Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/E82A7D8840CE11EABBE63B6BC4F9AE02.roa
File:                     E82A7D8840CE11EABBE63B6BC4F9AE02.roa (raw, json)
Hash identifier:          zLtKv7KdakETMk2s3XQHHR2CRFWRdDk6mJ+jm4StCoE=
Subject key identifier:   01:AE:05:6C:30:EB:93:10:0D:B0:C7:76:06:2C:42:59:8A:C1:69:80
Certificate issuer:       /CN=A9157705/serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1
Certificate serial:       0BA4
Authority key identifier: D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/E82A7D8840CE11EABBE63B6BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:44:36 +0000
ROA not before:           Fri 06 Jun 2025 20:05:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     58616
IP address blocks:        103.9.184.0/24 maxlen: 24
                          103.9.186.0/24 maxlen: 24
                          2404:d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl
                          rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2980 (0xba4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157705, serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1
        Validity
            Not Before: Jun  6 20:05:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a426a4-35d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:6d:41:47:09:75:e9:9a:7c:46:d6:ad:f1:
                    82:80:c1:07:41:88:2f:fe:c4:a4:73:23:da:31:59:
                    44:0f:e0:ba:94:59:db:c0:ee:37:af:53:ec:1c:9c:
                    7d:04:7e:d4:6d:a0:a4:10:da:f7:6f:5c:7b:fd:3a:
                    35:ac:af:e0:97:13:6e:c5:0c:a7:01:7f:c2:cc:36:
                    5b:62:ec:ca:1b:19:24:a0:f2:ce:bf:8f:41:7d:64:
                    7f:89:73:51:e3:cc:38:4d:03:b7:24:4a:1c:b6:43:
                    2d:46:1e:41:23:82:91:fe:82:97:cf:f3:7e:ef:4d:
                    ee:75:52:2e:df:3f:ca:3e:fe:e0:e8:75:8c:aa:39:
                    50:8c:20:1c:bc:95:8a:f9:dc:87:c7:30:01:da:e1:
                    be:2c:62:3c:02:f7:06:f9:6b:a7:bc:19:b1:0f:18:
                    0c:38:fc:bd:bd:dd:f6:b3:6d:82:f2:cf:5d:0f:32:
                    02:1f:d1:f4:82:6a:f3:00:cc:38:c2:fa:0d:48:3b:
                    0e:76:79:f4:32:10:ce:dd:bc:0b:13:a9:cc:01:92:
                    35:6b:1d:cd:26:3c:d2:88:07:97:d4:f4:42:0b:bf:
                    63:87:19:00:09:02:79:40:97:f8:a3:87:0f:92:a3:
                    72:f5:9e:cf:11:66:32:7f:d9:f3:7b:3d:70:e3:08:
                    26:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AE:05:6C:30:EB:93:10:0D:B0:C7:76:06:2C:42:59:8A:C1:69:80
            X509v3 Authority Key Identifier:
                keyid:D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/E82A7D8840CE11EABBE63B6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.184.0/24
                  103.9.186.0/24
                IPv6:
                  2404:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:34:a5:c7:7d:7f:b9:ae:11:72:a3:7a:e9:6f:21:65:41:cd:
         1b:f5:be:b1:76:67:5d:bc:f5:ad:f1:a9:52:82:74:55:6e:5f:
         cc:bc:f9:11:44:ff:61:b0:fc:70:ff:c6:33:ac:69:f9:e6:45:
         b2:5c:9e:56:3e:4e:8d:39:8e:7d:33:2e:65:4f:cc:15:9c:38:
         e4:7a:2c:af:86:88:c6:59:f4:7f:38:74:e5:f2:4a:89:5d:4a:
         3b:75:85:e5:39:ec:bb:97:d8:52:33:81:75:9d:24:7f:40:a1:
         22:67:85:63:d8:82:de:02:43:9d:82:b7:09:2a:24:18:bd:68:
         42:e4:8e:c3:6c:09:b3:50:3f:77:82:0a:47:b7:ac:fa:07:04:
         a8:93:c0:99:c9:5c:82:5e:ae:c6:89:c8:1f:c3:b6:15:1d:31:
         9b:89:58:e5:f9:19:9d:f0:5d:1f:09:e5:a6:45:dd:88:de:04:
         03:5b:94:4a:40:07:88:0c:7c:8c:7c:88:74:a2:05:94:c2:71:
         25:2a:bb:fd:e7:fa:53:dc:4f:f1:bd:09:61:25:2e:58:8e:83:
         53:5e:17:d7:b3:16:30:e0:97:46:dc:f3:de:e3:dd:19:57:78:
         d8:20:96:f3:c6:ac:dd:2a:a9:6c:dd:c8:ce:ce:bd:cf:75:17:
         ce:95:87:5b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICC6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc3MDUxMTAvBgNVBAUTKEQ2MTgzQTYxNjdFQzJFNEE3MjQ3MDcwRjFGMEIzOUI2
QjlDOTUzRTEwHhcNMjUwNjA2MjAwNTE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjZhNC0zNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwSttQUcJdemafEbWrfGCgMEHQYgv/sSkcyPaMVlED+C6lFnbwO43r1PsHJx9
BH7UbaCkENr3b1x7/To1rK/glxNuxQynAX/CzDZbYuzKGxkkoPLOv49BfWR/iXNR
48w4TQO3JEoctkMtRh5BI4KR/oKXz/N+703udVIu3z/KPv7g6HWMqjlQjCAcvJWK
+dyHxzAB2uG+LGI8AvcG+WunvBmxDxgMOPy9vd32s22C8s9dDzICH9H0gmrzAMw4
wvoNSDsOdnn0MhDO3bwLE6nMAZI1ax3NJjzSiAeX1PRCC79jhxkACQJ5QJf4o4cP
kqNy9Z7PEWYyf9nzez1w4wgm5QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAGuBWww
65MQDbDHdgYsQlmKwWmAMB8GA1UdIwQYMBaAFNYYOmFn7C5KckcHDx8LOba5yVPh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcwNS8zM0ZBRTZGNDQw
Q0UxMUVBQkVDRDY3NkFDNEY5QUUwMi8xaGc2WVdmc0xrcHlSd2NQSHdzNXRybkpV
LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFoZzZZV2ZzTGtweVJ3Y1BId3M1dHJuSlUtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTc3MDUvMzNGQUU2RjQ0MENFMTFFQUJFQ0Q2NzZBQzRGOUFFMDIvRTgyQTdEODg0
MENFMTFFQUJCRTYzQjZCQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQAZwm4AwQAZwm6MA0EAgACMAcDBQAkBA0AMA0GCSqGSIb3DQEBCwUA
A4IBAQDINKXHfX+5rhFyo3rpbyFlQc0b9b6xdmddvPWt8alSgnRVbl/MvPkRRP9h
sPxw/8YzrGn55kWyXJ5WPk6NOY59My5lT8wVnDjkeiyvhojGWfR/OHTl8kqJXUo7
dYXlOey7l9hSM4F1nSR/QKEiZ4Vj2ILeAkOdgrcJKiQYvWhC5I7DbAmzUD93ggpH
t6z6BwSok8CZyVyCXq7Gicgfw7YVHTGbiVjl+Rmd8F0fCeWmRd2I3gQDW5RKQAeI
DHyMfIh0ogWUwnElKrv95/pT3E/xvQlhJS5YjoNTXhfXsxYw4JdG3PPe490ZV3jY
IJbzxqzdKqls3cjOzr3PdRfOlYdb
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:11 2026 by rpki-client