Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A431410948F11ECBDE81D52C4F9AE02.roa
File:                     9A431410948F11ECBDE81D52C4F9AE02.roa (raw, json)
Hash identifier:          FY+egau3cWATTaVLOUJpVagiAdvnYpIe1aa6SgiVOgY=
Subject key identifier:   4E:87:72:1A:DE:47:D1:79:63:6B:D1:D7:E7:AA:AA:C4:09:05:67:A5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D38E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A431410948F11ECBDE81D52C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:26:43 +0000
ROA not before:           Thu 08 May 2025 16:06:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136351
IP address blocks:        103.179.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54158 (0xd38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:06:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bd22-647b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:56:d8:9c:c1:29:34:e7:cc:a4:f4:1f:79:
                    d0:c8:7a:f4:37:aa:68:1a:d1:c8:f2:26:36:9b:25:
                    f1:ef:8f:2e:b8:80:15:a5:8d:68:e6:e8:51:76:b7:
                    69:35:a9:98:e6:9f:fe:73:af:90:63:fd:a6:01:37:
                    4f:e7:6f:eb:c8:0e:42:84:c1:ca:e0:09:8b:21:81:
                    bf:53:a0:4b:4f:93:99:2d:88:f2:2c:71:f1:03:cb:
                    a5:1f:07:0c:d9:0d:27:1e:b4:d1:d3:f9:d2:ad:00:
                    24:cd:a4:b0:c5:4d:b0:b9:24:76:f5:6f:4d:d0:a8:
                    0f:78:a4:15:6b:89:3b:8d:48:8f:5d:0b:4c:8d:73:
                    4f:91:f9:36:cd:66:76:02:03:0b:c9:bc:e2:ed:b7:
                    f7:f9:6b:0e:4f:19:c3:02:7b:44:fb:67:74:d3:68:
                    59:d0:12:c8:c6:89:52:2c:87:e7:7c:42:5c:27:93:
                    8c:63:52:1b:1a:12:8a:8c:75:08:8b:7b:1e:fd:d8:
                    5f:d5:92:5e:20:86:ff:f7:6f:41:f6:43:23:8a:c2:
                    2f:13:5a:b2:5e:89:d8:35:ba:77:36:b7:db:ee:b7:
                    48:e3:82:f4:c7:fe:ac:b2:2d:8e:8d:12:20:b9:32:
                    10:37:1a:fb:2d:b3:1b:58:a8:f6:42:11:c0:c3:1a:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:87:72:1A:DE:47:D1:79:63:6B:D1:D7:E7:AA:AA:C4:09:05:67:A5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A431410948F11ECBDE81D52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:58:e1:76:bc:4f:bb:a5:6c:10:fc:e7:ff:4e:32:e7:3e:ab:
         a1:3a:d6:76:80:a2:83:ea:bf:16:d0:11:92:fd:ad:13:9b:8a:
         a9:a3:b0:4f:a3:56:fa:39:10:0c:9d:02:7a:9e:03:87:1a:52:
         10:c5:e5:20:84:fa:97:af:b7:a7:1d:01:ec:1e:75:7d:c0:70:
         72:c9:ae:41:32:95:e8:78:bc:a1:d5:65:98:c6:bf:c4:50:97:
         50:e7:49:a9:c9:78:2a:a0:3b:94:1b:b4:a2:a9:c8:a2:84:96:
         72:84:91:1a:14:34:63:4d:21:2c:f7:5b:c4:f2:73:53:6c:de:
         68:5f:da:c0:25:1e:8e:76:ee:30:b8:b8:90:55:89:76:ea:8b:
         7f:ad:1e:bd:53:36:10:18:07:f5:ad:16:b0:57:5c:28:42:ad:
         67:2a:7c:1d:e4:66:e6:30:28:4b:fd:1c:ae:cc:d9:34:ab:c2:
         d3:7a:df:04:19:69:d7:43:59:de:00:95:9b:47:29:1b:c5:91:
         f8:14:de:c2:36:69:d5:ee:f5:8f:89:a4:36:3d:15:f2:3d:f7:
         20:bd:10:7b:7c:e4:43:4f:12:64:95:89:26:f6:89:00:4c:c2:
         b0:da:6d:fc:96:32:eb:16:3f:ee:c3:c6:69:4e:d0:84:18:da:
         64:23:99:b7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANOOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDY1N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJkMjItNjQ3YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMzPVticwSk058yk9B950Mh69DeqaBrRyPImNpsl8e+PLriAFaWNaOboUXa3
aTWpmOaf/nOvkGP9pgE3T+dv68gOQoTByuAJiyGBv1OgS0+TmS2I8ixx8QPLpR8H
DNkNJx600dP50q0AJM2ksMVNsLkkdvVvTdCoD3ikFWuJO41Ij10LTI1zT5H5Ns1m
dgIDC8m84u239/lrDk8ZwwJ7RPtndNNoWdASyMaJUiyH53xCXCeTjGNSGxoSiox1
CIt7Hv3YX9WSXiCG//dvQfZDI4rCLxNasl6J2DW6dza32+63SOOC9Mf+rLItjo0S
ILkyEDca+y2zG1io9kIRwMMaFSkCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBROh3Ia
3kfReWNr0dfnqqrECQVnpTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlBNDMxNDEw
OTQ4RjExRUNCREU4MUQ1MkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGezkzANBgkqhkiG9w0BAQsFAAOCAQEADljhdrxPu6VsEPzn/04y
5z6roTrWdoCig+q/FtARkv2tE5uKqaOwT6NW+jkQDJ0Cep4DhxpSEMXlIIT6l6+3
px0B7B51fcBwcsmuQTKV6Hi8odVlmMa/xFCXUOdJqcl4KqA7lBu0oqnIooSWcoSR
GhQ0Y00hLPdbxPJzU2zeaF/awCUejnbuMLi4kFWJduqLf60evVM2EBgH9a0WsFdc
KEKtZyp8HeRm5jAoS/0crszZNKvC03rfBBlp10NZ3gCVm0cpG8WR+BTewjZp1e71
j4mkNj0V8j33IL0Qe3zkQ08SZJWJJvaJAEzCsNpt/JYy6xY/7sPGaU7QhBjaZCOZ
tw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:46 2026 by rpki-client