Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/999F4BE8259611EE944D733CC4F9AE02.roa
File:                     999F4BE8259611EE944D733CC4F9AE02.roa (raw, json)
Hash identifier:          DyvlHpc+Y3k78Xna4wfmukjiR2XTaIl+kDH030UpDGk=
Subject key identifier:   28:00:EA:97:B7:A1:FC:5E:E0:E1:63:86:E0:26:20:03:0E:4F:0D:F0
Certificate issuer:       /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D
Certificate serial:       0CD9
Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/999F4BE8259611EE944D733CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:23:22 +0000
ROA not before:           Mon 14 Apr 2025 18:28:09 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     136434
IP address blocks:        103.87.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl
                          rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3289 (0xcd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D
        Validity
            Not Before: Apr 14 18:28:09 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40589-cd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:60:68:58:7c:42:c2:59:ce:4a:d6:7e:2d:
                    d7:36:18:f3:5a:b0:55:cb:52:1c:69:e6:b9:b1:f6:
                    8f:55:65:58:1c:34:15:19:bf:c9:cc:48:06:ca:2c:
                    ac:a8:1a:b2:4e:6a:a3:bd:1a:fc:a2:cc:b4:bb:1d:
                    69:3b:eb:d7:08:36:39:f6:28:4a:e9:47:c6:43:f0:
                    54:ed:4b:0f:09:37:71:b4:2a:aa:65:80:ca:07:45:
                    c2:82:5e:b2:f6:91:d4:f7:67:9a:8b:71:93:2c:2a:
                    6a:01:a4:1f:9c:9e:d5:85:c1:39:cf:d3:0a:da:2c:
                    46:b7:81:6e:63:78:b3:35:a4:00:72:47:dc:74:e1:
                    e6:51:6b:0e:e7:37:a7:5f:07:a3:a8:fc:76:f3:dc:
                    29:47:8e:81:9b:4e:73:97:f7:03:1d:53:a7:a4:ee:
                    03:cf:99:3a:4c:d0:e5:c2:c3:73:ad:60:2f:62:42:
                    91:9c:d2:86:71:7d:36:e3:59:3e:17:91:02:74:8b:
                    af:d9:0e:f5:ab:25:5c:7b:12:ae:38:d0:b3:31:d4:
                    79:36:e5:d9:fd:72:5c:a0:17:9d:3d:a3:12:b8:ef:
                    56:f4:30:51:ae:5d:3b:1a:d1:fd:57:74:e2:05:17:
                    d2:eb:0b:1d:b4:01:c2:da:5b:c4:d5:8c:b2:96:71:
                    73:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:00:EA:97:B7:A1:FC:5E:E0:E1:63:86:E0:26:20:03:0E:4F:0D:F0
            X509v3 Authority Key Identifier:
                keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/999F4BE8259611EE944D733CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:a9:cb:4f:21:de:b4:61:07:67:c8:e7:00:8a:8c:ec:6e:b2:
         79:1d:a8:67:0c:94:95:4b:62:7e:be:b2:6d:20:8b:3f:a3:23:
         e8:23:84:83:09:ed:2f:46:08:78:ab:54:0d:1e:13:d0:f5:a0:
         7e:34:cd:40:b0:94:d5:f3:bd:19:ff:a9:de:78:c2:8c:1a:84:
         20:e5:ca:0b:f2:84:31:b7:06:97:a8:1a:e9:fb:a2:65:eb:d5:
         52:fc:67:d7:3c:44:ed:1f:e0:f9:d4:20:81:f2:d8:32:cb:a6:
         9a:20:79:b6:f3:5c:80:0b:90:51:86:35:0b:6c:aa:b2:32:4f:
         4a:13:ea:0b:e8:c6:43:3c:ac:8d:55:5a:09:3d:0a:c2:92:b9:
         bc:8b:91:89:89:3e:0d:03:d1:94:6f:26:84:a0:4a:a4:cb:cd:
         9a:72:ec:b4:4b:fb:2e:66:7d:c0:11:b5:e1:ed:19:b5:f0:66:
         f0:39:38:34:60:f0:2d:41:b4:a8:0f:e9:99:45:f2:73:56:3f:
         db:af:cd:20:a1:28:e0:5e:bc:73:39:9b:55:a6:d4:73:f6:96:
         08:dc:75:22:48:7f:13:ec:87:bd:2e:8e:9d:24:7f:15:fc:5f:
         9e:2e:0a:00:26:fa:e5:6f:6e:a2:1f:12:1d:f0:8a:f2:89:8d:
         d4:bc:fd:4d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC
NkIwMzFBMkQwHhcNMjUwNDE0MTgyODA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDU4OS1jZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3VhgaFh8QsJZzkrWfi3XNhjzWrBVy1Icaea5sfaPVWVYHDQVGb/JzEgGyiys
qBqyTmqjvRr8osy0ux1pO+vXCDY59ihK6UfGQ/BU7UsPCTdxtCqqZYDKB0XCgl6y
9pHU92eai3GTLCpqAaQfnJ7VhcE5z9MK2ixGt4FuY3izNaQAckfcdOHmUWsO5zen
XwejqPx289wpR46Bm05zl/cDHVOnpO4Dz5k6TNDlwsNzrWAvYkKRnNKGcX0241k+
F5ECdIuv2Q71qyVcexKuONCzMdR5NuXZ/XJcoBedPaMSuO9W9DBRrl07GtH9V3Ti
BRfS6wsdtAHC2lvE1YyylnFzawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCgA6pe3
ofxe4OFjhuAmIAMOTw3wMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1
RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH
aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTBFRjcvQjA3MTM5N0MwNUU2MTFFQTgwQkNENjdDQzRGOUFFMDIvOTk5RjRCRTgy
NTk2MTFFRTk0NEQ3MzNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ1f0MA0GCSqGSIb3DQEBCwUAA4IBAQAOqctPId60YQdnyOcAiozs
brJ5HahnDJSVS2J+vrJtIIs/oyPoI4SDCe0vRgh4q1QNHhPQ9aB+NM1AsJTV870Z
/6neeMKMGoQg5coL8oQxtwaXqBrp+6Jl69VS/GfXPETtH+D51CCB8tgyy6aaIHm2
81yAC5BRhjULbKqyMk9KE+oL6MZDPKyNVVoJPQrCkrm8i5GJiT4NA9GUbyaEoEqk
y82acuy0S/suZn3AEbXh7Rm18GbwOTg0YPAtQbSoD+mZRfJzVj/br80goSjgXrxz
OZtVptRz9pYI3HUiSH8T7Ie9Lo6dJH8V/F+eLgoAJvrlb26iHxId8IryiY3UvP1N
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:42 2026 by rpki-client