Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/9AAB80560BD511F1920C67C12E3D8C67.roa
File:                     9AAB80560BD511F1920C67C12E3D8C67.roa (raw, json)
Hash identifier:          kqV3oKn3iSJ05FgfTJc78t84aqKB7m6Xr2Ot/p1Zm1k=
Subject key identifier:   F3:F7:20:57:37:DC:A9:CA:74:32:86:F9:88:5A:95:2A:1C:15:1D:28
Certificate issuer:       /CN=A9137157/serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F
Certificate serial:       0E
Authority key identifier: 77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/9AAB80560BD511F1920C67C12E3D8C67.roa
Signing time:             Sun 01 Mar 2026 05:35:51 +0000
ROA not before:           Tue 17 Feb 2026 07:55:47 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138655
IP address blocks:        103.140.31.0/24 maxlen: 24
                          2001:df0:a480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl
                          rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137157, serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F
        Validity
            Not Before: Feb 17 07:55:47 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3d037-6b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:db:d3:15:ed:65:1d:2e:6c:44:11:91:c4:5b:
                    76:ea:4a:99:38:9c:36:7a:8c:99:23:77:19:14:b9:
                    01:15:2d:c4:7a:40:9b:49:ed:a3:90:d9:f1:1e:6b:
                    04:35:2d:08:b2:7e:c1:f1:b1:78:fa:6e:b5:58:56:
                    0b:e5:cf:2f:70:11:53:bf:91:e5:ce:6f:33:30:89:
                    8d:1e:e2:b2:de:22:9e:5e:62:92:25:f8:f1:8d:c1:
                    3c:2d:c4:73:65:46:fa:24:a4:a9:d6:2b:31:f6:69:
                    6f:ad:05:04:c6:ce:53:e3:4e:2a:ea:09:11:7b:f3:
                    80:89:f3:9e:24:16:00:47:93:93:ab:44:9a:4b:99:
                    f6:5b:a1:63:04:25:15:96:10:76:63:72:18:9b:c2:
                    f0:3f:d7:0c:d8:ff:b3:50:34:8b:17:9c:1b:6b:bf:
                    7c:5e:e2:56:c7:66:db:d4:19:07:86:90:8e:2a:bc:
                    2b:07:4b:8e:c6:c4:43:a3:2b:ab:44:c5:8f:45:5e:
                    9e:f9:cb:ed:fe:84:76:3a:34:56:36:3e:44:2d:6a:
                    bd:8b:67:f2:52:78:b3:81:14:66:76:b9:e6:b6:d5:
                    55:4f:b6:c8:19:d2:d2:e7:74:22:c9:e0:cf:ab:07:
                    c8:c3:0b:b9:29:3f:0e:cb:33:3a:24:98:73:ba:31:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F7:20:57:37:DC:A9:CA:74:32:86:F9:88:5A:95:2A:1C:15:1D:28
            X509v3 Authority Key Identifier:
                keyid:77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/9AAB80560BD511F1920C67C12E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.31.0/24
                IPv6:
                  2001:df0:a480::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:52:3b:2f:cb:91:ee:07:32:15:93:26:22:40:91:86:b9:a2:
         bd:a6:95:ac:c7:ca:1e:02:9a:3d:b5:84:85:7b:90:00:43:bf:
         f8:7c:49:cc:99:8c:1b:59:93:76:a9:6f:c9:77:bb:7d:dd:6f:
         7c:94:a0:f0:95:28:13:85:43:a5:50:47:9b:98:26:e5:b4:80:
         6c:0c:36:c9:44:ad:43:66:a0:f1:14:8c:c6:55:6e:34:5e:12:
         27:5a:0b:9e:cc:ab:d9:44:49:19:79:e0:3c:d0:b6:c4:ee:39:
         8e:a0:4b:43:78:f5:00:b0:dd:06:e2:95:c7:d5:88:08:ae:7a:
         72:71:17:d9:51:37:58:f2:dc:c0:de:0f:8a:d3:bb:0b:50:d4:
         f0:79:8a:f3:39:b8:1d:d0:57:a8:7f:ad:7e:21:5f:dc:a3:da:
         9c:04:f0:c7:7c:8b:41:a2:d1:dc:dc:3b:a8:5a:04:c8:59:d7:
         5f:53:5a:3b:64:97:df:ab:f4:f3:5f:d4:c4:f5:b5:a3:f3:92:
         37:83:93:03:65:c4:ce:ae:77:64:4f:64:bf:19:57:06:82:ab:
         7b:4e:2a:fa:81:01:34:ae:f1:d9:f7:13:f6:10:3b:33:ac:2c:
         39:96:55:0f:f3:4e:9d:c0:bf:e6:36:e5:f8:38:dc:91:b5:82:
         68:20:52:46
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NzE1NzExMC8GA1UEBRMoNzc5Q0EwRDA5NTcwODUwMTZFN0QwMzVBNEVDQkEyNzgx
QUI3QzUwRjAeFw0yNjAyMTcwNzU1NDdaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkMDM3LTZiOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCV29MV7WUdLmxEEZHEW3bqSpk4nDZ6jJkjdxkUuQEVLcR6QJtJ7aOQ2fEeawQ1
LQiyfsHxsXj6brVYVgvlzy9wEVO/keXObzMwiY0e4rLeIp5eYpIl+PGNwTwtxHNl
RvokpKnWKzH2aW+tBQTGzlPjTirqCRF784CJ854kFgBHk5OrRJpLmfZboWMEJRWW
EHZjchibwvA/1wzY/7NQNIsXnBtrv3xe4lbHZtvUGQeGkI4qvCsHS47GxEOjK6tE
xY9FXp75y+3+hHY6NFY2PkQtar2LZ/JSeLOBFGZ2uea21VVPtsgZ0tLndCLJ4M+r
B8jDC7kpPw7LMzokmHO6MVgtAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU8/cgVzfc
qcp0Mob5iFqVKhwVHSgwHwYDVR0jBBgwFoAUd5yg0JVwhQFufQNaTsuieBq3xQ8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTU3LzY1Qjg4QjlDMEJD
RjExRjFCQkQxRkVEQTJDM0Q4QzY3L2Q1eWcwSlZ3aFFGdWZRTmFUc3VpZUJxM3hR
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZDV5ZzBKVndoUUZ1ZlFOYVRzdWllQnEzeFE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzE1Ny82NUI4OEI5QzBCQ0YxMUYxQkJEMUZFREEyQzNEOEM2Ny85QUFCODA1NjBC
RDUxMUYxOTIwQzY3QzEyRTNEOEM2Ny5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE
AgABMAYDBABnjB8wDwQCAAIwCQMHACABDfCkgDANBgkqhkiG9w0BAQsFAAOCAQEA
R1I7L8uR7gcyFZMmIkCRhrmivaaVrMfKHgKaPbWEhXuQAEO/+HxJzJmMG1mTdqlv
yXe7fd1vfJSg8JUoE4VDpVBHm5gm5bSAbAw2yUStQ2ag8RSMxlVuNF4SJ1oLnsyr
2URJGXngPNC2xO45jqBLQ3j1ALDdBuKVx9WICK56cnEX2VE3WPLcwN4PitO7C1DU
8HmK8zm4HdBXqH+tfiFf3KPanATwx3yLQaLR3Nw7qFoEyFnXX1NaO2SX36v081/U
xPW1o/OSN4OTA2XEzq53ZE9kvxlXBoKre04q+oEBNK7x2fcT9hA7M6wsOZZVD/NO
ncC/5jbl+DjckbWCaCBSRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:11:45 2026 by rpki-client