Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/9F1777A406BD11EFB27FA94FC4F9AE02.roa
File:                     9F1777A406BD11EFB27FA94FC4F9AE02.roa (raw, json)
Hash identifier:          xodjw8GRj356oQr1PfHbQDGoinJnokIgOKUey7NTlyE=
Subject key identifier:   BD:0D:A5:60:77:E4:59:26:FC:D1:44:92:98:EE:D4:46:AA:B4:B1:B8
Certificate issuer:       /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Certificate serial:       0D9F
Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/9F1777A406BD11EFB27FA94FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:18:03 +0000
ROA not before:           Thu 10 Apr 2025 18:27:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138417
IP address blocks:        103.113.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl
                          rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3487 (0xd9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
        Validity
            Not Before: Apr 10 18:27:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42e7b-29a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d4:a2:fd:4d:a4:54:c3:7d:9b:f3:41:be:f4:
                    65:fe:e1:f6:da:a3:6f:c1:db:3c:69:92:53:e3:4f:
                    9c:ba:ed:8a:32:40:bb:be:3c:5e:dd:87:40:40:34:
                    d3:63:a8:86:4c:50:91:fc:17:50:34:d1:30:83:4e:
                    c3:bd:ae:f8:fc:1d:58:95:73:ed:ef:07:ec:87:56:
                    55:71:aa:0e:78:b1:50:0e:6c:6d:40:d6:f8:3d:c7:
                    ec:f1:da:75:4b:cd:b5:cb:72:f0:12:44:a1:b8:63:
                    0a:e2:9f:74:f6:82:23:3e:8e:d7:dc:c4:04:e4:57:
                    fd:83:3a:0e:cc:87:c2:6a:d7:fe:e8:81:72:ab:2a:
                    fe:f7:c6:b0:db:5f:98:47:94:b4:75:ab:58:9c:49:
                    81:0b:16:a6:87:67:36:20:f1:9c:2a:31:d2:5d:f8:
                    20:fb:1f:5d:1f:e0:44:43:8c:3f:04:30:64:43:f5:
                    b8:14:59:e9:ba:5a:d2:cb:d8:29:0e:7f:3d:82:ad:
                    a1:a9:e5:4e:bc:8e:0c:f1:78:b0:be:82:db:3d:4c:
                    04:20:47:96:5a:f2:87:b5:32:6e:93:88:43:31:c0:
                    d1:85:41:a7:80:18:96:9f:2f:f0:84:ef:5d:74:dd:
                    cc:42:05:c4:16:1c:70:73:66:b3:c1:c8:ad:39:46:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0D:A5:60:77:E4:59:26:FC:D1:44:92:98:EE:D4:46:AA:B4:B1:B8
            X509v3 Authority Key Identifier:
                keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/9F1777A406BD11EFB27FA94FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:3b:93:28:19:a5:d8:f4:98:16:7f:ae:eb:40:91:e5:fb:f1:
         95:ac:35:1a:2b:f6:d2:ea:b9:74:73:b3:88:92:de:98:91:f0:
         d7:55:1b:a5:40:a0:3b:46:b5:28:72:63:6f:1e:19:b2:aa:25:
         74:fb:bb:f8:71:39:d8:32:6c:02:4b:5f:3c:ad:6b:1d:6c:2b:
         1c:6e:80:19:7a:0c:55:f6:99:83:62:1f:4c:26:97:bb:34:a1:
         0c:74:3e:90:13:e6:e7:a3:48:2b:44:b5:a6:79:01:d2:bb:fc:
         37:69:22:06:59:97:69:b1:28:41:8a:be:15:70:97:f0:67:f5:
         67:b6:86:db:1d:42:23:14:28:d0:88:f6:57:94:a3:c5:6e:93:
         32:bf:dc:90:9b:ce:aa:94:f8:c8:8c:a8:1d:e7:c7:a1:38:16:
         8c:af:a4:3f:a6:38:17:0a:7c:fc:b5:a6:d4:4e:1c:8d:70:5f:
         0f:eb:f6:6f:2c:05:cc:b1:cd:3b:fd:44:6c:9d:85:f6:07:73:
         b5:9c:58:db:b8:2d:a5:63:6e:1f:1c:8f:01:bf:57:a8:74:14:
         03:c9:04:17:ff:4b:29:df:43:f4:db:3c:60:3c:2e:4d:36:b6:
         6c:13:94:c2:b2:9d:7f:47:36:7a:5a:26:36:38:01:eb:8d:c6:
         e8:db:a4:97
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB
RUQ4REVBNUMwHhcNMjUwNDEwMTgyNzI2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmU3Yi0yOWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA59Si/U2kVMN9m/NBvvRl/uH22qNvwds8aZJT40+cuu2KMkC7vjxe3YdAQDTT
Y6iGTFCR/BdQNNEwg07Dva74/B1YlXPt7wfsh1ZVcaoOeLFQDmxtQNb4Pcfs8dp1
S821y3LwEkShuGMK4p909oIjPo7X3MQE5Ff9gzoOzIfCatf+6IFyqyr+98aw21+Y
R5S0datYnEmBCxamh2c2IPGcKjHSXfgg+x9dH+BEQ4w/BDBkQ/W4FFnpulrSy9gp
Dn89gq2hqeVOvI4M8XiwvoLbPUwEIEeWWvKHtTJuk4hDMcDRhUGngBiWny/whO9d
dN3MQgXEFhxwc2azwcitOUbslQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL0NpWB3
5Fkm/NFEkpju1EaqtLG4MB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy
QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42
bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTA5RDcvNEE0MjgyOTRFMkIxMTFFOUJDRUE0RjUzQzRGOUFFMDIvOUYxNzc3QTQw
NkJEMTFFRkIyN0ZBOTRGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3FtMA0GCSqGSIb3DQEBCwUAA4IBAQAWO5MoGaXY9JgWf67rQJHl
+/GVrDUaK/bS6rl0c7OIkt6YkfDXVRulQKA7RrUocmNvHhmyqiV0+7v4cTnYMmwC
S188rWsdbCscboAZegxV9pmDYh9MJpe7NKEMdD6QE+bno0grRLWmeQHSu/w3aSIG
WZdpsShBir4VcJfwZ/VntobbHUIjFCjQiPZXlKPFbpMyv9yQm86qlPjIjKgd58eh
OBaMr6Q/pjgXCnz8tabUThyNcF8P6/ZvLAXMsc07/URsnYX2B3O1nFjbuC2lY24f
HI8Bv1eodBQDyQQX/0sp30P02zxgPC5NNrZsE5TCsp1/RzZ6WiY2OAHrjcbo26SX
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:17 2026 by rpki-client