Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/C420EBE06EC911EC8A5A940AC4F9AE02.roa
File:                     C420EBE06EC911EC8A5A940AC4F9AE02.roa (raw, json)
Hash identifier:          bl7MGI+s+GfSmkdUWGV0SRhTk0mPX6Nm2mcc4YlHOsM=
Subject key identifier:   78:FB:0F:E3:B8:61:02:01:7F:30:AE:E2:67:05:91:1B:4F:C5:9F:0C
Certificate issuer:       /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Certificate serial:       0565
Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/C420EBE06EC911EC8A5A940AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:47:13 +0000
ROA not before:           Tue 24 Feb 2026 23:19:55 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137433
IP address blocks:        103.108.116.0/24 maxlen: 24
                          103.114.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl
                          rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381 (0x565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122373, serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
        Validity
            Not Before: Feb 24 23:19:55 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a45f81-c738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:a7:2d:08:a3:91:c8:43:0c:da:33:cd:c0:
                    aa:53:1e:e8:2d:cd:e4:af:77:5f:a2:d4:de:14:ed:
                    39:dc:43:38:b2:7e:76:04:4b:ec:9c:bb:81:8c:11:
                    df:9f:29:83:ca:4f:c8:6e:12:36:1e:fb:e5:a8:76:
                    3a:68:ff:4e:a9:25:d7:d0:40:4c:12:1f:71:6a:f5:
                    e1:ab:09:16:a3:94:ad:2c:35:41:1b:15:93:62:81:
                    26:60:ad:3a:ae:10:c7:e1:6b:7c:19:9f:e5:0f:a9:
                    db:73:12:30:bc:52:e7:4c:1d:bf:d8:5d:c6:0e:fe:
                    51:90:d5:45:51:fe:48:c8:52:87:6f:03:13:5f:e1:
                    79:84:d6:f4:2c:7b:09:71:82:a8:ec:d7:d6:a9:84:
                    43:97:8b:8c:ee:65:cf:e9:51:8b:22:89:fe:01:4d:
                    12:92:0e:c1:6f:4d:40:75:c0:66:3c:27:6d:33:d1:
                    c7:7f:b7:3a:e4:59:f2:b3:7b:f8:d8:41:99:92:57:
                    28:68:36:22:18:d0:2c:2f:5c:f5:50:8a:32:7c:d6:
                    44:c1:54:37:81:89:65:5f:a4:b6:ba:87:01:05:bc:
                    f3:bb:b6:4f:90:fb:dd:54:2c:28:25:6a:16:f2:ae:
                    44:fc:1a:d0:c8:47:a4:8f:d0:6b:98:74:6d:6a:ca:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FB:0F:E3:B8:61:02:01:7F:30:AE:E2:67:05:91:1B:4F:C5:9F:0C
            X509v3 Authority Key Identifier:
                keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/C420EBE06EC911EC8A5A940AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.116.0/24
                  103.114.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:3b:9e:9e:25:29:29:62:a5:68:a4:78:66:1d:03:7f:b5:e2:
         e9:9c:e6:ba:44:39:de:f4:0e:68:b2:8a:c5:f5:0d:aa:99:1b:
         73:93:81:57:85:ef:33:41:d4:46:4c:c0:9f:06:57:dc:d5:2b:
         f6:bc:ed:6e:c5:e4:9f:dd:c8:8f:be:96:b7:72:27:c5:dd:ba:
         6b:ba:a1:7b:ef:c0:3f:d3:5c:55:cc:e6:2a:69:9f:9e:7a:a9:
         1c:97:0b:91:fe:17:14:a5:31:50:f7:37:49:ce:bf:83:32:49:
         85:30:bd:a4:43:39:cc:6b:d8:fc:ce:f0:e7:26:8d:1a:09:05:
         08:a2:94:2d:cf:31:97:4c:2d:3a:ab:3f:4b:96:d7:80:04:d1:
         fc:28:94:a6:01:7e:76:83:48:ef:3d:9d:0b:d3:bb:21:f5:fc:
         3a:df:7e:2c:13:41:18:20:3f:95:dd:e8:46:19:48:49:dd:78:
         51:06:47:4e:54:2d:a7:20:94:23:aa:b6:1d:9a:ba:5b:1a:3d:
         72:0f:a9:c8:ad:48:e8:e3:2f:5f:21:8a:a6:e3:3e:8a:eb:da:
         85:45:82:90:cf:49:f2:67:56:df:0d:90:99:b6:33:bf:7a:90:
         75:28:3b:39:44:87:e5:b6:cd:0e:7f:11:4d:75:1e:e9:d2:4b:
         18:78:6f:b3
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIzNzMxMTAvBgNVBAUTKDRBMjg2NTFBOTRBQzYzOUY2QUIxMzI0NzREMzFFQjBE
RkNFNkRDNzkwHhcNMjYwMjI0MjMxOTU1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWY4MS1jNzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn/ynLQijkchDDNozzcCqUx7oLc3kr3dfotTeFO053EM4sn52BEvsnLuBjBHf
nymDyk/IbhI2HvvlqHY6aP9OqSXX0EBMEh9xavXhqwkWo5StLDVBGxWTYoEmYK06
rhDH4Wt8GZ/lD6nbcxIwvFLnTB2/2F3GDv5RkNVFUf5IyFKHbwMTX+F5hNb0LHsJ
cYKo7NfWqYRDl4uM7mXP6VGLIon+AU0Skg7Bb01AdcBmPCdtM9HHf7c65Fnys3v4
2EGZklcoaDYiGNAsL1z1UIoyfNZEwVQ3gYllX6S2uocBBbzzu7ZPkPvdVCwoJWoW
8q5E/BrQyEekj9BrmHRtaspa9wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHj7D+O4
YQIBfzCu4mcFkRtPxZ8MMB8GA1UdIwQYMBaAFEooZRqUrGOfarEyR00x6w385tx5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM3My8yQzAwNkJCODJC
MkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1OXFzVEpIVFRIckRmem0z
SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NpaGxHcFNzWTU5cXNUSkhUVEhyRGZ6bTNIay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjIzNzMvMkMwMDZCQjgyQjJEMTFFQ0I4NEU3MjczQzRGOUFFMDIvQzQyMEVCRTA2
RUM5MTFFQzhBNUE5NDBBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ2x0AwQAZ3LOMA0GCSqGSIb3DQEBCwUAA4IBAQATO56eJSkpYqVo
pHhmHQN/teLpnOa6RDne9A5osorF9Q2qmRtzk4FXhe8zQdRGTMCfBlfc1Sv2vO1u
xeSf3ciPvpa3cifF3bpruqF778A/01xVzOYqaZ+eeqkclwuR/hcUpTFQ9zdJzr+D
MkmFML2kQznMa9j8zvDnJo0aCQUIopQtzzGXTC06qz9LlteABNH8KJSmAX52g0jv
PZ0L07sh9fw6334sE0EYID+V3ehGGUhJ3XhRBkdOVC2nIJQjqrYdmrpbGj1yD6nI
rUjo4y9fIYqm4z6K69qFRYKQz0nyZ1bfDZCZtjO/epB1KDs5RIflts0OfxFNdR7p
0ksYeG+z
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:25 2026 by rpki-client