Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
File:                     1396BBE630E811EEAE1F1212C4F9AE02.roa (raw, json)
Hash identifier:          CuU/s3UKS9k04hjKJm9gWDdp3yaB5Ydqq+bcVnMC/ag=
Subject key identifier:   3E:92:C0:81:21:54:7D:B4:8B:86:FB:96:9E:96:B4:82:CC:65:6F:34
Certificate issuer:       /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial:       073D
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:12:33 +0000
ROA not before:           Fri 30 Jan 2026 22:18:09 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     198584
IP address blocks:        103.161.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
                          rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853 (0x73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
        Validity
            Not Before: Jan 30 22:18:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44950-20b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:82:35:ec:3c:d0:f1:f1:81:d6:21:d4:ce:
                    bb:08:23:a8:42:5a:aa:05:62:e6:b0:c9:1d:73:03:
                    8c:54:1c:f3:46:77:fe:1b:24:44:c4:bb:c8:34:da:
                    d7:66:13:34:4e:69:07:bf:57:57:c7:2c:76:c8:5a:
                    fb:22:4b:1c:4b:b7:b6:09:aa:54:c2:c7:22:9c:81:
                    40:36:19:5c:d1:00:64:8b:14:c7:18:20:2d:5c:ac:
                    b3:7c:5c:03:77:08:c7:aa:a5:93:d8:82:36:6a:51:
                    64:95:1a:17:ba:95:b4:54:83:a0:64:a7:9e:8e:78:
                    61:58:e6:4d:c1:4e:26:c2:f0:3c:98:5a:fc:c5:d2:
                    35:16:7d:a7:02:7d:ef:37:74:b1:7b:2b:d0:95:ef:
                    13:76:c0:a0:c3:19:a2:ad:ff:db:fd:d6:9f:d6:b4:
                    ef:c6:1e:7d:56:cc:b2:1c:10:65:ba:5f:80:e6:58:
                    20:93:0a:2f:93:18:44:4a:d2:cb:96:70:10:7f:0d:
                    15:b6:3c:bc:6a:7f:43:98:0e:06:4d:19:d7:c3:cd:
                    b9:4b:ba:d5:97:f9:37:14:42:3f:79:b0:a0:c1:25:
                    37:e1:d4:fc:5e:0e:58:7c:62:b6:7a:ce:91:b9:c1:
                    7b:ec:f8:e6:6e:7b:f6:b8:19:25:e1:db:41:c8:1d:
                    8f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:92:C0:81:21:54:7D:B4:8B:86:FB:96:9E:96:B4:82:CC:65:6F:34
            X509v3 Authority Key Identifier:
                keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:c0:24:9f:c2:6b:ca:59:82:1b:5c:d3:8a:3f:64:fc:26:9e:
         e9:88:c6:1b:cc:bf:4d:65:21:31:9f:0a:c9:f0:bf:4e:e0:dd:
         97:35:60:08:80:d3:b0:90:a2:be:fc:27:2d:5c:13:e5:f4:f9:
         6d:d0:ef:d8:55:e0:bd:cf:2d:14:43:0e:f7:96:29:e8:9f:e8:
         88:09:6c:ce:c4:46:1c:36:1c:47:b3:6e:93:07:3a:8e:16:2e:
         4b:b4:03:ed:d1:f2:65:70:c0:7d:3b:00:06:e6:ef:4d:92:97:
         06:bf:ae:15:38:f3:02:28:87:d4:c1:31:be:84:ea:23:fa:12:
         45:b6:84:3e:6d:e9:b1:7b:3c:e9:96:1a:ba:02:9e:02:58:4b:
         6f:b4:a1:89:46:85:8e:1a:63:87:c8:42:d7:e5:db:a9:44:4c:
         38:96:93:3f:12:7f:c9:16:fc:f3:01:25:f7:b3:4f:1a:82:74:
         30:4c:cc:48:f5:49:e2:61:12:54:09:84:18:be:b1:c9:b9:d2:
         0b:c7:27:7c:a9:95:f7:c3:93:5b:82:7c:02:9b:e9:f2:9c:8a:
         41:26:1a:2a:a9:98:81:4c:40:e3:89:a9:42:26:e7:fa:ec:68:
         d6:53:9a:ee:2d:5b:f6:c8:3e:03:55:0d:d5:02:f2:e5:f0:ce:
         9f:b2:88:00
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVGM0MxMTAvBgNVBAUTKDIzQjMzQjkwMTZFMzExRUVBNkI3MjFDOEI5MzkzOUZC
MUE4NzBCRUMwHhcNMjYwMTMwMjIxODA5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDk1MC0yMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyuGCNew80PHxgdYh1M67CCOoQlqqBWLmsMkdcwOMVBzzRnf+GyRExLvINNrX
ZhM0TmkHv1dXxyx2yFr7IkscS7e2CapUwscinIFANhlc0QBkixTHGCAtXKyzfFwD
dwjHqqWT2II2alFklRoXupW0VIOgZKeejnhhWOZNwU4mwvA8mFr8xdI1Fn2nAn3v
N3SxeyvQle8TdsCgwxmirf/b/daf1rTvxh59VsyyHBBlul+A5lggkwovkxhEStLL
lnAQfw0Vtjy8an9DmA4GTRnXw825S7rVl/k3FEI/ebCgwSU34dT8Xg5YfGK2es6R
ucF77Pjmbnv2uBkl4dtByB2PnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD6SwIEh
VH20i4b7lp6WtILMZW80MB8GA1UdIwQYMBaAFCOzO5AW4xHuprchyLk5Ofsahwvs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYzQy80Nzg2ODM2QTZB
QzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVlNm10eUhJdVRrNS14cUhD
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k3TTdrQmJqRWU2bXR5SEl1VGs1LXhxSEMtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzVGM0MvNDc4NjgzNkE2QUM5MTFFQjg2Q0I2QjIwQzRGOUFFMDIvMTM5NkJCRTYz
MEU4MTFFRUFFMUYxMjEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6EiMA0GCSqGSIb3DQEBCwUAA4IBAQABwCSfwmvKWYIbXNOKP2T8
Jp7piMYbzL9NZSExnwrJ8L9O4N2XNWAIgNOwkKK+/CctXBPl9Plt0O/YVeC9zy0U
Qw73linon+iICWzOxEYcNhxHs26TBzqOFi5LtAPt0fJlcMB9OwAG5u9NkpcGv64V
OPMCKIfUwTG+hOoj+hJFtoQ+bemxezzplhq6Ap4CWEtvtKGJRoWOGmOHyELX5dup
REw4lpM/En/JFvzzASX3s08agnQwTMxI9UniYRJUCYQYvrHJudILxyd8qZX3w5Nb
gnwCm+nynIpBJhoqqZiBTEDjialCJuf67GjWU5ruLVv2yD4DVQ3VAvLl8M6fsogA
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:49 2026 by rpki-client