Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/9292DD74FDED11F086DAA842746F56BC.roa
File:                     9292DD74FDED11F086DAA842746F56BC.roa (raw, json)
Hash identifier:          Yzu3pWH4y9GuCGb9TT6hX9lZELNP6IotPZy2pUaOnf8=
Subject key identifier:   6B:ED:23:BF:8B:5A:7A:8E:39:E9:17:75:49:77:15:4F:ED:D4:28:4B
Certificate issuer:       /CN=A913277C/serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
Certificate serial:       46
Authority key identifier: F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/9292DD74FDED11F086DAA842746F56BC.roa
Signing time:             Sun 01 Mar 2026 18:51:03 +0000
ROA not before:           Fri 30 Jan 2026 15:08:46 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136798
IP address blocks:        103.96.128.0/23 maxlen: 24
                          103.96.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl
                          rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913277C, serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
        Validity
            Not Before: Jan 30 15:08:46 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48a97-5c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6c:ca:1b:e2:7d:71:7a:01:a4:90:19:30:bd:
                    eb:ef:2a:0b:2a:70:18:54:d8:47:96:24:b3:c2:07:
                    d6:85:e8:88:a9:4d:13:52:9e:8d:85:86:1a:a6:b9:
                    03:d0:7c:8f:c5:2c:06:43:60:be:72:eb:fb:b5:f0:
                    6f:4f:3c:2e:b4:08:9e:d7:10:20:c3:13:3f:54:5e:
                    16:df:19:7c:63:c8:41:cf:dd:69:3b:7c:a8:3b:b2:
                    be:a5:5b:b5:d2:7d:f7:5b:23:b1:e6:67:f7:7a:8a:
                    ff:d1:d8:4d:0f:61:ed:19:91:1d:06:94:c6:38:36:
                    1c:63:d3:9c:65:9c:a7:b5:b4:5f:f7:c6:13:c5:da:
                    bc:74:2d:fa:c3:0c:47:02:44:2e:4d:88:fe:54:eb:
                    d3:e9:a4:d3:96:5e:2f:7a:6e:8d:9e:4c:6c:88:a5:
                    8c:b0:de:e9:31:16:17:4c:6c:9c:b8:c1:8c:64:65:
                    ec:3c:d0:37:64:f9:35:9b:d7:3f:5a:a8:9f:a6:c9:
                    bd:d7:6c:fd:fa:6e:53:dd:6f:ad:82:4f:b4:6b:01:
                    cb:a5:c0:6f:05:6b:18:24:39:bc:c1:df:54:88:58:
                    2b:fc:f7:a7:f1:89:3a:12:47:06:6f:fa:cb:96:96:
                    31:36:05:94:5f:7d:d6:65:17:08:6d:4a:b0:f9:20:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:ED:23:BF:8B:5A:7A:8E:39:E9:17:75:49:77:15:4F:ED:D4:28:4B
            X509v3 Authority Key Identifier:
                keyid:F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/9292DD74FDED11F086DAA842746F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:0c:04:61:28:53:61:02:a1:22:98:0c:5b:77:e6:bd:be:
         f6:46:3c:0f:cd:7e:ea:d3:ef:75:75:b7:35:63:bc:42:48:7d:
         c4:91:cb:d9:e8:3b:e0:f6:91:6b:39:d7:a0:cc:5e:b6:ba:89:
         bb:84:ce:de:0b:a2:1c:a9:b1:77:ce:3b:63:63:5d:9e:d9:c2:
         9a:ec:ad:7a:3a:1a:34:95:51:dd:51:52:3f:42:b4:80:0d:e1:
         e2:bc:69:f1:4c:b0:1b:b7:61:2d:fd:f3:04:0a:20:23:31:9c:
         26:f6:e9:a9:90:fe:57:3f:34:10:2a:5f:b3:7b:4c:7d:52:36:
         bf:74:d3:dd:59:59:f6:47:c9:e3:22:5b:83:4b:f6:aa:00:78:
         07:88:b9:6e:e5:c0:e5:00:36:5a:0f:26:ec:fa:69:87:d5:2d:
         65:0d:9e:dc:c6:0c:a8:82:94:82:d4:46:81:93:a0:13:64:6d:
         df:ed:e8:e5:f4:67:50:d9:75:0f:b0:b9:4e:b4:0b:2c:70:a9:
         d5:23:f9:29:d3:e7:cb:c5:a4:47:83:e5:66:45:6b:00:f2:11:
         ad:bb:7d:db:75:86:80:76:49:ea:38:1e:23:3f:85:2e:6e:45:
         29:96:d6:79:bf:a1:2d:53:d8:b7:71:44:cb:5f:55:50:58:81:
         ce:a2:e4:71
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Mjc3QzExMC8GA1UEBRMoRjMzOURBNjFEOTNBNDk0MTNFOTA3RkM1QkQxNkFGOTY4
REZFOUFEMDAeFw0yNjAxMzAxNTA4NDZaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTQ4YTk3LTVjNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdbMob4n1xegGkkBkwvevvKgsqcBhU2EeWJLPCB9aF6IipTRNSno2FhhqmuQPQ
fI/FLAZDYL5y6/u18G9PPC60CJ7XECDDEz9UXhbfGXxjyEHP3Wk7fKg7sr6lW7XS
ffdbI7HmZ/d6iv/R2E0PYe0ZkR0GlMY4Nhxj05xlnKe1tF/3xhPF2rx0LfrDDEcC
RC5NiP5U69PppNOWXi96bo2eTGyIpYyw3ukxFhdMbJy4wYxkZew80Ddk+TWb1z9a
qJ+myb3XbP36blPdb62CT7RrAculwG8FaxgkObzB31SIWCv896fxiToSRwZv+suW
ljE2BZRffdZlFwhtSrD5IPTTAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUa+0jv4ta
eo456Rd1SXcVT+3UKEswHwYDVR0jBBgwFoAU8znaYdk6SUE+kH/FvRavlo3+mtAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNzdDL0I5N0M3Mzk2QzlG
MjExRURBMUQ5OUU2NUM0RjlBRTAyLzh6bmFZZGs2U1VFLWtIX0Z2UmF2bG8zLW10
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOHpuYVlkazZTVUUta0hfRnZSYXZsbzMtbXRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi85MjkyREQ3NEZE
RUQxMUYwODZEQUE4NDI3NDZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnYIAwDQYJKoZIhvcNAQELBQADggEBACbODARhKFNhAqEimAxbd+a9
vvZGPA/NfurT73V1tzVjvEJIfcSRy9noO+D2kWs516DMXra6ibuEzt4LohypsXfO
O2NjXZ7ZwprsrXo6GjSVUd1RUj9CtIAN4eK8afFMsBu3YS398wQKICMxnCb26amQ
/lc/NBAqX7N7TH1SNr90091ZWfZHyeMiW4NL9qoAeAeIuW7lwOUANloPJuz6aYfV
LWUNntzGDKiClILURoGToBNkbd/t6OX0Z1DZdQ+wuU60CyxwqdUj+SnT58vFpEeD
5WZFawDyEa27fdt1hoB2Seo4HiM/hS5uRSmW1nm/oS1T2LdxRMtfVVBYgc6i5HE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:11:54 2026 by rpki-client