Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa
File:                     B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa (raw, json)
Hash identifier:          nE+pOJPLk6jfID++mD43Yvpbl+NARuO8z1twRZpcMt8=
Subject key identifier:   C0:F7:90:52:EA:54:65:5B:22:95:FD:5D:5A:2C:52:FD:FB:55:7E:22
Certificate issuer:       /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
Certificate serial:       0693
Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa
Signing time:             Wed 10 Jun 2026 23:27:13 +0000
ROA not before:           Wed 10 Jun 2026 23:27:13 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     139278
IP address blocks:        103.140.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl
                          rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180FA7, serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
        Validity
            Not Before: Jun 10 23:27:13 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a29f2d0-95c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:b4:d1:a0:08:a2:e3:b0:8f:f8:cb:7d:6f:
                    fd:de:8b:f3:07:31:86:ed:b0:7c:71:5b:90:1a:88:
                    fb:db:7c:0d:89:af:42:38:67:09:dc:e1:a2:12:16:
                    1f:a3:61:a0:0e:d8:27:41:d0:d8:d5:76:9f:7b:58:
                    08:ed:ab:8a:95:01:d9:c8:56:bb:8b:70:ea:6a:c2:
                    ba:37:38:2d:3f:60:4f:9e:c5:7c:e7:df:5f:2a:eb:
                    83:fc:42:7c:2d:7b:20:74:ad:7a:f2:13:bc:a7:c7:
                    8e:b4:58:c9:43:ce:2a:26:28:f2:29:a7:04:cf:b1:
                    54:ee:d4:54:8b:23:d7:cc:4c:40:5d:60:49:f7:f7:
                    64:2d:8e:6f:bc:ac:b5:9a:e2:f8:e8:b8:83:23:e0:
                    90:9c:43:85:63:18:89:f9:0c:18:be:8a:d2:60:fb:
                    bc:b6:fd:3f:33:d1:31:e8:b7:71:d2:ff:d2:ed:19:
                    f9:89:4b:c5:4c:37:f4:80:bb:d4:1d:95:b0:6c:40:
                    98:1e:78:2f:55:38:ac:b1:78:02:4b:d0:63:a2:99:
                    52:73:34:3d:2a:ef:07:17:3d:d1:a4:40:e4:dd:8b:
                    e3:8b:45:ea:02:9c:b6:b4:80:f5:0b:ac:0a:d0:e8:
                    c5:c5:14:62:01:cb:63:a0:01:02:ce:19:0f:90:a0:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:90:52:EA:54:65:5B:22:95:FD:5D:5A:2C:52:FD:FB:55:7E:22
            X509v3 Authority Key Identifier:
                keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:54:2b:8a:bc:2b:9c:e4:af:d2:68:ca:22:a9:13:0e:53:af:
         c3:9b:2e:f7:0f:e2:41:f8:64:32:b6:8c:be:9a:62:d5:1b:bb:
         a8:c4:0e:cf:71:95:e3:1d:fc:3a:50:07:75:4e:ae:2f:90:2e:
         72:cf:78:a4:45:9b:a6:59:c6:c2:46:89:a3:70:8b:79:28:11:
         08:0e:a1:4a:9a:73:51:97:81:76:88:d5:60:eb:f5:e1:a4:68:
         ef:82:e3:e7:a4:7b:ab:7c:04:9e:59:2c:28:f7:b8:0c:67:20:
         fd:c5:0e:b6:e5:7a:e0:3b:e5:57:19:ec:09:31:69:db:fc:4d:
         2c:a5:31:5b:fb:4a:02:2b:31:46:59:49:c9:db:5e:9e:b9:4e:
         ed:bd:d4:4f:00:ee:a0:52:75:5f:4f:22:8b:07:28:7b:88:dc:
         51:7b:2e:02:30:c6:68:05:b5:7f:c2:77:6e:9f:d9:e5:d0:97:
         e2:9d:07:81:e9:bb:05:a1:9d:de:9c:20:60:d4:ab:1d:f9:fa:
         c7:97:a5:f6:b7:a0:46:0e:35:b0:36:2d:1c:98:49:a8:d0:d6:
         fa:ac:f0:1c:c7:bc:db:70:c7:16:d5:15:e6:4f:83:41:59:b2:
         35:99:8a:bd:0a:5c:5f:8f:3c:c2:e2:c2:b4:c6:74:d9:76:d2:
         ea:20:6d:40
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBGQTcxMTAvBgNVBAUTKDE5MzREMzBFODY4QzJCNjJFQTc5Qjc5ODI2QjIxQ0Ez
RUUzRjM3NDMwHhcNMjYwNjEwMjMyNzEzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI5ZjJkMC05NWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApaG00aAIouOwj/jLfW/93ovzBzGG7bB8cVuQGoj723wNia9COGcJ3OGiEhYf
o2GgDtgnQdDY1Xafe1gI7auKlQHZyFa7i3DqasK6NzgtP2BPnsV8599fKuuD/EJ8
LXsgdK168hO8p8eOtFjJQ84qJijyKacEz7FU7tRUiyPXzExAXWBJ9/dkLY5vvKy1
muL46LiDI+CQnEOFYxiJ+QwYvorSYPu8tv0/M9Ex6Ldx0v/S7Rn5iUvFTDf0gLvU
HZWwbECYHngvVTissXgCS9BjoplSczQ9Ku8HFz3RpEDk3Yvji0XqApy2tID1C6wK
0OjFxRRiActjoAECzhkPkKDVCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMD3kFLq
VGVbIpX9XVosUv37VX4iMB8GA1UdIwQYMBaAFBk00w6GjCti6nm3mCayHKPuPzdD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEZBNy9BN0ZBRDRGNkMy
QjkxMUVCQjVDODY4NzFDNEY5QUUwMi9HVFRURG9hTUsyTHFlYmVZSnJJY28tNF9O
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dUVFREb2FNSzJMcWViZVlKckljby00X04wTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODBGQTcvQTdGQUQ0RjZDMkI5MTFFQkI1Qzg2ODcxQzRGOUFFMDIvQjg0QzkzQjRD
MkJDMTFFQkJFOURDRjczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4y0MA0GCSqGSIb3DQEBCwUAA4IBAQCEVCuKvCuc5K/SaMoiqRMO
U6/Dmy73D+JB+GQytoy+mmLVG7uoxA7PcZXjHfw6UAd1Tq4vkC5yz3ikRZumWcbC
RomjcIt5KBEIDqFKmnNRl4F2iNVg6/XhpGjvguPnpHurfASeWSwo97gMZyD9xQ62
5XrgO+VXGewJMWnb/E0spTFb+0oCKzFGWUnJ216euU7tvdRPAO6gUnVfTyKLByh7
iNxRey4CMMZoBbV/wndun9nl0JfinQeB6bsFoZ3enCBg1Ksd+frHl6X2t6BGDjWw
Ni0cmEmo0Nb6rPAcx7zbcMcW1RXmT4NBWbI1mYq9ClxfjzzC4sK0xnTZdtLqIG1A
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:04:08 2026 by rpki-client