Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/BA310DEC23B611E98E5E6062C4F9AE02.roa
File:                     BA310DEC23B611E98E5E6062C4F9AE02.roa (raw, json)
Hash identifier:          JilViRKDlmsk+N83QmxDs8LmHyCkZAyKQozoC1ANkFc=
Subject key identifier:   E4:FE:24:BB:2D:C0:4A:F0:F4:5A:BF:E9:C1:92:B0:11:98:B1:86:D9
Certificate issuer:       /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
Certificate serial:       1169
Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/BA310DEC23B611E98E5E6062C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:16:11 +0000
ROA not before:           Wed 30 Apr 2025 17:26:31 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     58689
IP address blocks:        103.132.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl
                          rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4457 (0x1169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131D31, serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
        Validity
            Not Before: Apr 30 17:26:31 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a42e0b-4186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:58:c7:97:cd:d9:74:bf:38:fa:71:1e:e4:15:
                    7e:80:a8:29:55:61:27:c8:f2:f9:db:09:35:10:dc:
                    a9:64:d2:d1:aa:2f:81:12:d2:84:ed:98:9d:ad:47:
                    f6:87:43:67:40:00:15:51:67:c5:d2:9a:64:2a:70:
                    74:8d:2c:84:ba:63:a8:66:56:87:5f:49:d4:b2:c0:
                    00:3d:8e:9a:da:33:ea:76:34:d9:da:e8:a6:86:4a:
                    44:19:c7:16:f3:1f:85:44:a7:01:86:71:8b:15:3a:
                    91:62:b0:f9:59:0e:b8:40:9b:f7:6c:2f:d0:7e:33:
                    c9:d5:58:81:3d:81:2e:73:89:c5:20:0a:2f:26:28:
                    3b:65:f5:8b:27:a0:4b:d7:5d:4a:35:74:e2:c2:56:
                    60:5c:13:cb:3c:f5:4f:5a:99:da:0a:ad:24:0a:d3:
                    e1:ab:ea:be:c1:1f:00:eb:b3:8a:d7:3f:43:6c:d9:
                    f4:dc:03:2c:3d:80:e3:a2:64:71:7e:e9:c8:b0:36:
                    05:28:36:c8:d0:8a:66:65:80:17:ba:ca:0b:cc:27:
                    27:44:8b:db:b6:c1:08:37:d5:6e:17:36:3e:3c:6c:
                    57:09:6a:74:d9:94:cf:3e:ac:7b:64:27:e5:6f:df:
                    05:9e:97:3f:c3:e8:34:02:21:7c:58:2a:3c:44:03:
                    ef:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FE:24:BB:2D:C0:4A:F0:F4:5A:BF:E9:C1:92:B0:11:98:B1:86:D9
            X509v3 Authority Key Identifier:
                keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/BA310DEC23B611E98E5E6062C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:b3:47:e0:f5:a4:38:c8:a8:0c:43:52:3e:ad:57:e3:71:
         df:21:5f:b4:37:a9:d4:2e:48:f9:e1:c5:55:a9:ad:d7:d1:6e:
         b0:33:81:9a:96:77:15:aa:6c:39:2d:79:6d:b7:e0:f3:e0:b9:
         23:23:e5:21:3a:06:4c:11:ae:70:49:e5:c7:8c:56:f0:36:31:
         36:3e:6e:01:c0:48:5f:d1:f1:4a:a5:ae:bc:a1:8d:e8:d6:fd:
         78:2f:33:94:4a:ba:50:1f:da:16:c3:f6:02:5b:0e:c0:1b:72:
         34:74:4c:08:0f:cf:2a:9a:f1:d7:19:20:d3:b0:c5:8f:8b:4f:
         dc:7a:55:ab:f5:f8:4c:04:43:4f:e2:1c:2c:f2:dc:38:85:c2:
         c4:9e:bc:ad:ae:6d:f2:1a:08:d6:63:3f:f1:a5:f3:d6:29:97:
         28:98:fd:48:30:7e:71:4b:7e:10:c0:a0:ab:e5:49:14:6c:a9:
         d7:fe:17:83:45:29:f8:5e:b0:be:d0:94:ce:de:01:a9:e4:a2:
         cf:0a:c7:4f:89:70:46:dd:25:2e:4f:c1:1b:7b:5e:73:c1:72:
         61:f9:01:73:73:6d:db:ea:d1:f7:83:8a:75:5c:4f:70:95:2a:
         49:26:07:ac:84:1e:bb:a5:a0:20:8b:d4:e2:74:bc:3a:e6:f5:
         2b:52:6e:15
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFEMzExMTAvBgNVBAUTKDYwRDEzMTgzRDM5REU2OTU2NTYwMjMxRTdFMDMxN0U2
OUNCQzZDMEYwHhcNMjUwNDMwMTcyNjMxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmUwYi00MTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA81jHl83ZdL84+nEe5BV+gKgpVWEnyPL52wk1ENypZNLRqi+BEtKE7ZidrUf2
h0NnQAAVUWfF0ppkKnB0jSyEumOoZlaHX0nUssAAPY6a2jPqdjTZ2uimhkpEGccW
8x+FRKcBhnGLFTqRYrD5WQ64QJv3bC/QfjPJ1ViBPYEuc4nFIAovJig7ZfWLJ6BL
111KNXTiwlZgXBPLPPVPWpnaCq0kCtPhq+q+wR8A67OK1z9DbNn03AMsPYDjomRx
funIsDYFKDbI0IpmZYAXusoLzCcnRIvbtsEIN9VuFzY+PGxXCWp02ZTPPqx7ZCfl
b98Fnpc/w+g0AiF8WCo8RAPviQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOT+JLst
wErw9Fq/6cGSsBGYsYbZMB8GA1UdIwQYMBaAFGDRMYPTneaVZWAjHn4DF+acvGwP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQzMS82NUVGMjk2QTIz
MTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVwVmxZQ01lZmdNWDVweThi
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lORXhnOU9kNXBWbFlDTWVmZ01YNXB5OGJBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzFEMzEvNjVFRjI5NkEyMzEzMTFFOUEyOUJCMTc0QzRGOUFFMDIvQkEzMTBERUMy
M0I2MTFFOThFNUU2MDYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4TcMA0GCSqGSIb3DQEBCwUAA4IBAQAVHbNH4PWkOMioDENSPq1X
43HfIV+0N6nULkj54cVVqa3X0W6wM4GalncVqmw5LXltt+Dz4LkjI+UhOgZMEa5w
SeXHjFbwNjE2Pm4BwEhf0fFKpa68oY3o1v14LzOUSrpQH9oWw/YCWw7AG3I0dEwI
D88qmvHXGSDTsMWPi0/celWr9fhMBENP4hws8tw4hcLEnrytrm3yGgjWYz/xpfPW
KZcomP1IMH5xS34QwKCr5UkUbKnX/heDRSn4XrC+0JTO3gGp5KLPCsdPiXBG3SUu
T8Ebe15zwXJh+QFzc23b6tH3g4p1XE9wlSpJJgeshB67paAgi9TidLw65vUrUm4V
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:29 2026 by rpki-client