Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa
File:                     3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (raw, json)
Hash identifier:          yo3O97PNauOrZmquHkge2qdtQQu3vWjMLnfcOcMqiR0=
Subject key identifier:   CD:52:5D:A0:46:78:34:0B:76:7D:17:A9:13:04:99:7F:98:EF:17:6E
Certificate issuer:       /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129
Certificate serial:       0D38
Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa
Signing time:             Thu 20 Aug 2026 18:35:50 +0000
ROA not before:           Thu 20 Aug 2026 18:35:50 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139467
IP address blocks:        103.141.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl
                          rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3384 (0xd38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A02, serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129
        Validity
            Not Before: Aug 20 18:35:50 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a874906-2920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ac:2f:5c:8b:14:f2:f6:78:53:6a:9c:dc:b6:
                    0f:71:f8:01:c2:e4:17:d3:86:cf:a3:87:52:76:f5:
                    14:90:61:ab:a2:ce:9e:a1:77:03:57:e6:60:d7:f2:
                    28:b8:51:de:a4:02:6e:bb:58:04:45:b5:7d:3e:dd:
                    a9:6f:81:19:51:4c:d4:8b:b0:fd:b4:d0:f7:f5:e8:
                    8c:5c:f2:c4:f1:ed:8f:27:a5:21:c1:30:39:96:6c:
                    ed:c1:f4:07:e0:e6:41:91:fc:f8:da:88:90:37:4d:
                    8d:16:23:48:ed:f5:34:33:b8:45:6a:cd:a3:1d:fe:
                    92:2f:7d:1e:af:73:1f:df:c9:0c:b9:a3:ba:9c:7d:
                    f4:fb:8c:0f:8d:54:e5:ec:e0:fd:5d:2c:f9:7b:1e:
                    c5:3b:94:32:ac:80:e6:c5:68:ea:2c:d7:ae:ac:09:
                    44:4b:49:a7:e1:6a:c3:9f:b4:2b:d4:de:2f:ab:52:
                    3c:d0:b5:c9:f5:03:44:e4:ac:0f:94:ca:e7:1f:33:
                    9e:b8:d4:ae:36:e6:52:37:ec:4c:56:40:34:47:ed:
                    f6:c2:2f:e6:55:91:b5:9e:ee:64:1c:64:1a:e0:54:
                    5c:51:3b:15:0e:42:32:67:c7:59:6f:56:76:3c:78:
                    31:09:f6:69:54:d0:4d:07:b5:c2:36:fd:bb:2c:88:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:52:5D:A0:46:78:34:0B:76:7D:17:A9:13:04:99:7F:98:EF:17:6E
            X509v3 Authority Key Identifier:
                keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:ad:7c:1e:ea:9e:ef:37:ab:09:9b:63:68:65:ff:0b:da:61:
         0b:80:33:3e:c6:56:c8:bf:a9:10:a0:8e:39:11:5f:b6:69:a2:
         50:60:ee:d8:4d:d9:45:9e:71:be:7d:0d:28:e1:b0:c0:3f:f9:
         4b:41:48:bc:98:5d:59:9c:e1:29:a2:c6:47:28:63:91:65:03:
         cb:cc:a6:cc:df:18:f0:6e:ac:4a:17:78:3a:d5:89:56:55:80:
         4c:49:f5:4d:09:93:7a:34:5a:a6:b1:24:d3:10:33:c6:7e:4f:
         aa:fc:23:21:39:19:b3:d8:79:56:c7:cb:20:d2:9f:50:98:bd:
         4a:4a:51:ff:73:8e:b1:02:d8:fd:45:e0:4a:ca:83:e3:49:67:
         1d:43:4b:1e:96:bc:5c:4d:00:91:63:30:4a:e7:94:9d:b5:f1:
         06:e3:6d:82:35:00:ea:f7:2e:c4:d8:81:3a:9f:e8:e2:6b:d3:
         6a:8b:5b:83:d4:ee:4b:81:6c:e8:51:62:15:72:89:74:b9:34:
         dc:de:60:e8:33:9d:f3:d2:15:f5:ea:1f:71:67:9b:d8:2d:f4:
         6b:61:e7:a9:cb:25:31:52:cd:84:51:1b:6f:e9:2b:74:ec:9b:
         d9:cc:16:b4:e5:7b:01:04:4f:87:bd:12:5a:9e:12:ef:a5:cd:
         af:44:02:db
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0
MzQ1MTQxMjkwHhcNMjYwODIwMTgzNTUwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3NDkwNi0yOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhKwvXIsU8vZ4U2qc3LYPcfgBwuQX04bPo4dSdvUUkGGros6eoXcDV+Zg1/Io
uFHepAJuu1gERbV9Pt2pb4EZUUzUi7D9tND39eiMXPLE8e2PJ6UhwTA5lmztwfQH
4OZBkfz42oiQN02NFiNI7fU0M7hFas2jHf6SL30er3Mf38kMuaO6nH30+4wPjVTl
7OD9XSz5ex7FO5QyrIDmxWjqLNeurAlES0mn4WrDn7Qr1N4vq1I80LXJ9QNE5KwP
lMrnHzOeuNSuNuZSN+xMVkA0R+32wi/mVZG1nu5kHGQa4FRcUTsVDkIyZ8dZb1Z2
PHgxCfZpVNBNB7XCNv27LIjnowIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM1SXaBG
eDQLdn0XqRMEmX+Y7xduMB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0
NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR
U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZBMDIvOERDRUU5RkMwNDVFMTFFQUFEQjdERjNBQzRGOUFFMDIvM0YxQjBFRjIw
NDVGMTFFQTg3QTNCRDNCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ43MMA0GCSqGSIb3DQEBCwUAA4IBAQB0rXwe6p7vN6sJm2NoZf8L
2mELgDM+xlbIv6kQoI45EV+2aaJQYO7YTdlFnnG+fQ0o4bDAP/lLQUi8mF1ZnOEp
osZHKGORZQPLzKbM3xjwbqxKF3g61YlWVYBMSfVNCZN6NFqmsSTTEDPGfk+q/CMh
ORmz2HlWx8sg0p9QmL1KSlH/c46xAtj9ReBKyoPjSWcdQ0selrxcTQCRYzBK55Sd
tfEG422CNQDq9y7E2IE6n+jia9Nqi1uD1O5LgWzoUWIVcol0uTTc3mDoM53z0hX1
6h9xZ5vYLfRrYeepyyUxUs2EURtv6St07JvZzBa05XsBBE+HvRJanhLvpc2vRALb
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:32 2026 by rpki-client