Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
File:                     7338235CC06011EE882BC34AC4F9AE02.roa (raw, json)
Hash identifier:          +rqWHU55mXZywL8CIstlBjQ5J8L3aIdxs349BgpUkec=
Subject key identifier:   D8:0B:56:90:45:26:9C:DC:29:14:27:0C:5E:08:08:AB:F8:39:EB:1D
Certificate issuer:       /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial:       15D0
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
Signing time:             Tue 14 Apr 2026 17:20:44 +0000
ROA not before:           Tue 14 Apr 2026 17:20:44 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135106
IP address blocks:        103.209.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
                          rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5584 (0x15d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
        Validity
            Not Before: Apr 14 17:20:44 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69de776b-f8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:d3:ea:cf:b6:b9:33:66:6a:f3:11:33:6c:
                    af:43:cd:6b:53:58:aa:c3:82:f7:7b:35:e8:ae:c6:
                    41:22:42:14:48:5e:6c:c0:2d:02:bd:40:53:66:59:
                    5e:8b:4f:cf:65:a8:a4:e2:1b:aa:28:32:99:a6:62:
                    a9:d4:3e:b4:4f:8f:f2:44:5c:8c:99:2c:f7:37:16:
                    53:75:f0:dd:5c:9f:50:a3:76:45:81:90:72:05:67:
                    6c:7a:54:ce:48:d8:12:7a:6a:70:0d:90:4e:3d:cb:
                    13:22:8b:ae:11:af:35:3b:b2:fe:9c:ed:4f:5f:8f:
                    5d:b7:47:35:09:83:39:43:a6:f0:38:3c:d4:e0:e5:
                    3e:5d:e4:ab:58:2f:a7:11:79:87:f0:3a:6e:0b:67:
                    b5:12:72:21:b4:d7:41:d9:7b:d9:62:7a:21:1a:34:
                    a0:5d:ed:7d:96:fd:ee:fa:57:aa:03:b8:23:50:4d:
                    88:79:96:85:6c:6f:29:1a:1b:6b:0e:09:5e:e6:04:
                    5b:15:81:c6:b0:7c:2d:22:88:d8:8e:4d:52:d5:c7:
                    77:a4:a4:45:83:6a:60:50:ee:bf:e9:da:3c:94:7b:
                    17:cc:63:0f:df:da:de:35:75:02:b2:6c:86:98:e2:
                    9c:e9:47:48:9d:c0:38:08:dd:42:43:eb:2f:9f:34:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0B:56:90:45:26:9C:DC:29:14:27:0C:5E:08:08:AB:F8:39:EB:1D
            X509v3 Authority Key Identifier:
                keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:3f:c0:1b:5a:17:6e:dc:0a:f9:d0:e3:10:c5:18:6b:fc:a6:
         13:c6:f7:96:9c:64:b0:5f:95:51:26:c1:e5:32:44:24:76:20:
         14:18:4a:14:d3:83:48:23:93:c4:08:fc:8d:b2:da:62:cb:96:
         23:25:af:5d:54:40:bf:4d:12:36:f6:58:a5:44:4c:ad:80:38:
         2d:65:ae:7d:fb:4b:4b:db:3f:bf:0d:22:33:70:79:3d:6a:33:
         4a:89:3e:c9:8d:6e:95:b3:9e:da:13:db:19:0f:dd:96:3f:fd:
         f2:c7:97:e6:37:76:0a:63:23:3e:8b:2c:84:f1:aa:f9:10:68:
         64:c1:b0:92:fe:31:77:8e:58:dc:8f:c4:5c:37:1f:17:bf:69:
         3c:32:f1:2f:fd:f5:36:c6:54:40:90:ec:b8:55:e1:4f:90:2b:
         63:dd:0d:5d:7a:79:9a:f2:07:22:16:61:4a:cd:c3:14:90:4d:
         86:01:26:2a:82:61:99:ec:b4:43:b0:de:7e:45:b5:3b:89:e9:
         b5:63:96:c5:51:00:17:70:3a:c0:8a:47:c7:71:f7:72:1d:bf:
         c1:b7:67:6e:b2:a8:c0:32:11:52:79:69:c3:94:4d:9c:c1:ff:
         a2:12:a8:dd:d0:bd:8d:c1:39:51:26:10:82:30:58:1e:9b:83:
         18:03:71:d7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICFdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez
MzhGNThCNTkwHhcNMjYwNDE0MTcyMDQ0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWRlNzc2Yi1mOGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtf3T6s+2uTNmavMRM2yvQ81rU1iqw4L3ezXorsZBIkIUSF5swC0CvUBTZlle
i0/PZaik4huqKDKZpmKp1D60T4/yRFyMmSz3NxZTdfDdXJ9Qo3ZFgZByBWdselTO
SNgSempwDZBOPcsTIouuEa81O7L+nO1PX49dt0c1CYM5Q6bwODzU4OU+XeSrWC+n
EXmH8DpuC2e1EnIhtNdB2XvZYnohGjSgXe19lv3u+leqA7gjUE2IeZaFbG8pGhtr
Dgle5gRbFYHGsHwtIojYjk1S1cd3pKRFg2pgUO6/6do8lHsXzGMP39reNXUCsmyG
mOKc6UdIncA4CN1CQ+svnzSCFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNgLVpBF
JpzcKRQnDF4ICKv4OesdMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz
RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzAxRDUvRDRCRTAwRDQ2M0U1MTFFOEI1Q0ZFNDFBQzRGOUFFMDIvNzMzODIzNUND
MDYwMTFFRTg4MkJDMzRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ9F8MA0GCSqGSIb3DQEBCwUAA4IBAQCXP8AbWhdu3Ar50OMQxRhr
/KYTxveWnGSwX5VRJsHlMkQkdiAUGEoU04NII5PECPyNstpiy5YjJa9dVEC/TRI2
9lilREytgDgtZa59+0tL2z+/DSIzcHk9ajNKiT7JjW6Vs57aE9sZD92WP/3yx5fm
N3YKYyM+iyyE8ar5EGhkwbCS/jF3jljcj8RcNx8Xv2k8MvEv/fU2xlRAkOy4VeFP
kCtj3Q1denma8gciFmFKzcMUkE2GASYqgmGZ7LRDsN5+RbU7iem1Y5bFUQAXcDrA
ikfHcfdyHb/Bt2dusqjAMhFSeWnDlE2cwf+iEqjd0L2NwTlRJhCCMFgem4MYA3HX
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:14 2026 by rpki-client