Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/96BD724A36E411F0AAE1DE39C4F9AE02.roa
File:                     96BD724A36E411F0AAE1DE39C4F9AE02.roa (raw, json)
Hash identifier:          shoLPgC/NpsBS7wBYyvhBSwKP6LoO6Nubl4gi/Om0Kk=
Subject key identifier:   16:F6:0D:52:A4:F6:6A:ED:B9:BA:84:77:10:0C:18:B6:DA:E4:7A:C7
Certificate issuer:       /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial:       01FC
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/96BD724A36E411F0AAE1DE39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:15:38 +0000
ROA not before:           Fri 09 Jan 2026 02:22:14 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38314
IP address blocks:        103.125.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
                          rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
        Validity
            Not Before: Jan  9 02:22:14 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a411ca-f9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a7:71:d8:92:cd:82:b6:70:ac:8b:96:68:60:
                    96:5d:63:09:35:43:17:98:e2:c5:b2:80:d1:87:3b:
                    5e:c2:74:a9:bc:7a:d1:ec:7e:c5:4f:7a:a6:25:0c:
                    d8:8e:c0:6e:b2:1b:21:2a:f7:75:9b:61:bf:5b:75:
                    bb:f0:b2:05:fc:33:50:73:39:3d:a9:d6:11:b6:0a:
                    9b:74:6a:70:0d:d3:3e:ac:97:95:f9:12:29:95:31:
                    62:9d:05:81:9e:15:e3:50:9c:a5:99:e0:ce:e3:90:
                    f6:02:f1:2b:2e:37:c2:5f:00:6d:03:17:f1:a9:65:
                    e5:b4:df:41:ec:40:a1:12:43:e2:63:3d:1f:f2:1e:
                    66:4c:99:82:6c:21:9c:7e:41:5d:d3:36:d1:65:67:
                    44:f7:c6:17:b7:d5:2d:8c:bd:1b:d9:b9:d1:c6:b3:
                    e2:48:87:ea:0c:e3:85:71:8c:e3:8d:3e:28:d6:e8:
                    aa:28:2a:f7:e4:fc:85:40:c5:2b:9e:d4:6b:48:67:
                    8b:61:fe:31:8b:ee:48:51:84:4b:34:73:d1:4e:bd:
                    b9:2e:ae:05:a6:87:cb:68:97:ea:55:ae:66:45:0f:
                    39:dc:56:cc:78:35:5a:ad:20:f3:cf:62:0c:99:5d:
                    dd:ec:ab:8c:27:86:cd:74:7c:89:d5:43:6f:c9:7b:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F6:0D:52:A4:F6:6A:ED:B9:BA:84:77:10:0C:18:B6:DA:E4:7A:C7
            X509v3 Authority Key Identifier:
                keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/96BD724A36E411F0AAE1DE39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:20:ee:db:96:4f:f4:fd:11:58:2d:f3:25:8f:5b:fb:63:23:
         f5:fc:93:e0:ab:e3:3c:27:f8:5b:c0:6a:f0:bf:50:a5:32:23:
         fd:e3:9f:a7:e6:61:af:81:4e:b3:7f:d0:e0:40:27:b3:42:fd:
         21:8d:03:85:85:12:78:54:41:9c:c0:f0:46:50:0d:db:c5:16:
         bb:71:1e:2c:db:b1:61:3d:1c:c5:f2:dd:f1:bc:cd:4a:91:32:
         32:47:94:69:f9:dd:f7:f0:61:3f:30:1e:05:9d:12:81:b5:ca:
         d6:73:10:e2:36:50:13:6f:37:89:f0:b7:8a:86:0e:29:29:95:
         e2:c4:9a:7c:1c:dc:2d:b6:b0:39:57:a3:b7:4c:ba:b9:15:af:
         4a:6c:c8:9b:8f:5d:50:32:24:6e:a3:e0:07:49:f5:50:b7:9f:
         30:f3:65:95:f8:5d:30:cc:8c:b9:84:87:33:6d:a6:11:51:1a:
         ba:fa:22:af:c4:7c:cc:96:92:51:35:17:07:8a:d8:81:a2:c4:
         1b:d8:e6:e5:36:78:94:fe:c9:46:ed:e6:51:04:e3:5b:d5:91:
         1b:0d:86:4e:06:c1:76:30:79:04:2e:66:25:96:bb:d6:6b:2d:
         b6:22:9b:69:ed:df:3e:71:48:06:3b:11:02:cb:28:5f:46:76:
         48:54:07:66
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw
NzcwQjkzM0IwHhcNMjYwMTA5MDIyMjE0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTFjYS1mOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA16dx2JLNgrZwrIuWaGCWXWMJNUMXmOLFsoDRhztewnSpvHrR7H7FT3qmJQzY
jsBushshKvd1m2G/W3W78LIF/DNQczk9qdYRtgqbdGpwDdM+rJeV+RIplTFinQWB
nhXjUJylmeDO45D2AvErLjfCXwBtAxfxqWXltN9B7EChEkPiYz0f8h5mTJmCbCGc
fkFd0zbRZWdE98YXt9UtjL0b2bnRxrPiSIfqDOOFcYzjjT4o1uiqKCr35PyFQMUr
ntRrSGeLYf4xi+5IUYRLNHPRTr25Lq4FpofLaJfqVa5mRQ853FbMeDVarSDzz2IM
mV3d7KuMJ4bNdHyJ1UNvyXvMhQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBb2DVKk
9mrtubqEdxAMGLba5HrHMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw
RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzFBNUUvMDM0NjJFNjYxMEVBMTFFRTlBNDhGMTdCQzRGOUFFMDIvOTZCRDcyNEEz
NkU0MTFGMEFBRTFERTM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ309MA0GCSqGSIb3DQEBCwUAA4IBAQBxIO7blk/0/RFYLfMlj1v7
YyP1/JPgq+M8J/hbwGrwv1ClMiP945+n5mGvgU6zf9DgQCezQv0hjQOFhRJ4VEGc
wPBGUA3bxRa7cR4s27FhPRzF8t3xvM1KkTIyR5Rp+d338GE/MB4FnRKBtcrWcxDi
NlATbzeJ8LeKhg4pKZXixJp8HNwttrA5V6O3TLq5Fa9KbMibj11QMiRuo+AHSfVQ
t58w82WV+F0wzIy5hIczbaYRURq6+iKvxHzMlpJRNRcHitiBosQb2OblNniU/slG
7eZRBONb1ZEbDYZOBsF2MHkELmYllrvWay22Iptp7d8+cUgGOxECyyhfRnZIVAdm
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:54 2026 by rpki-client