Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/2FF4108A0C3911EB828BDC25C4F9AE02.roa
File:                     2FF4108A0C3911EB828BDC25C4F9AE02.roa (raw, json)
Hash identifier:          +1MurbXyF5va03lXfL/j9G2HKWwfacoafaUYrKj0wIM=
Subject key identifier:   2D:BC:18:80:BF:BB:E6:1D:31:21:BA:55:41:71:4A:C6:B3:A0:EA:45
Certificate issuer:       /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
Certificate serial:       0825
Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/2FF4108A0C3911EB828BDC25C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:24:26 +0000
ROA not before:           Tue 28 Oct 2025 21:10:49 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        103.9.51.0/24 maxlen: 24
                          103.81.162.0/24 maxlen: 24
                          103.195.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl
                          rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085 (0x825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04
        Validity
            Not Before: Oct 28 21:10:49 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a42ffa-590b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:22:27:58:2e:8b:29:59:80:58:13:1c:22:
                    38:54:0a:19:bc:3f:d8:09:94:26:5d:06:81:c2:14:
                    75:31:46:67:eb:19:d4:d2:35:81:ab:c7:58:33:9b:
                    0d:ec:53:52:3c:2c:7a:59:da:8d:8e:b3:89:b4:32:
                    b2:56:a3:52:a5:5a:70:6e:cb:d6:00:7b:0f:a3:d6:
                    75:09:91:c9:ff:bc:2e:43:9e:14:50:ce:ab:e0:be:
                    13:b0:91:7f:67:14:94:28:a7:98:82:6d:c1:25:79:
                    ed:58:df:b4:b6:64:ae:e9:46:9c:6e:14:0c:7f:dc:
                    bf:00:67:f3:71:f3:2a:e2:46:b5:f3:f3:72:a0:15:
                    68:92:b4:d1:14:2b:6a:74:a1:4c:55:c5:9a:b5:9f:
                    c7:ec:a9:53:3f:51:b0:a6:a0:85:22:6a:94:42:f6:
                    c0:24:82:20:01:59:52:38:56:7e:b0:de:c8:ae:0b:
                    d8:93:bf:18:7d:e6:db:02:77:74:f3:fd:64:59:c3:
                    6d:d5:d6:cc:ec:b4:7d:37:96:f2:b9:cc:15:5f:4c:
                    d0:fe:60:a9:f8:22:52:32:49:11:0a:f2:97:53:ce:
                    c6:30:0e:3e:0f:30:5e:dd:f2:f7:73:32:36:d8:65:
                    6d:b7:be:f4:62:a1:bb:2a:2b:dd:aa:96:b3:e6:04:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BC:18:80:BF:BB:E6:1D:31:21:BA:55:41:71:4A:C6:B3:A0:EA:45
            X509v3 Authority Key Identifier:
                keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/2FF4108A0C3911EB828BDC25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.51.0/24
                  103.81.162.0/24
                  103.195.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:15:9b:0a:61:1c:72:8e:18:c1:1a:4e:10:69:47:23:27:
         11:23:09:c2:6e:6b:6b:73:69:84:62:a0:ad:e6:8d:ec:59:0d:
         ad:24:d6:01:5b:ae:e9:db:fa:8b:09:70:0e:33:09:3d:1e:ef:
         cc:b5:a4:cd:18:76:94:5f:f4:13:8e:c6:e8:cb:72:47:d1:bc:
         1a:5c:8b:95:b0:a0:b4:e7:36:ed:de:70:19:2d:cb:ae:ba:18:
         16:a9:2b:b2:f4:74:a6:8e:eb:26:c1:0b:6f:42:b9:fb:5f:ae:
         82:71:40:5f:88:cf:ac:11:ae:1e:fb:75:62:f1:24:63:e4:b9:
         77:3b:66:c8:79:fe:d1:cb:ba:17:6a:99:d9:0f:53:1e:d9:64:
         a5:cc:d0:b0:11:9d:a4:a9:b2:48:2f:a9:c2:8d:76:02:db:81:
         79:69:02:0e:06:c0:ad:ed:66:eb:df:a1:81:ed:d3:03:a8:92:
         b4:60:fc:d8:e4:ec:17:33:6b:46:5a:2c:52:d2:1e:a4:48:d2:
         ff:45:68:b3:54:77:c1:ef:f4:5d:b2:c1:d4:07:67:4d:88:ca:
         ab:c4:5b:a3:ae:4f:ce:b2:45:fd:a4:37:ab:bf:f7:2f:f0:9d:
         ba:a3:42:71:a5:4b:61:fe:28:ff:76:80:1f:a4:be:23:d3:1b:
         e1:1f:98:a9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz
NzFCRURDMDQwHhcNMjUxMDI4MjExMDQ5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmZmYS01OTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgeciJ1guiylZgFgTHCI4VAoZvD/YCZQmXQaBwhR1MUZn6xnU0jWBq8dYM5sN
7FNSPCx6WdqNjrOJtDKyVqNSpVpwbsvWAHsPo9Z1CZHJ/7wuQ54UUM6r4L4TsJF/
ZxSUKKeYgm3BJXntWN+0tmSu6UacbhQMf9y/AGfzcfMq4ka18/NyoBVokrTRFCtq
dKFMVcWatZ/H7KlTP1GwpqCFImqUQvbAJIIgAVlSOFZ+sN7IrgvYk78YfebbAnd0
8/1kWcNt1dbM7LR9N5byucwVX0zQ/mCp+CJSMkkRCvKXU87GMA4+DzBe3fL3czI2
2GVtt770YqG7Kivdqpaz5gS+8QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFC28GIC/
u+YdMSG6VUFxSsazoOpFMB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD
MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjRGRDIvQjk0QjRGN0MwQzM2MTFFQjg1MjMzMTIxQzRGOUFFMDIvMkZGNDEwOEEw
QzM5MTFFQjgyOEJEQzI1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZwkzAwQAZ1GiAwQAZ8OPMA0GCSqGSIb3DQEBCwUAA4IBAQBC8hWb
CmEcco4YwRpOEGlHIycRIwnCbmtrc2mEYqCt5o3sWQ2tJNYBW67p2/qLCXAOMwk9
Hu/MtaTNGHaUX/QTjsboy3JH0bwaXIuVsKC05zbt3nAZLcuuuhgWqSuy9HSmjusm
wQtvQrn7X66CcUBfiM+sEa4e+3Vi8SRj5Ll3O2bIef7Ry7oXapnZD1Me2WSlzNCw
EZ2kqbJIL6nCjXYC24F5aQIOBsCt7Wbr36GB7dMDqJK0YPzY5OwXM2tGWixS0h6k
SNL/RWizVHfB7/RdssHUB2dNiMqrxFujrk/OskX9pDerv/cv8J26o0JxpUth/ij/
doAfpL4j0xvhH5ip
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:28 2026 by rpki-client