Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/7A2B979E763011EFBA86FD49C4F9AE02.roa
File:                     7A2B979E763011EFBA86FD49C4F9AE02.roa (raw, json)
Hash identifier:          8QvXdh0bfE5eVkyVDHMIAaN7n/VnRAKQbjvOmRAZQCU=
Subject key identifier:   68:94:40:39:63:04:1B:F6:B1:C5:EE:BD:BF:A4:0F:2D:58:0F:7E:62
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       09ED
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/7A2B979E763011EFBA86FD49C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 20:40:24 +0000
ROA not before:           Wed 02 Sep 2026 20:40:24 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        45.116.132.0/24 maxlen: 24
                          45.116.135.0/24 maxlen: 24
                          103.9.92.0/24 maxlen: 24
                          103.9.93.0/24 maxlen: 24
                          103.9.164.0/24 maxlen: 24
                          103.9.165.0/24 maxlen: 24
                          103.37.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2541 (0x9ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Sep  2 20:40:24 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9889b8-1f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:d8:f0:c3:1b:7f:32:39:1c:75:3c:5a:44:
                    5a:06:6c:65:37:7b:92:5a:42:5f:95:de:2f:c3:89:
                    44:a0:41:29:2d:84:73:8e:28:33:2a:9f:db:0f:19:
                    44:08:46:41:f4:92:3c:52:e6:3e:53:0e:90:4a:48:
                    4c:7b:2f:59:dd:f5:16:1f:55:99:5c:48:e6:8e:47:
                    f5:37:fd:5b:60:dd:3c:e6:b9:b6:f1:ec:ff:7b:0e:
                    de:8a:ed:69:55:af:2d:01:03:2e:f0:18:4a:eb:d6:
                    65:bc:4e:f7:97:12:3f:dd:65:46:6f:2d:78:dc:4e:
                    f2:ca:90:ec:7f:67:67:4e:3a:f3:13:c3:cd:98:e0:
                    57:b5:44:3f:f4:25:97:01:3d:d2:4b:4a:3e:b1:61:
                    70:12:e2:da:38:0d:c0:81:7f:4f:e5:56:53:e8:9c:
                    5e:ba:db:e1:a6:e4:53:2a:25:fb:5d:84:b6:87:8c:
                    9e:ce:c0:1a:f9:0b:7c:ee:f0:c5:8f:5c:8c:52:c3:
                    d0:6a:d0:82:1b:c2:77:b8:a0:1e:ea:e4:c5:cb:a2:
                    bf:e0:3d:69:64:52:05:b8:80:6c:20:10:28:77:c0:
                    10:bd:7c:bb:ce:66:e0:9e:2f:63:6d:e9:e7:6d:20:
                    8b:d6:48:15:37:20:e9:c8:9e:b9:59:f1:d8:3d:0c:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:94:40:39:63:04:1B:F6:B1:C5:EE:BD:BF:A4:0F:2D:58:0F:7E:62
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/7A2B979E763011EFBA86FD49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.132.0/24
                  45.116.135.0/24
                  103.9.92.0/23
                  103.9.164.0/23
                  103.37.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:00:c1:1b:0a:a5:44:4b:e6:f9:b1:83:de:ad:60:50:78:e3:
         77:2d:b5:00:b6:e2:94:16:13:92:50:df:4b:00:03:ca:6c:7d:
         10:e0:e0:24:12:76:27:28:66:c6:0a:11:96:67:c6:dc:7b:f9:
         53:67:ed:8c:4b:da:b9:ab:12:da:62:15:1e:86:0c:99:e1:09:
         f9:f4:b6:8c:c2:b6:a1:91:be:92:a4:56:00:54:27:89:a1:39:
         7e:b3:20:cb:fb:41:43:a6:de:9c:ec:7b:b8:77:e8:5c:5d:fe:
         7b:22:98:3c:e4:06:c7:df:59:d3:e1:d5:99:8f:bd:24:1d:00:
         b0:7f:a8:ef:f3:cc:d8:1c:49:4a:20:9c:c4:02:36:5a:cc:08:
         51:81:00:66:0f:ea:f1:3c:3a:27:73:c1:79:a1:58:6d:93:d7:
         f9:63:a4:db:89:1a:5d:0e:66:45:22:51:ad:a9:43:41:5d:ec:
         81:4d:84:cc:0a:14:95:77:97:1d:94:5b:c8:68:bd:81:b8:59:
         58:d8:4f:e2:55:ce:61:c3:aa:09:9d:71:b9:ea:dd:b9:0b:b0:
         5a:04:3f:ce:66:4d:44:a7:e1:18:62:60:52:05:0c:65:10:20:
         fa:83:a7:08:82:6e:c2:9a:55:a1:9d:e0:ba:c1:26:23:4b:3c:
         19:2f:37:00
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2
RUY2Qzk1MTcwHhcNMjYwOTAyMjA0MDI0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4ODliOC0xZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHTY8MMbfzI5HHU8WkRaBmxlN3uSWkJfld4vw4lEoEEpLYRzjigzKp/bDxlE
CEZB9JI8UuY+Uw6QSkhMey9Z3fUWH1WZXEjmjkf1N/1bYN085rm28ez/ew7eiu1p
Va8tAQMu8BhK69ZlvE73lxI/3WVGby143E7yypDsf2dnTjrzE8PNmOBXtUQ/9CWX
AT3SS0o+sWFwEuLaOA3AgX9P5VZT6JxeutvhpuRTKiX7XYS2h4yezsAa+Qt87vDF
j1yMUsPQatCCG8J3uKAe6uTFy6K/4D1pZFIFuIBsIBAod8AQvXy7zmbgni9jbenn
bSCL1kgVNyDpyJ65WfHYPQzRfwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFGiUQDlj
BBv2scXuvb+kDy1YD35iMB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD
MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJDQjEvRDAwREQ0OThCQzAyMTFFQUI4Qzc5MDQ4QzRGOUFFMDIvN0EyQjk3OUU3
NjMwMTFFRkJBODZGRDQ5QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk
BAIAATAeAwQALXSEAwQALXSHAwQBZwlcAwQBZwmkAwQAZyWEMA0GCSqGSIb3DQEB
CwUAA4IBAQBaAMEbCqVES+b5sYPerWBQeON3LbUAtuKUFhOSUN9LAAPKbH0Q4OAk
EnYnKGbGChGWZ8bce/lTZ+2MS9q5qxLaYhUehgyZ4Qn59LaMwrahkb6SpFYAVCeJ
oTl+syDL+0FDpt6c7Hu4d+hcXf57Ipg85AbH31nT4dWZj70kHQCwf6jv88zYHElK
IJzEAjZazAhRgQBmD+rxPDonc8F5oVhtk9f5Y6TbiRpdDmZFIlGtqUNBXeyBTYTM
ChSVd5cdlFvIaL2BuFlY2E/iVc5hw6oJnXG56t25C7BaBD/OZk1Ep+EYYmBSBQxl
ECD6g6cIgm7CmlWhneC6wSYjSzwZLzcA
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:27:08 2026 by rpki-client