Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/F609B0309D5F11EE94076E6FC4F9AE02.roa
File:                     F609B0309D5F11EE94076E6FC4F9AE02.roa (raw, json)
Hash identifier:          7bHHLIgES8ByM7fP5YN9h2I6mW2n114NAaaCpRW1pN8=
Subject key identifier:   95:38:90:16:61:67:99:FA:FC:8B:A1:8A:22:2C:55:89:00:30:0A:B4
Certificate issuer:       /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984
Certificate serial:       01A5
Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/F609B0309D5F11EE94076E6FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:29:09 +0000
ROA not before:           Wed 03 Dec 2025 02:34:41 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     59242
IP address blocks:        103.228.49.0/24 maxlen: 24
                          103.254.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl
                          rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984
        Validity
            Not Before: Dec  3 02:34:41 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a414f4-06aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:ca:63:9a:71:dd:5b:12:2d:74:4b:70:98:
                    e6:77:76:14:79:f8:5d:8d:73:dd:c4:2e:d1:5e:96:
                    46:9c:d7:ac:bd:8d:e4:76:58:79:5d:42:ee:c5:f9:
                    62:dd:3e:34:1b:8f:d0:98:84:04:ff:73:96:b2:88:
                    8b:e5:47:8f:6a:53:b0:a5:64:5f:44:21:59:8a:46:
                    e7:c3:ec:49:c0:89:b0:65:78:fa:ec:0b:2d:b3:52:
                    9d:67:22:3a:30:d8:6e:a8:1b:54:e3:f3:6f:3a:f9:
                    d0:1c:cf:b5:76:16:22:61:84:d8:fd:48:97:65:63:
                    27:4c:3f:1b:1c:ea:13:d0:11:59:e8:e0:bb:ee:07:
                    b1:57:fe:9f:d4:27:e2:f6:20:b6:71:15:f1:cb:f1:
                    13:55:98:82:a0:8c:3e:8b:c5:ad:b3:6b:98:7d:77:
                    5e:87:5a:5f:68:da:0b:70:bf:8b:c1:86:42:8b:98:
                    a4:65:56:a3:5f:d9:a2:a9:30:4f:1f:d8:6a:3c:02:
                    8f:a3:c0:3a:34:76:38:59:33:9d:e9:b9:03:de:06:
                    a7:47:11:4d:eb:d5:c6:f2:82:2f:a7:6f:bc:7d:76:
                    40:02:1d:df:ed:14:24:3d:55:47:35:96:b4:e3:95:
                    ad:d2:45:9b:8e:ba:06:3d:1a:5c:83:1d:da:d1:f2:
                    f9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:38:90:16:61:67:99:FA:FC:8B:A1:8A:22:2C:55:89:00:30:0A:B4
            X509v3 Authority Key Identifier:
                keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/F609B0309D5F11EE94076E6FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.49.0/24
                  103.254.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:0a:07:9d:09:28:2d:2d:2d:db:f0:40:7b:6a:ea:a3:74:af:
         46:36:0f:d3:de:07:c5:21:38:d6:dc:23:19:37:4f:e3:27:c3:
         6e:24:b2:d2:8e:8e:18:8a:f5:23:83:22:31:26:5e:63:4d:57:
         2f:da:8a:21:ec:a4:b0:31:87:fc:03:7d:58:42:2d:0d:ce:87:
         71:cb:6b:f2:a2:2b:b0:1c:04:6b:df:00:09:6f:de:63:09:ff:
         59:9d:a2:8d:18:8b:dc:a4:e3:88:ac:f5:b2:c2:ac:7f:43:97:
         4e:be:6c:7d:a5:ba:53:3c:5a:6f:87:f8:33:4b:11:2a:c3:04:
         43:a6:6f:00:34:99:7b:7a:62:a8:dd:b1:7a:82:7b:f6:94:3a:
         a0:07:1c:5c:d3:e5:a4:f4:84:07:64:98:76:3c:16:3a:92:fb:
         a3:ef:14:69:2b:52:68:4e:47:ce:bf:bc:7f:0a:b3:5d:3d:14:
         b3:bc:06:b6:14:29:0b:c3:91:0e:c6:5a:9c:86:cf:95:1c:76:
         ea:ea:76:c5:9c:04:eb:e8:87:85:ce:99:f8:71:11:a6:32:da:
         e6:ad:36:ed:94:6e:75:88:c4:6f:10:13:1e:b3:2f:29:4a:31:
         b2:d6:99:ff:eb:0c:f1:3b:80:a5:fe:78:1a:d7:43:bc:70:ca:
         ea:e3:41:ff
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFBQjkxMTAvBgNVBAUTKEYyQjc5MjQyMkE4REI5Nzk1NDc2M0NGRTg5MTY2RTky
MkU2MzE5ODQwHhcNMjUxMjAzMDIzNDQxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTRmNC0wNmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq8vKY5px3VsSLXRLcJjmd3YUefhdjXPdxC7RXpZGnNesvY3kdlh5XULuxfli
3T40G4/QmIQE/3OWsoiL5UePalOwpWRfRCFZikbnw+xJwImwZXj67Asts1KdZyI6
MNhuqBtU4/NvOvnQHM+1dhYiYYTY/UiXZWMnTD8bHOoT0BFZ6OC77gexV/6f1Cfi
9iC2cRXxy/ETVZiCoIw+i8Wts2uYfXdeh1pfaNoLcL+LwYZCi5ikZVajX9miqTBP
H9hqPAKPo8A6NHY4WTOd6bkD3ganRxFN69XG8oIvp2+8fXZAAh3f7RQkPVVHNZa0
45Wt0kWbjroGPRpcgx3a0fL5rwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJU4kBZh
Z5n6/IuhiiIsVYkAMAq0MB8GA1UdIwQYMBaAFPK3kkIqjbl5VHY8/okWbpIuYxmE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCOS9GQjA3NEY0NjlD
QzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVYbFVkanotaVJadWtpNWpH
WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhyZVNRaXFOdVhsVWRqei1pUlp1a2k1akdZUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzFBQjkvRkIwNzRGNDY5Q0M2MTFFRTlGQzY1QTIzQzRGOUFFMDIvRjYwOUIwMzA5
RDVGMTFFRTk0MDc2RTZGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ+QxAwQAZ/4aMA0GCSqGSIb3DQEBCwUAA4IBAQAUCgedCSgtLS3b
8EB7auqjdK9GNg/T3gfFITjW3CMZN0/jJ8NuJLLSjo4YivUjgyIxJl5jTVcv2ooh
7KSwMYf8A31YQi0Nzodxy2vyoiuwHARr3wAJb95jCf9ZnaKNGIvcpOOIrPWywqx/
Q5dOvmx9pbpTPFpvh/gzSxEqwwRDpm8ANJl7emKo3bF6gnv2lDqgBxxc0+Wk9IQH
ZJh2PBY6kvuj7xRpK1JoTkfOv7x/CrNdPRSzvAa2FCkLw5EOxlqchs+VHHbq6nbF
nATr6IeFzpn4cRGmMtrmrTbtlG51iMRvEBMesy8pSjGy1pn/6wzxO4Cl/nga10O8
cMrq40H/
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:35 2026 by rpki-client