Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/AA5485827F3611ECBED94963C4F9AE02.roa
File:                     AA5485827F3611ECBED94963C4F9AE02.roa (raw, json)
Hash identifier:          xp7/pdQMYk2t7u02214OzsMR/nZgv77MRjYz0MrJbEg=
Subject key identifier:   23:0B:82:9A:D8:5D:2B:43:84:F4:36:D1:D8:E2:64:8E:55:5F:98:91
Certificate issuer:       /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Certificate serial:       0534
Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/AA5485827F3611ECBED94963C4F9AE02.roa
Signing time:             Sat 28 Mar 2026 23:31:13 +0000
ROA not before:           Sat 28 Mar 2026 23:31:13 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141752
IP address blocks:        103.163.61.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl
                          rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332 (0x534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
        Validity
            Not Before: Mar 28 23:31:13 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c864c1-53ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:a7:d0:52:69:03:85:1b:ee:e8:c0:1c:de:
                    d4:3d:6f:a3:13:a6:31:c3:00:08:67:df:34:ae:0e:
                    72:68:b4:a1:65:6a:d9:c4:82:29:48:e2:77:66:1a:
                    f7:0a:d1:a6:3c:c4:75:47:82:41:e3:74:81:b8:76:
                    da:ff:a1:71:95:18:a1:62:f2:9a:85:1c:49:e5:f1:
                    f8:43:43:5f:26:cd:e6:9d:82:90:da:46:7e:2b:20:
                    f7:3c:2c:27:15:e2:f6:d5:52:7e:d1:d0:de:ac:dc:
                    02:cf:cc:b4:75:9e:4b:70:2d:83:19:44:f3:fa:3c:
                    94:6d:cf:f2:96:2b:f5:2d:7d:70:44:b4:82:d6:c7:
                    d3:a3:fb:e3:32:6c:c5:77:9f:8c:4f:c3:5a:7d:e9:
                    0f:d6:2e:ca:3e:e4:c8:72:e8:82:ad:04:40:65:19:
                    ce:32:82:d4:45:98:1e:65:16:16:21:a7:7a:37:95:
                    77:c4:f9:9f:28:5d:9f:e1:a3:5a:94:e2:4f:62:3f:
                    b4:08:86:bf:02:f8:3b:b1:e0:bd:d3:3b:4b:3f:ed:
                    35:7c:77:ab:33:fc:2e:d3:24:c0:67:57:b5:06:31:
                    b1:5b:6d:04:3a:7d:7a:01:66:fb:d8:76:ea:29:d1:
                    78:61:24:6e:31:76:3e:ee:36:07:21:5a:4c:84:6d:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0B:82:9A:D8:5D:2B:43:84:F4:36:D1:D8:E2:64:8E:55:5F:98:91
            X509v3 Authority Key Identifier:
                keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/AA5485827F3611ECBED94963C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:ac:78:c0:34:11:28:7e:22:d8:5b:6a:ea:70:c1:e6:6c:83:
         76:bb:b9:71:ea:82:b6:d8:b8:07:79:5e:f6:cf:3e:87:61:03:
         c9:c0:ea:1b:73:3f:54:59:30:bf:3d:ca:0e:f8:fb:b6:3e:5e:
         50:54:d4:0f:e5:82:2f:cf:9c:1d:8b:bf:ff:26:50:0e:c3:42:
         93:e3:af:34:2b:df:a0:d5:7a:37:5f:af:b5:10:92:87:15:0a:
         b2:48:2a:28:e8:eb:35:30:8a:12:41:32:5b:13:0b:b7:e8:27:
         3c:2c:d3:f5:87:20:8a:29:b1:90:70:a7:43:a6:94:4a:38:86:
         be:7a:90:6d:98:aa:49:8d:5a:a5:81:bb:5f:0c:31:8c:53:87:
         90:54:8e:51:5d:32:96:0a:d3:a8:d7:8e:42:98:64:f6:07:15:
         38:9a:c4:33:b4:5d:6b:3d:71:13:59:29:84:be:84:28:cd:e1:
         d6:d9:7c:d6:2e:0b:75:1b:0d:9b:83:a4:d2:bc:6e:16:f2:2a:
         8e:2e:d4:a2:9a:29:83:51:10:c1:f4:b6:f8:c3:e7:1c:ca:34:
         a2:95:ca:ec:db:7e:d2:88:68:a9:61:53:ee:f7:69:b4:c8:41:
         e3:42:3f:ad:72:ec:98:5c:40:27:73:88:bd:94:35:50:93:65:
         e4:cd:b3:7e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE
QUY5RTM3MjQwHhcNMjYwMzI4MjMzMTEzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWM4NjRjMS01M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJ+n0FJpA4Ub7ujAHN7UPW+jE6YxwwAIZ980rg5yaLShZWrZxIIpSOJ3Zhr3
CtGmPMR1R4JB43SBuHba/6FxlRihYvKahRxJ5fH4Q0NfJs3mnYKQ2kZ+KyD3PCwn
FeL21VJ+0dDerNwCz8y0dZ5LcC2DGUTz+jyUbc/yliv1LX1wRLSC1sfTo/vjMmzF
d5+MT8NafekP1i7KPuTIcuiCrQRAZRnOMoLURZgeZRYWIad6N5V3xPmfKF2f4aNa
lOJPYj+0CIa/Avg7seC90ztLP+01fHerM/wu0yTAZ1e1BjGxW20EOn16AWb72Hbq
KdF4YSRuMXY+7jYHIVpMhG3NVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCMLgprY
XStDhPQ20djiZI5VX5iRMB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx
M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTREMjYvQzAwRDk3MjY0MTNCMTFFQ0IwNkFFMDMwQzRGOUFFMDIvQUE1NDg1ODI3
RjM2MTFFQ0JFRDk0OTYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6M9MA0GCSqGSIb3DQEBCwUAA4IBAQCerHjANBEofiLYW2rqcMHm
bIN2u7lx6oK22LgHeV72zz6HYQPJwOobcz9UWTC/PcoO+Pu2Pl5QVNQP5YIvz5wd
i7//JlAOw0KT4680K9+g1Xo3X6+1EJKHFQqySCoo6Os1MIoSQTJbEwu36Cc8LNP1
hyCKKbGQcKdDppRKOIa+epBtmKpJjVqlgbtfDDGMU4eQVI5RXTKWCtOo145CmGT2
BxU4msQztF1rPXETWSmEvoQozeHW2XzWLgt1Gw2bg6TSvG4W8iqOLtSimimDURDB
9Lb4w+ccyjSilcrs237SiGipYVPu92m0yEHjQj+tcuyYXEAnc4i9lDVQk2XkzbN+
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:41 2026 by rpki-client