Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/F8636CC60F9D11EFA1E14343C4F9AE02.roa
File:                     F8636CC60F9D11EFA1E14343C4F9AE02.roa (raw, json)
Hash identifier:          /3nOzfVBV3G4XKfktsyW3g/oGq96lm0UNw7VtIzketI=
Subject key identifier:   1F:C6:BF:0A:09:FE:5B:D5:C0:2C:11:06:80:23:49:F2:E0:81:27:AC
Certificate issuer:       /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial:       0170
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/F8636CC60F9D11EFA1E14343C4F9AE02.roa
Signing time:             Thu 09 Apr 2026 04:38:56 +0000
ROA not before:           Thu 09 Apr 2026 04:38:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38532
IP address blocks:        103.53.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
                          rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
        Validity
            Not Before: Apr  9 04:38:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d72d60-f0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:93:98:46:99:68:3e:71:1f:49:48:db:98:
                    f1:dc:cc:e3:21:e0:6a:b3:2a:f2:84:09:b7:04:26:
                    60:a6:d2:51:e6:06:86:71:1f:fd:fe:b5:d9:ef:fc:
                    3c:a2:d1:c7:9c:ca:8e:22:7c:da:aa:37:d0:1b:9a:
                    d2:f2:b6:76:6a:c0:f5:41:f7:02:3c:c2:17:fc:64:
                    55:d5:d2:a6:b1:7c:60:5c:a1:5c:ea:c8:6a:76:aa:
                    c6:1b:a2:ee:74:7d:cc:9c:45:71:af:b2:26:81:1d:
                    04:a1:7d:e4:cb:4f:80:fe:b8:50:67:66:21:28:f4:
                    f9:5e:17:f7:c5:5b:e0:35:fa:9a:64:9e:6f:2f:1f:
                    e0:cc:6d:c8:22:f1:e4:cf:d8:8a:0d:dc:64:af:ee:
                    8d:7b:e6:fd:61:66:16:0b:77:e8:6e:b3:d3:df:5b:
                    fd:4c:d6:aa:14:36:af:1c:91:23:8e:37:ee:04:48:
                    4f:9d:27:5e:71:06:ac:b9:3f:72:50:e7:9c:f3:8b:
                    33:4f:63:74:d3:f8:ee:97:da:ad:16:1d:31:a1:e7:
                    b0:7d:90:ca:62:15:be:a0:74:46:ea:77:22:1a:6d:
                    cd:b6:1f:73:df:4c:0c:b2:6c:e7:eb:77:91:89:31:
                    7b:34:44:df:24:ac:c7:4b:03:68:92:67:7c:ec:59:
                    8d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C6:BF:0A:09:FE:5B:D5:C0:2C:11:06:80:23:49:F2:E0:81:27:AC
            X509v3 Authority Key Identifier:
                keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/F8636CC60F9D11EFA1E14343C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:d4:33:49:d6:8c:7f:4b:42:e5:75:31:d3:f6:4d:59:63:46:
         46:84:90:10:28:65:28:09:c3:fd:3f:a9:85:82:29:cf:19:e0:
         cd:16:78:60:39:ec:56:b5:7c:a5:d8:d2:48:38:2a:29:8d:0b:
         aa:21:c6:bd:d6:73:21:c5:c4:dc:b9:ba:13:c5:5c:b9:f5:09:
         eb:06:f6:8f:e7:a9:9b:8f:f4:85:f7:33:56:12:06:a1:2d:19:
         7d:f0:3d:d4:8a:8d:4f:97:dd:e6:82:ef:6b:31:15:75:37:9c:
         42:6c:27:1a:c0:20:90:f9:77:de:de:70:13:a5:2a:e9:b6:b4:
         b6:41:8e:db:f9:90:ee:59:1d:74:ed:bb:eb:3e:81:6b:48:cb:
         29:4c:29:41:90:31:e1:c4:16:83:a5:04:2b:3d:13:ed:bc:52:
         8c:c7:c5:cc:93:bf:04:37:7a:8f:4a:ad:94:32:98:18:7d:0f:
         e5:85:35:ca:48:b3:62:2b:e1:7c:e2:68:6a:35:b1:60:b2:fa:
         ec:a4:1e:81:ca:56:a1:aa:1e:89:94:f3:61:bb:7c:43:e9:53:
         b7:7d:08:85:35:66:e8:73:5e:74:30:cb:07:bd:c6:bf:9b:4d:
         7e:7c:be:ab:89:ca:f0:c4:de:53:b7:2f:f8:4f:56:f0:4f:25:
         68:ce:de:23
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM2NzUxMTAvBgNVBAUTKENBMjQ1ODMxMDZGQjU0OTg0Qzc4MTU4OTVFM0UxOUVE
Rjc5Qzk4QkYwHhcNMjYwNDA5MDQzODU2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ3MmQ2MC1mMGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvPKTmEaZaD5xH0lI25jx3MzjIeBqsyryhAm3BCZgptJR5gaGcR/9/rXZ7/w8
otHHnMqOInzaqjfQG5rS8rZ2asD1QfcCPMIX/GRV1dKmsXxgXKFc6shqdqrGG6Lu
dH3MnEVxr7ImgR0EoX3ky0+A/rhQZ2YhKPT5Xhf3xVvgNfqaZJ5vLx/gzG3IIvHk
z9iKDdxkr+6Ne+b9YWYWC3fobrPT31v9TNaqFDavHJEjjjfuBEhPnSdecQasuT9y
UOec84szT2N00/jul9qtFh0xoeewfZDKYhW+oHRG6nciGm3Nth9z30wMsmzn63eR
iTF7NETfJKzHSwNokmd87FmNxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB/GvwoJ
/lvVwCwRBoAjSfLggSesMB8GA1UdIwQYMBaAFMokWDEG+1SYTHgViV4+Ge33nJi/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY3NS85MTVBMjg2NjBF
QjMxMUVGODlDQUQxMkNDNEY5QUUwMi95aVJZTVFiN1ZKaE1lQldKWGo0WjdmZWNt
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lpUllNUWI3VkpoTWVCV0pYajRaN2ZlY21MOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM2NzUvOTE1QTI4NjYwRUIzMTFFRjg5Q0FEMTJDQzRGOUFFMDIvRjg2MzZDQzYw
RjlEMTFFRkExRTE0MzQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZzWsMA0GCSqGSIb3DQEBCwUAA4IBAQAi1DNJ1ox/S0LldTHT9k1Z
Y0ZGhJAQKGUoCcP9P6mFginPGeDNFnhgOexWtXyl2NJIOCopjQuqIca91nMhxcTc
uboTxVy59QnrBvaP56mbj/SF9zNWEgahLRl98D3Uio1Pl93mgu9rMRV1N5xCbCca
wCCQ+Xfe3nATpSrptrS2QY7b+ZDuWR107bvrPoFrSMspTClBkDHhxBaDpQQrPRPt
vFKMx8XMk78EN3qPSq2UMpgYfQ/lhTXKSLNiK+F84mhqNbFgsvrspB6Bylahqh6J
lPNhu3xD6VO3fQiFNWboc150MMsHvca/m01+fL6ricrwxN5Tty/4T1bwTyVozt4j
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:52 2026 by rpki-client