Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/11446DBE5B2711F099D02552C4F9AE02.roa
File:                     11446DBE5B2711F099D02552C4F9AE02.roa (raw, json)
Hash identifier:          1MVde0/1uHuiUovcFZ77TlqLfJ5SZhmH3WyAneTv/Ng=
Subject key identifier:   E1:7B:A2:41:88:2C:52:A8:08:1E:C7:C5:F2:48:4D:CE:E4:53:31:60
Certificate issuer:       /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial:       0856
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/11446DBE5B2711F099D02552C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:51:20 +0000
ROA not before:           Wed 10 Dec 2025 20:14:03 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133448
IP address blocks:        103.229.226.0/24 maxlen: 24
                          103.229.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134 (0x856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
        Validity
            Not Before: Dec 10 20:14:03 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47c98-78bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:21:9e:15:43:bc:1b:51:31:45:7e:4a:bf:
                    a1:ae:6d:e0:bb:99:a4:db:f5:d4:29:dd:7e:6d:c2:
                    21:cf:e9:41:ed:a7:55:ab:d5:4d:7e:bb:2c:ad:19:
                    3b:15:e3:d2:d1:0b:0b:98:b7:13:bc:50:e5:c8:5f:
                    d2:27:90:c1:61:3c:d2:99:7d:db:8e:d8:d0:56:68:
                    31:97:3a:bf:ad:f0:c4:7e:d4:78:88:1f:05:5d:8a:
                    81:35:04:f0:42:46:1d:a9:e3:bd:e6:e8:ac:6e:98:
                    0b:a9:75:5e:c1:a9:23:8f:7e:81:b5:06:d7:a7:cb:
                    a7:6a:50:71:31:d8:4b:de:24:75:09:56:54:b5:55:
                    e4:30:a9:c6:b2:12:d4:c1:ac:32:b8:1e:a9:68:89:
                    f0:89:c3:71:3c:66:62:04:f6:84:b6:f9:6d:63:fd:
                    aa:f7:87:b6:26:ab:70:9f:cb:30:cf:ca:f4:ae:3b:
                    52:45:a5:f2:ea:b0:e5:0f:64:6b:50:e9:fd:7c:f1:
                    6f:3d:71:0c:bc:f5:c4:7a:e2:b0:3e:2f:79:79:17:
                    e0:48:ed:91:4f:31:58:5d:c5:04:ec:50:80:d3:ad:
                    00:26:39:61:0a:e3:05:78:0f:30:42:f9:2d:d8:0c:
                    1e:81:96:72:02:16:fc:c9:b7:30:47:0a:cf:3e:2c:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7B:A2:41:88:2C:52:A8:08:1E:C7:C5:F2:48:4D:CE:E4:53:31:60
            X509v3 Authority Key Identifier:
                keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/11446DBE5B2711F099D02552C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:c5:f2:fc:58:d2:6d:9a:07:6e:4f:77:62:e0:ea:3c:63:33:
         d1:8f:d1:e5:29:87:d0:c7:89:b2:1d:95:cb:a5:bb:a7:26:35:
         8f:d5:64:2f:26:0b:3c:d2:c5:f1:c7:68:44:8e:2b:35:49:d3:
         ed:f7:ae:0b:00:f0:1b:5d:e6:4e:ff:82:bc:e6:a2:9b:ef:f6:
         c6:5d:cd:18:b8:22:18:a4:45:10:e6:b3:3d:da:2f:61:85:8b:
         ce:eb:3e:8d:73:75:db:24:53:aa:85:b7:49:75:4b:d9:91:9d:
         1c:1c:07:7f:3e:46:6b:f8:31:93:40:05:21:bb:81:fa:72:dc:
         27:01:ef:c4:e4:a0:c9:02:00:1c:50:1e:ab:6c:f0:3b:aa:ba:
         d9:b8:e7:d5:63:1b:7a:f7:6d:35:9f:a9:17:40:35:57:12:e8:
         82:dc:f1:28:ec:11:3e:7a:80:db:49:e1:08:61:bd:1d:30:e5:
         3b:42:ae:f9:8f:96:46:77:eb:d0:fa:3a:e1:f7:bc:2b:dc:e9:
         54:61:c9:d3:3b:0a:d9:de:a6:62:71:c6:05:bf:50:7c:b9:17:
         78:c7:e0:e9:ff:85:1f:18:ff:06:15:ac:b9:05:8a:3d:88:39:
         e4:4c:49:ee:78:a0:d8:ff:de:9c:9c:5f:17:a7:3e:87:19:89:
         65:3b:f7:f1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD
MzAzM0Y0NjkwHhcNMjUxMjEwMjAxNDAzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2M5OC03OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvSYhnhVDvBtRMUV+Sr+hrm3gu5mk2/XUKd1+bcIhz+lB7adVq9VNfrssrRk7
FePS0QsLmLcTvFDlyF/SJ5DBYTzSmX3bjtjQVmgxlzq/rfDEftR4iB8FXYqBNQTw
QkYdqeO95uisbpgLqXVewakjj36BtQbXp8unalBxMdhL3iR1CVZUtVXkMKnGshLU
wawyuB6paInwicNxPGZiBPaEtvltY/2q94e2Jqtwn8swz8r0rjtSRaXy6rDlD2Rr
UOn9fPFvPXEMvPXEeuKwPi95eRfgSO2RTzFYXcUE7FCA060AJjlhCuMFeA8wQvkt
2AwegZZyAhb8ybcwRwrPPiz2DQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOF7okGI
LFKoCB7HxfJITc7kUzFgMB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC
NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjMwNzIvMENFQTQ5NUMwQjVDMTFFQjk5QTE3NTYyQzRGOUFFMDIvMTE0NDZEQkU1
QjI3MTFGMDk5RDAyNTUyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ+XiMA0GCSqGSIb3DQEBCwUAA4IBAQBoxfL8WNJtmgduT3di4Oo8
YzPRj9HlKYfQx4myHZXLpbunJjWP1WQvJgs80sXxx2hEjis1SdPt964LAPAbXeZO
/4K85qKb7/bGXc0YuCIYpEUQ5rM92i9hhYvO6z6Nc3XbJFOqhbdJdUvZkZ0cHAd/
PkZr+DGTQAUhu4H6ctwnAe/E5KDJAgAcUB6rbPA7qrrZuOfVYxt69201n6kXQDVX
EuiC3PEo7BE+eoDbSeEIYb0dMOU7Qq75j5ZGd+vQ+jrh97wr3OlUYcnTOwrZ3qZi
ccYFv1B8uRd4x+Dp/4UfGP8GFay5BYo9iDnkTEnueKDY/96cnF8Xpz6HGYllO/fx
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:13 2026 by rpki-client