Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/691CFE18184B11EA85906435C4F9AE02.roa
File:                     691CFE18184B11EA85906435C4F9AE02.roa (raw, json)
Hash identifier:          JetkgiTIcchNzKQihUoSIR/Rh93k0gcwc4qEb1Nz1G8=
Subject key identifier:   47:4E:AB:C9:6E:45:A7:B3:3C:73:E4:1F:AC:9E:FE:49:3C:F3:5B:47
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3A63
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/691CFE18184B11EA85906435C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:22:26 +0000
ROA not before:           Fri 16 Jan 2026 16:13:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38516
IP address blocks:        103.54.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14947 (0x3a63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:32 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4ae12-ae17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ea:33:ed:90:bc:91:10:b9:0d:58:39:af:09:
                    5d:95:9d:1f:97:0a:53:6f:38:d9:79:eb:8c:07:26:
                    d3:20:98:d8:b3:c7:14:9f:61:80:e5:70:a5:ae:a2:
                    ec:02:30:31:c3:c4:32:d8:b5:8b:77:28:a1:20:50:
                    f4:ae:32:98:e1:d1:93:04:cf:1d:26:5f:0c:87:7c:
                    56:9a:8c:1b:37:0e:d3:62:4a:bf:e8:9b:10:f4:1b:
                    34:65:56:d3:be:48:e2:46:27:3a:1e:2a:62:89:6e:
                    cb:18:32:79:7e:47:3c:a8:83:81:6d:ad:89:9e:42:
                    61:d1:93:f2:fa:49:19:1f:0b:f5:47:bd:dd:fd:7d:
                    33:9e:a5:aa:99:17:d2:1c:dc:47:42:ce:0a:c4:00:
                    74:4c:a8:95:bc:5a:d6:37:92:8d:7b:87:88:43:52:
                    a1:8c:5c:11:ea:bc:73:e2:50:2c:a6:67:b1:6e:24:
                    ee:ec:75:92:89:4e:7c:14:65:6a:1e:1a:fe:52:4b:
                    63:11:d9:9a:5a:5a:4a:02:62:04:c3:11:bf:a0:d8:
                    1b:82:60:67:3a:9a:f0:50:4a:77:e5:59:24:b3:b8:
                    1d:47:44:cc:96:1b:dd:e4:cd:a2:48:fe:70:5b:8c:
                    bc:f4:27:44:2e:1a:23:e0:17:5d:61:a2:db:e7:6b:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4E:AB:C9:6E:45:A7:B3:3C:73:E4:1F:AC:9E:FE:49:3C:F3:5B:47
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/691CFE18184B11EA85906435C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:11:a5:a7:12:1a:a0:91:0c:f1:c8:3c:d4:ce:7e:26:1e:88:
         8d:6f:3f:66:00:92:29:c1:a1:33:f7:75:13:d6:cc:df:8a:94:
         ed:e9:db:a1:df:4f:da:57:36:a2:82:95:f0:2c:c6:74:68:90:
         77:5d:89:d6:17:eb:e6:ba:1a:83:05:5a:77:de:07:89:ea:fd:
         08:8e:e2:9f:b2:3b:17:e9:8b:dc:55:2b:6b:8e:83:e6:dc:d1:
         ef:43:b3:5e:f4:9d:44:9c:4a:79:fa:0c:aa:fd:11:1c:12:2f:
         72:f9:51:8a:ca:e7:90:40:49:4e:52:78:f1:17:32:f1:c7:3d:
         b8:89:67:22:72:c3:14:d2:93:7e:57:4a:f6:ea:87:59:20:d1:
         c6:9e:cf:82:bb:f4:4c:a4:54:bf:9d:dd:33:90:bb:ab:80:61:
         46:c9:dd:c3:cb:c8:2f:3e:37:3b:a8:fa:3c:38:88:fd:58:fa:
         07:6e:c0:7c:76:06:cf:fb:3e:07:08:6a:08:f9:b1:b7:8d:0e:
         51:39:09:e2:d9:51:66:ff:04:4b:e0:8a:5f:4d:78:a4:38:13:
         56:cb:21:db:83:f3:df:3f:c2:bb:6c:4f:ff:24:83:66:cc:05:
         06:33:1f:78:ff:18:1e:a1:30:42:46:0c:8b:db:67:bf:d0:f5:
         d6:0b:a9:71
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICOmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzMyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWUxMi1hZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkOoz7ZC8kRC5DVg5rwldlZ0flwpTbzjZeeuMBybTIJjYs8cUn2GA5XClrqLs
AjAxw8Qy2LWLdyihIFD0rjKY4dGTBM8dJl8Mh3xWmowbNw7TYkq/6JsQ9Bs0ZVbT
vkjiRic6HipiiW7LGDJ5fkc8qIOBba2JnkJh0ZPy+kkZHwv1R73d/X0znqWqmRfS
HNxHQs4KxAB0TKiVvFrWN5KNe4eIQ1KhjFwR6rxz4lAspmexbiTu7HWSiU58FGVq
Hhr+UktjEdmaWlpKAmIEwxG/oNgbgmBnOprwUEp35Vkks7gdR0TMlhvd5M2iSP5w
W4y89CdELhoj4BddYaLb52uZ/wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEdOq8lu
RaezPHPkH6ye/kk881tHMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNjkxQ0ZFMTgx
ODRCMTFFQTg1OTA2NDM1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZzZcMA0GCSqGSIb3DQEBCwUAA4IBAQBxEaWnEhqgkQzxyDzUzn4m
HoiNbz9mAJIpwaEz93UT1szfipTt6duh30/aVzaigpXwLMZ0aJB3XYnWF+vmuhqD
BVp33geJ6v0IjuKfsjsX6YvcVStrjoPm3NHvQ7Ne9J1EnEp5+gyq/REcEi9y+VGK
yueQQElOUnjxFzLxxz24iWcicsMU0pN+V0r26odZINHGns+Cu/RMpFS/nd0zkLur
gGFGyd3Dy8gvPjc7qPo8OIj9WPoHbsB8dgbP+z4HCGoI+bG3jQ5ROQni2VFm/wRL
4IpfTXikOBNWyyHbg/PfP8K7bE//JINmzAUGMx94/xgeoTBCRgyL22e/0PXWC6lx
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:18 2026 by rpki-client