Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa
File:                     E1201A0422D611EFAE700044C4F9AE02.roa (raw, json)
Hash identifier:          vKRLCMHI6DzeezZqcA22y1WOCwRUjFKs9GH1QdWcjCQ=
Subject key identifier:   82:C6:82:4D:53:0F:6B:A7:B0:7F:0A:B3:2A:FA:1F:7D:1A:73:50:8E
Certificate issuer:       /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Certificate serial:       0703
Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:57:30 +0000
ROA not before:           Fri 30 May 2025 23:33:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     209242
IP address blocks:        103.15.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
                          rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1795 (0x703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
        Validity
            Not Before: May 30 23:33:39 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a453da-6b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:df:48:63:75:c5:0d:b8:f7:d6:9e:f5:6e:
                    9c:e1:0a:c9:4b:8a:a0:ef:05:f2:f8:a7:81:d6:e1:
                    6c:fd:f4:20:cf:24:85:5f:43:65:3e:b5:fa:69:33:
                    c6:b8:3a:07:82:48:d4:45:34:48:88:28:0e:fa:4d:
                    de:22:79:bb:77:6a:8a:b2:d4:59:cd:57:78:ea:18:
                    40:e9:ce:a4:77:af:de:01:9b:2e:f7:00:c0:00:f1:
                    57:3a:a9:4e:b0:e5:9a:7e:97:26:ef:ab:f0:cd:c4:
                    3f:a7:15:52:6e:60:d8:7e:3c:95:19:44:12:ce:c4:
                    4d:c0:85:73:34:62:cd:1f:2d:47:2f:bb:a0:7e:d7:
                    45:14:58:3e:e3:60:ba:0c:3f:00:32:e3:1c:55:d1:
                    64:93:2b:74:a7:49:52:17:24:04:1d:3c:d3:b3:8f:
                    ed:1a:57:c1:5d:27:74:1c:f7:2f:d9:8d:77:b2:1e:
                    a4:3d:40:56:a8:00:7c:eb:18:2a:15:d1:82:68:a0:
                    04:cf:7f:c7:27:53:a9:8b:ad:5d:c2:46:e6:71:05:
                    38:29:67:e0:e8:d7:43:1b:a0:0b:17:49:47:9f:1e:
                    a6:ac:f8:3a:0c:e3:b5:c2:37:86:f7:96:1f:fb:7c:
                    aa:3b:f6:2e:06:9d:d0:46:8b:f5:8e:09:55:e4:72:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C6:82:4D:53:0F:6B:A7:B0:7F:0A:B3:2A:FA:1F:7D:1A:73:50:8E
            X509v3 Authority Key Identifier:
                keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:86:f3:4d:54:ae:12:f9:2c:e1:3d:42:75:29:df:fc:15:87:
         c4:29:ab:f4:34:8d:07:fb:72:12:9a:3e:38:c9:5f:e5:4d:74:
         b7:84:24:4b:3c:c3:b4:50:86:56:91:7a:ed:aa:d0:f4:94:72:
         83:0a:9d:b2:6d:d6:85:06:64:00:44:e7:ec:e6:12:6f:48:83:
         71:44:39:0b:f0:7b:93:1d:ae:20:a9:28:80:d8:9b:32:e1:54:
         99:e9:28:06:f2:c8:88:b9:26:f8:ef:ba:05:8b:d9:76:ca:9c:
         11:5a:34:8b:3e:e2:5c:be:70:76:a3:5c:d2:4c:ab:6f:01:c0:
         4c:fa:df:8d:f7:f6:e2:70:94:8e:68:52:2c:49:30:7a:3a:68:
         b7:08:b6:ea:57:3e:33:e2:1c:b0:11:e1:dd:f9:d2:61:9a:ba:
         9d:91:5f:71:7d:72:5c:56:ef:9a:0c:84:88:ce:9d:21:7d:af:
         39:07:ae:62:df:0e:51:c6:59:d9:d1:0e:f8:b1:9e:90:86:62:
         81:d8:30:52:6d:22:4a:85:62:28:b5:97:16:ec:85:b4:5d:19:
         26:e4:a2:4b:49:59:f4:45:10:e8:9f:73:d1:cc:a3:d7:65:99:
         ba:3f:19:86:3c:76:39:e3:74:fa:d0:6d:86:d9:27:6a:b3:4f:
         3d:b9:f0:78
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3
Q0ZGRTc3RUYwHhcNMjUwNTMwMjMzMzM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTNkYS02YjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArg3fSGN1xQ2499ae9W6c4QrJS4qg7wXy+KeB1uFs/fQgzySFX0NlPrX6aTPG
uDoHgkjURTRIiCgO+k3eInm7d2qKstRZzVd46hhA6c6kd6/eAZsu9wDAAPFXOqlO
sOWafpcm76vwzcQ/pxVSbmDYfjyVGUQSzsRNwIVzNGLNHy1HL7ugftdFFFg+42C6
DD8AMuMcVdFkkyt0p0lSFyQEHTzTs4/tGlfBXSd0HPcv2Y13sh6kPUBWqAB86xgq
FdGCaKAEz3/HJ1Opi61dwkbmcQU4KWfg6NdDG6ALF0lHnx6mrPg6DOO1wjeG95Yf
+3yqO/YuBp3QRov1jglV5HJUxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFILGgk1T
D2unsH8Ksyr6H30ac1COMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy
MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzJCNEQvQzE5OUUwMDZCMjA1MTFFQkFFQUU5RjEwQzRGOUFFMDIvRTEyMDFBMDQy
MkQ2MTFFRkFFNzAwMDQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZw9VMA0GCSqGSIb3DQEBCwUAA4IBAQC6hvNNVK4S+SzhPUJ1Kd/8
FYfEKav0NI0H+3ISmj44yV/lTXS3hCRLPMO0UIZWkXrtqtD0lHKDCp2ybdaFBmQA
ROfs5hJvSINxRDkL8HuTHa4gqSiA2Jsy4VSZ6SgG8siIuSb477oFi9l2ypwRWjSL
PuJcvnB2o1zSTKtvAcBM+t+N9/bicJSOaFIsSTB6Omi3CLbqVz4z4hywEeHd+dJh
mrqdkV9xfXJcVu+aDISIzp0hfa85B65i3w5RxlnZ0Q74sZ6QhmKB2DBSbSJKhWIo
tZcW7IW0XRkm5KJLSVn0RRDon3PRzKPXZZm6PxmGPHY543T60G2G2Sdqs089ufB4
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:00 2026 by rpki-client