Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/92F8EAF428F511EDA8D1655FC4F9AE02.roa
File:                     92F8EAF428F511EDA8D1655FC4F9AE02.roa (raw, json)
Hash identifier:          tdPFc3ZIU4MURGCRB9IQE7kaWKg+x9QZadMs0iq6Ysk=
Subject key identifier:   57:4B:A3:7D:41:FC:CA:96:98:3F:70:5E:2C:B7:5C:98:16:9D:3C:E1
Certificate issuer:       /CN=A913EF8E/serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
Certificate serial:       02F4
Authority key identifier: 8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/92F8EAF428F511EDA8D1655FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:06:52 +0000
ROA not before:           Wed 03 Sep 2025 02:18:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150132
IP address blocks:        103.191.178.0/23 maxlen: 23
                          103.191.178.0/24 maxlen: 24
                          103.191.179.0/24 maxlen: 24
                          2400:97e0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl
                          rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF8E, serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
        Validity
            Not Before: Sep  3 02:18:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a401ac-2c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:9b:64:ff:6f:e5:59:01:9f:90:09:07:7e:
                    bd:8e:e5:f9:b6:60:94:97:47:d7:2b:54:d7:d4:6b:
                    90:2f:f2:eb:9a:14:bb:70:89:49:a5:88:be:90:e7:
                    0f:65:af:6f:ef:d6:1f:8d:98:02:45:90:35:22:e8:
                    ee:df:8f:45:da:bb:80:df:8d:31:1c:fa:86:e5:19:
                    e6:f8:75:cb:fd:36:1e:99:de:a1:74:0f:2a:8f:c3:
                    36:58:2c:51:93:0a:73:a1:3f:eb:63:18:f4:66:47:
                    93:c5:f7:ce:36:d8:30:f6:33:db:ba:2a:9f:49:a9:
                    33:54:c6:72:a5:7a:dc:73:2f:fb:9f:86:10:93:60:
                    5e:86:2e:aa:2f:94:67:f4:1a:38:99:1d:cf:78:c6:
                    e9:03:ec:90:e5:2b:b5:43:01:5a:75:1c:52:7a:29:
                    d2:1e:27:27:a6:0d:e0:0f:ff:78:1d:74:ab:ec:a5:
                    bf:a1:11:a8:04:aa:c7:d1:a9:40:2b:38:47:5a:dc:
                    c8:c7:f5:1d:d7:76:28:dc:ea:f2:ab:e5:c8:d6:c4:
                    1b:a8:d2:a8:ca:6e:05:fe:3c:12:d9:66:8f:ac:7a:
                    5c:cf:f9:5d:15:58:8f:a3:56:8e:c8:ce:12:91:77:
                    5f:17:cb:0e:2c:df:8a:82:66:77:82:1f:f6:2a:9e:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4B:A3:7D:41:FC:CA:96:98:3F:70:5E:2C:B7:5C:98:16:9D:3C:E1
            X509v3 Authority Key Identifier:
                keyid:8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/92F8EAF428F511EDA8D1655FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.178.0/23
                IPv6:
                  2400:97e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d3:1f:3d:c2:dd:fd:ed:5a:cf:b6:86:92:cb:6f:8b:34:76:98:
         8d:a7:ed:21:8e:9f:99:33:eb:09:56:b6:2e:16:39:c6:5c:75:
         38:8f:fb:f3:14:2b:71:6a:6a:85:37:9a:99:56:da:c0:a6:c6:
         e2:af:d7:9c:e8:1c:0a:54:66:4b:65:aa:0b:6e:80:f8:46:19:
         e5:41:b7:ef:fe:68:21:e1:36:93:fc:37:d8:6e:e4:2a:cb:a5:
         18:37:23:59:9d:58:8a:c3:90:7a:d6:0b:02:ff:97:d4:5d:5b:
         e1:0a:98:fb:3a:5d:41:48:94:b6:14:4e:0b:6b:69:ba:46:3b:
         19:af:50:f3:2e:0c:bb:3e:4b:47:82:cc:40:de:9e:dd:64:f0:
         59:88:0d:5d:d2:92:1c:7a:44:3d:46:82:36:9f:b7:56:10:92:
         de:0d:7c:a1:e1:7d:fc:d0:81:0c:73:87:e2:8c:48:25:a1:83:
         34:21:73:6c:b7:20:18:92:f5:c3:32:b8:04:dd:b3:0e:46:75:
         ae:26:f4:fc:1b:6d:7f:7b:5a:b5:45:30:01:42:a8:e3:98:41:
         80:94:b1:d0:23:da:3f:e5:81:97:e1:4c:79:ee:47:8f:fe:d6:
         32:73:25:72:fa:f8:e4:eb:1d:97:9f:7a:29:d5:e0:dc:eb:25:
         cc:56:66:9d
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VGOEUxMTAvBgNVBAUTKDhFMTZBMTA2QURGNDEzQUZGRkM1OEYxMDExOTI3NEY3
MDBDRkE1OTMwHhcNMjUwOTAzMDIxODM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDFhYy0yYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwGbZP9v5VkBn5AJB369juX5tmCUl0fXK1TX1GuQL/LrmhS7cIlJpYi+kOcP
Za9v79YfjZgCRZA1Iuju349F2ruA340xHPqG5Rnm+HXL/TYemd6hdA8qj8M2WCxR
kwpzoT/rYxj0ZkeTxffONtgw9jPbuiqfSakzVMZypXrccy/7n4YQk2Behi6qL5Rn
9Bo4mR3PeMbpA+yQ5Su1QwFadRxSeinSHicnpg3gD/94HXSr7KW/oRGoBKrH0alA
KzhHWtzIx/Ud13Yo3Oryq+XI1sQbqNKoym4F/jwS2WaPrHpcz/ldFViPo1aOyM4S
kXdfF8sOLN+KgmZ3gh/2Kp6PgwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFdLo31B
/MqWmD9wXiy3XJgWnTzhMB8GA1UdIwQYMBaAFI4WoQat9BOv/8WPEBGSdPcAz6WT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUY4RS8yQUIyNDkxODE3
MUIxMUVEQjM1NDRENjhDNEY5QUUwMi9qaGFoQnEzMEU2X194WThRRVpKMDl3RFBw
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2poYWhCcTMwRTZfX3hZOFFFWkowOXdEUHBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0VGOEUvMkFCMjQ5MTgxNzFCMTFFREIzNTQ0RDY4QzRGOUFFMDIvOTJGOEVBRjQy
OEY1MTFFREE4RDE2NTVGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ7+yMA0EAgACMAcDBQAkAJfgMA0GCSqGSIb3DQEBCwUAA4IBAQDT
Hz3C3f3tWs+2hpLLb4s0dpiNp+0hjp+ZM+sJVrYuFjnGXHU4j/vzFCtxamqFN5qZ
VtrApsbir9ec6BwKVGZLZaoLboD4RhnlQbfv/mgh4TaT/DfYbuQqy6UYNyNZnViK
w5B61gsC/5fUXVvhCpj7Ol1BSJS2FE4La2m6RjsZr1DzLgy7PktHgsxA3p7dZPBZ
iA1d0pIcekQ9RoI2n7dWEJLeDXyh4X380IEMc4fijEgloYM0IXNstyAYkvXDMrgE
3bMORnWuJvT8G21/e1q1RTABQqjjmEGAlLHQI9o/5YGX4Ux57keP/tYycyVy+vjk
6x2Xn3op1eDc6yXMVmad
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:33 2026 by rpki-client