI1RYJdW+BHQxd8b3lChNWPEtueeAlV/puCVeTMqipCvdP0/EPlfS
lBUq8gGcUwu/udMBASpheI5MJWjy7HLG+BjqnPD22TrK2WHy4jDI9/IBoytwmPfO
bxML8Ibd
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:03 2026 by rpki-client