Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/933818FEAA5211F1818066A45B11F970.roa
File:                     933818FEAA5211F1818066A45B11F970.roa (raw, json)
Hash identifier:          j2wMajzc8ldGDlXfJaOqXpoNKnbKY5MPta10zYBoEMs=
Subject key identifier:   CE:F6:6C:4E:E5:E3:93:E7:49:7B:25:15:6E:82:AA:F7:3F:81:7E:BA
Certificate issuer:       /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial:       0618
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/933818FEAA5211F1818066A45B11F970.roa
Signing time:             Mon 07 Sep 2026 00:25:41 +0000
ROA not before:           Mon 07 Sep 2026 00:25:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     64098
IP address blocks:        103.116.171.0/24 maxlen: 24
                          103.227.234.0/24 maxlen: 24
                          103.227.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
                          rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Validity
            Not Before: Sep  7 00:25:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a9e0484-5e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:23:a2:21:68:66:83:16:d8:a5:88:cf:5d:
                    5f:f1:92:04:b3:c5:b7:ca:9a:fd:a5:22:6f:4d:32:
                    41:28:5c:60:31:e5:7a:1f:cc:04:66:77:88:15:02:
                    a2:e5:e2:d5:ed:43:4a:4a:db:57:b5:a3:b6:ff:99:
                    9e:84:0d:25:3f:ac:78:a3:42:ab:19:99:97:2d:bf:
                    c3:22:01:6e:ac:d0:d3:c7:77:a0:1c:c3:a5:c8:22:
                    01:ed:d5:0c:4d:ad:2e:a6:a1:0d:44:45:ae:8d:db:
                    fb:99:12:c9:ce:58:63:27:97:4d:bc:4b:0d:75:de:
                    83:9f:c2:07:13:4a:1b:9f:20:2c:e0:a0:43:a6:5c:
                    62:88:15:7d:10:15:25:c6:93:15:0c:c9:8d:47:ed:
                    ad:3e:aa:b3:14:42:2b:f8:ba:18:2a:a9:91:9e:cd:
                    f6:f7:96:30:02:89:13:7b:91:05:6c:43:8a:ec:22:
                    2a:28:15:b8:5c:04:ba:87:c7:4f:e1:70:80:4d:76:
                    a2:d6:ba:cb:fa:51:0d:be:5c:21:05:26:4b:24:ad:
                    95:1b:6b:79:36:81:4d:74:a0:74:7e:69:6a:1e:77:
                    67:e5:bc:17:d6:fe:67:8a:6f:07:6b:2c:05:4b:9e:
                    e0:e9:e8:04:dc:ab:a8:3d:d0:ed:34:54:98:2f:bf:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:6C:4E:E5:E3:93:E7:49:7B:25:15:6E:82:AA:F7:3F:81:7E:BA
            X509v3 Authority Key Identifier:
                keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/933818FEAA5211F1818066A45B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.171.0/24
                  103.227.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:0f:24:e8:7f:0c:fa:12:f6:2e:68:08:d4:01:c6:d1:4b:05:
         bd:c0:af:ec:f7:9f:75:03:8a:51:d0:f0:6c:59:8e:c5:d7:1d:
         43:bf:76:82:3b:22:12:0c:1e:fb:67:a6:6d:63:24:14:6c:24:
         c3:c5:46:9a:28:88:bd:3c:f4:43:9d:1a:9f:e3:a7:aa:a9:b5:
         7a:65:b7:c6:b3:07:c5:0e:b6:81:f3:ec:ea:57:86:17:25:0d:
         c9:3f:a6:53:c1:92:0b:b7:94:b7:c1:07:3e:e2:af:af:f8:53:
         20:d1:51:fa:25:4c:8b:21:32:07:5c:eb:bf:13:b0:1d:c5:7f:
         3c:3f:25:cb:c4:6b:62:5f:dd:1c:57:66:e5:cf:e0:87:1b:54:
         2c:79:13:02:8e:41:84:49:ba:53:7e:5b:4d:fc:7e:7c:5e:96:
         53:8e:5f:21:25:c0:26:c9:ac:ea:a8:81:00:56:a3:24:8b:f9:
         26:28:df:97:51:bf:56:c8:fb:3c:99:49:5c:12:f9:f7:aa:a4:
         52:ea:a8:7b:f4:c8:ee:54:69:8d:32:f8:9b:63:3f:7b:81:81:
         b1:0d:34:cd:0c:ea:c9:dc:0b:50:52:b7:d3:7b:97:af:98:75:
         1e:90:2b:75:42:f3:e2:0a:05:0a:fc:40:02:5e:51:d4:e9:a9:
         9e:d7:7a:60
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU1QUUxMTAvBgNVBAUTKDAxREY2MTU3MjQ3N0EyMzBFNzlGOEYyOENGREQ2RDI4
Mzc3RjIyMkIwHhcNMjYwOTA3MDAyNTQxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTllMDQ4NC01ZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0cojoiFoZoMW2KWIz11f8ZIEs8W3ypr9pSJvTTJBKFxgMeV6H8wEZneIFQKi
5eLV7UNKSttXtaO2/5mehA0lP6x4o0KrGZmXLb/DIgFurNDTx3egHMOlyCIB7dUM
Ta0upqENREWujdv7mRLJzlhjJ5dNvEsNdd6Dn8IHE0obnyAs4KBDplxiiBV9EBUl
xpMVDMmNR+2tPqqzFEIr+LoYKqmRns3295YwAokTe5EFbEOK7CIqKBW4XAS6h8dP
4XCATXai1rrL+lENvlwhBSZLJK2VG2t5NoFNdKB0fmlqHndn5bwX1v5nim8HaywF
S57g6egE3KuoPdDtNFSYL78SOwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFM72bE7l
45PnSXslFW6Cqvc/gX66MB8GA1UdIwQYMBaAFAHfYVckd6Iw55+PKM/dbSg3fyIr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVBRS80NkQ0MjJGMDA3
RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29qRG5uNDhvejkxdEtEZF9J
aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FkOWhWeVIzb2pEbm40OG96OTF0S0RkX0lpcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU1QUUvNDZENDIyRjAwN0QyMTFFQ0FBODJCNjExQzRGOUFFMDIvOTMzODE4RkVB
QTUyMTFGMTgxODA2NkE0NUIxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ3SrAwQBZ+PqMA0GCSqGSIb3DQEBCwUAA4IBAQDKDyTofwz6EvYu
aAjUAcbRSwW9wK/s9591A4pR0PBsWY7F1x1Dv3aCOyISDB77Z6ZtYyQUbCTDxUaa
KIi9PPRDnRqf46eqqbV6ZbfGswfFDraB8+zqV4YXJQ3JP6ZTwZILt5S3wQc+4q+v
+FMg0VH6JUyLITIHXOu/E7AdxX88PyXLxGtiX90cV2blz+CHG1QseRMCjkGESbpT
fltN/H58XpZTjl8hJcAmyazqqIEAVqMki/kmKN+XUb9WyPs8mUlcEvn3qqRS6qh7
9MjuVGmNMvibYz97gYGxDTTNDOrJ3AtQUrfTe5evmHUekCt1QvPiCgUK/EACXlHU
6ame13pg
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:50:56 2026 by rpki-client