Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/D5E5F60E92BF11F0BA90D823C4F9AE02.roa
File:                     D5E5F60E92BF11F0BA90D823C4F9AE02.roa (raw, json)
Hash identifier:          1qsI60bcISSr8S+rZu0eKRZXC6kIyDJbde18/K9baHU=
Subject key identifier:   EC:94:B6:DD:00:9A:FB:4E:8C:B2:5B:F7:A8:FA:5A:9A:93:95:2E:4B
Certificate issuer:       /CN=A9152705/serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C
Certificate serial:       59
Authority key identifier: 6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/D5E5F60E92BF11F0BA90D823C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:14:15 +0000
ROA not before:           Tue 16 Sep 2025 05:41:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     13213
IP address blocks:        103.111.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl
                          rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152705, serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C
        Validity
            Not Before: Sep 16 05:41:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e747-8a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:64:92:df:a6:e3:e8:b1:2e:a5:2d:77:25:
                    66:18:68:91:6a:95:da:c1:75:cc:31:96:ad:de:9e:
                    ec:3a:9c:53:7e:0c:1e:04:5b:08:23:15:c3:76:dc:
                    60:bd:69:88:f2:6f:ab:63:af:bd:71:9d:8e:17:c7:
                    0e:de:95:40:f7:81:c4:16:4f:f9:2a:75:d0:bb:97:
                    2e:2f:23:11:d4:fc:60:de:7d:a2:7c:f9:96:d7:fc:
                    e3:02:19:19:18:fb:08:2e:57:91:f2:e4:b5:da:a6:
                    ef:75:c7:88:44:d5:bd:04:43:22:ec:c9:3d:f5:44:
                    e5:f2:0f:61:74:47:e0:3e:15:00:f0:5b:7d:57:6e:
                    e2:87:43:4c:f3:63:a4:13:7c:9f:44:c2:3c:40:99:
                    0e:a5:67:da:67:51:fc:2c:7c:ac:cf:28:59:a7:b7:
                    f1:ef:de:10:60:12:54:54:01:69:76:85:06:de:61:
                    08:b3:da:fb:ff:a0:70:ac:7e:14:18:09:e1:48:c5:
                    ae:45:e1:2e:0c:96:50:07:8b:c4:3b:e6:b4:7b:1c:
                    a0:f4:be:5c:a1:6c:6a:17:5c:d1:2c:2d:27:c7:83:
                    f1:f5:a3:4d:84:25:cb:3b:2b:d9:e1:01:f2:52:fa:
                    56:7b:de:61:98:57:64:29:44:5b:35:89:f5:14:ae:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:94:B6:DD:00:9A:FB:4E:8C:B2:5B:F7:A8:FA:5A:9A:93:95:2E:4B
            X509v3 Authority Key Identifier:
                keyid:6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/D5E5F60E92BF11F0BA90D823C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:26:7f:2b:3e:e9:01:63:f3:9a:df:1a:97:8a:c6:91:84:4b:
         cc:66:87:4b:fe:2b:2a:d1:e8:23:17:26:dd:8d:ca:96:c6:c9:
         01:ba:49:11:e1:ee:d0:de:77:9e:5e:34:3c:93:86:09:41:41:
         35:cd:fc:0b:30:4e:56:fc:1a:fb:8b:55:57:7a:56:51:98:4f:
         7d:bc:08:34:0a:63:e0:62:60:9b:3d:0a:1d:f3:40:f8:b1:16:
         6b:d3:41:b2:cb:af:71:4a:8a:43:0d:67:e2:cf:99:6c:fe:94:
         79:7f:64:93:71:c4:da:e6:82:1c:b5:b0:b4:8e:d5:82:1e:36:
         3f:b6:c8:69:b0:b8:07:f1:df:8d:27:a0:76:15:84:4b:23:d5:
         16:65:0f:31:e8:2e:09:4f:e0:36:b1:58:38:6d:bf:37:73:a9:
         80:33:bc:42:82:93:f0:ee:0a:af:01:40:31:33:9d:51:c5:6e:
         d6:60:e7:b0:ad:c9:27:f1:6b:ff:fe:a2:44:dc:e0:54:93:1f:
         37:49:d9:98:63:47:5d:1c:c4:b8:1f:00:99:63:91:16:f3:f1:
         ef:f5:56:c1:db:0d:97:ca:70:ff:a6:07:5b:23:e1:76:df:61:
         9e:e1:9e:9e:da:be:db:5c:de:63:de:93:16:58:89:bd:50:db:
         1e:e2:2d:c1
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MjcwNTExMC8GA1UEBRMoNkJFQkMwMjEyRDZGRUQ4MzIxQzhENkYwQzVDOUM0QTY2
RUQ3MTE3QzAeFw0yNTA5MTYwNTQxNDhaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNlNzQ3LThhOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLPmSS36bj6LEupS13JWYYaJFqldrBdcwxlq3enuw6nFN+DB4EWwgjFcN23GC9
aYjyb6tjr71xnY4Xxw7elUD3gcQWT/kqddC7ly4vIxHU/GDefaJ8+ZbX/OMCGRkY
+wguV5Hy5LXapu91x4hE1b0EQyLsyT31ROXyD2F0R+A+FQDwW31XbuKHQ0zzY6QT
fJ9EwjxAmQ6lZ9pnUfwsfKzPKFmnt/Hv3hBgElRUAWl2hQbeYQiz2vv/oHCsfhQY
CeFIxa5F4S4MllAHi8Q75rR7HKD0vlyhbGoXXNEsLSfHg/H1o02EJcs7K9nhAfJS
+lZ73mGYV2QpRFs1ifUUrhHlAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU7JS23QCa
+06Mslv3qPpampOVLkswHwYDVR0jBBgwFoAUa+vAIS1v7YMhyNbwxcnEpm7XEXww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyNzA1LzYyNzYwRDI2OTJC
RjExRjA5OUFDMTMyM0M0RjlBRTAyL2EtdkFJUzF2N1lNaHlOYnd4Y25FcG03WEVY
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYS12QUlTMXY3WU1oeU5id3hjbkVwbTdYRVh3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjcwNS82Mjc2MEQyNjkyQkYxMUYwOTlBQzEzMjNDNEY5QUUwMi9ENUU1RjYwRTky
QkYxMUYwQkE5MEQ4MjNDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnbyEwDQYJKoZIhvcNAQELBQADggEBALEmfys+6QFj85rfGpeKxpGE
S8xmh0v+KyrR6CMXJt2NypbGyQG6SRHh7tDed55eNDyThglBQTXN/AswTlb8GvuL
VVd6VlGYT328CDQKY+BiYJs9Ch3zQPixFmvTQbLLr3FKikMNZ+LPmWz+lHl/ZJNx
xNrmghy1sLSO1YIeNj+2yGmwuAfx340noHYVhEsj1RZlDzHoLglP4DaxWDhtvzdz
qYAzvEKCk/DuCq8BQDEznVHFbtZg57CtySfxa//+okTc4FSTHzdJ2ZhjR10cxLgf
AJljkRbz8e/1VsHbDZfKcP+mB1sj4XbfYZ7hnp7avttc3mPekxZYib1Q2x7iLcE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:23 2026 by rpki-client