Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/842CE8807AE311EF91F51E42C4F9AE02.roa
File:                     842CE8807AE311EF91F51E42C4F9AE02.roa (raw, json)
Hash identifier:          xw9T3a2Z489pZsdQ4x8tWBqT2E0wqOqSqnMIFsl4bOU=
Subject key identifier:   18:82:15:24:51:B0:5A:A3:8A:E6:95:E5:87:4C:DA:C1:77:4B:1E:89
Certificate issuer:       /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial:       2537
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/842CE8807AE311EF91F51E42C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:27:31 +0000
ROA not before:           Thu 05 Jun 2025 02:39:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     38235
IP address blocks:        103.231.60.0/22 maxlen: 24
                          163.53.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
                          rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9527 (0x2537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
        Validity
            Not Before: Jun  5 02:39:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a422a2-43d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:31:20:73:53:31:fa:cf:ad:48:57:8a:8f:
                    de:8a:d6:a1:89:2f:ed:49:ec:f9:23:58:a7:37:87:
                    e6:ff:90:4e:4e:4e:59:71:19:c3:a5:f9:a9:b7:42:
                    b0:27:4b:52:8a:75:40:7b:90:bf:cd:77:e2:f4:e1:
                    2b:4e:84:23:77:ed:29:bd:e3:c8:6c:49:26:29:cd:
                    63:27:5b:0f:46:43:4a:89:df:13:dc:23:be:16:2e:
                    7c:22:5a:d3:be:9a:a4:7a:02:13:b6:b3:5d:6b:de:
                    14:2e:86:5c:44:9f:57:b9:f3:2b:56:0a:b1:19:34:
                    c9:fc:b2:2d:66:3c:ff:77:93:7f:46:64:5b:76:70:
                    91:3c:db:20:01:b9:5c:09:91:bd:95:ec:52:65:0b:
                    1d:99:77:34:43:73:c0:c5:b0:2b:fd:03:bb:b5:23:
                    28:76:8b:51:94:f4:97:f5:ff:31:8c:ae:67:22:8b:
                    b0:0b:10:19:87:fb:18:da:33:82:fe:bd:8a:8d:c0:
                    bd:d3:3f:e8:1e:ff:70:0e:f0:9b:af:8f:17:5a:a0:
                    a3:10:99:fb:e5:1e:94:6a:ae:7a:55:27:e4:b3:6f:
                    7d:a1:29:15:21:cd:5b:ef:e4:b3:ca:23:00:7c:d2:
                    1e:15:3b:cd:d3:81:d0:e4:f7:b7:e2:22:b8:6c:07:
                    16:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:82:15:24:51:B0:5A:A3:8A:E6:95:E5:87:4C:DA:C1:77:4B:1E:89
            X509v3 Authority Key Identifier:
                keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/842CE8807AE311EF91F51E42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.60.0/22
                  163.53.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:e7:49:33:bb:bd:fe:c8:53:40:67:2e:f2:ed:8a:96:b9:
         94:17:27:19:5e:a7:b4:7a:ca:ff:d4:8f:7e:72:c4:4f:3b:01:
         0b:84:53:cf:2e:0e:a8:ec:3c:d1:05:77:92:80:f7:10:40:17:
         4e:63:c2:f4:b0:ba:7a:2d:53:04:8c:b6:4d:f2:0f:1d:50:14:
         7c:a0:82:5c:66:41:f2:d9:db:79:ef:8d:e0:21:aa:d6:6a:0f:
         cf:09:9d:2c:47:00:9e:71:31:ea:1f:39:95:e4:7d:b4:9f:d6:
         a2:9f:32:c2:40:79:0c:47:45:bb:c8:c6:aa:b7:2f:52:52:6b:
         83:78:7a:1a:1c:fb:7b:1d:d3:34:89:e2:60:d1:e0:8c:59:d0:
         f2:40:d3:67:92:9b:5f:9e:91:00:01:f8:51:c2:77:9d:d6:0b:
         a8:b7:37:1c:98:f3:f4:7c:28:29:2f:f2:2d:d5:3e:32:60:a4:
         63:17:2b:3b:1b:1e:b2:96:ec:13:ac:68:de:bf:14:62:f7:db:
         0c:ab:99:a7:c5:9f:c0:b2:66:56:2c:9a:1b:c9:33:c8:32:a8:
         0f:7a:45:d7:93:2b:6a:0f:ea:3b:4d:0c:bb:4d:be:32:6d:e1:
         da:be:4c:a2:65:7f:fd:93:88:c0:3f:8b:c1:3d:2a:24:51:4f:
         59:fc:ec:99
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICJTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND
OEYyRDkxQjUwHhcNMjUwNjA1MDIzOTAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjJhMi00M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumAxIHNTMfrPrUhXio/eitahiS/tSez5I1inN4fm/5BOTk5ZcRnDpfmpt0Kw
J0tSinVAe5C/zXfi9OErToQjd+0pvePIbEkmKc1jJ1sPRkNKid8T3CO+Fi58IlrT
vpqkegITtrNda94ULoZcRJ9XufMrVgqxGTTJ/LItZjz/d5N/RmRbdnCRPNsgAblc
CZG9lexSZQsdmXc0Q3PAxbAr/QO7tSModotRlPSX9f8xjK5nIouwCxAZh/sY2jOC
/r2KjcC90z/oHv9wDvCbr48XWqCjEJn75R6Uaq56VSfks299oSkVIc1b7+SzyiMA
fNIeFTvN04HQ5Pe34iK4bAcWHwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBiCFSRR
sFqjiuaV5YdM2sF3Sx6JMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3
MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjlDRDMvODEyMjg2RDI0NzExMTFFNUE0NDk2MzM1QzRGOUFFMDIvODQyQ0U4ODA3
QUUzMTFFRjkxRjUxRTQyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ+c8AwQCozUcMA0GCSqGSIb3DQEBCwUAA4IBAQAr6edJM7u9/shT
QGcu8u2KlrmUFycZXqe0esr/1I9+csRPOwELhFPPLg6o7DzRBXeSgPcQQBdOY8L0
sLp6LVMEjLZN8g8dUBR8oIJcZkHy2dt5743gIarWag/PCZ0sRwCecTHqHzmV5H20
n9ainzLCQHkMR0W7yMaqty9SUmuDeHoaHPt7HdM0ieJg0eCMWdDyQNNnkptfnpEA
AfhRwned1guotzccmPP0fCgpL/It1T4yYKRjFys7Gx6yluwTrGjevxRi99sMq5mn
xZ/AsmZWLJobyTPIMqgPekXXkytqD+o7TQy7Tb4ybeHavkyiZX/9k4jAP4vBPSok
UU9Z/OyZ
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:03 2026 by rpki-client