Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/57845FE2794811F1AAEBC54078A30FBC.roa
File:                     57845FE2794811F1AAEBC54078A30FBC.roa (raw, json)
Hash identifier:          w1yghT1rOxwGO8/T6GJUmND+ehogxUkK8p0zMCmeKII=
Subject key identifier:   F4:D5:53:9B:B0:85:CB:76:CC:F7:7E:9A:0A:D7:EF:C8:E2:22:7F:46
Certificate issuer:       /CN=A9190F97/serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
Certificate serial:       37
Authority key identifier: CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/57845FE2794811F1AAEBC54078A30FBC.roa
Signing time:             Tue 15 Sep 2026 19:59:05 +0000
ROA not before:           Tue 15 Sep 2026 19:59:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198949
IP address blocks:        103.211.216.0/23 maxlen: 24
                          103.211.218.0/23 maxlen: 24
                          116.206.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190F97, serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
        Validity
            Not Before: Sep 15 19:59:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa9a389-9b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:dd:99:dd:6b:b3:8a:6d:4c:fd:f5:ea:97:
                    71:be:7b:3e:91:e4:5a:33:cc:91:04:ec:0e:2a:d9:
                    20:3d:4f:6c:c3:43:ff:b1:1a:04:1e:e2:1f:48:9b:
                    83:7f:2a:d7:28:d1:f9:e6:00:7f:45:e1:91:74:7d:
                    8c:23:a2:dd:cf:86:3d:d6:07:78:42:a4:23:7c:32:
                    99:ec:10:5d:0e:0b:e9:1d:16:f9:d8:d9:47:b6:54:
                    5a:7b:21:7b:01:85:d2:40:8d:7d:71:39:55:34:9f:
                    86:ab:9b:f0:b8:8f:71:b5:49:57:e1:08:a1:bb:a5:
                    89:ad:10:13:99:14:d4:47:63:bb:d7:5d:09:d5:2f:
                    79:5d:c3:1e:86:24:3f:4d:49:df:6d:a8:a4:d2:3f:
                    f8:ad:3e:a9:f7:a4:f1:c9:c9:98:eb:35:9f:69:6e:
                    f2:42:69:59:bb:df:70:7f:e4:75:99:ba:0b:1a:0d:
                    fe:82:4c:71:09:ca:1a:99:bd:16:80:9b:d4:d7:7e:
                    0b:ca:5c:31:94:8d:bc:74:e0:b0:f9:b8:7c:37:d1:
                    5a:81:e0:af:cd:5e:18:4e:86:54:cc:b6:a6:7d:d8:
                    0f:b0:3b:8a:82:63:44:0b:ad:fb:f7:bf:a1:14:c2:
                    9c:78:02:a4:eb:4d:ea:cd:80:d5:14:82:29:b6:41:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D5:53:9B:B0:85:CB:76:CC:F7:7E:9A:0A:D7:EF:C8:E2:22:7F:46
            X509v3 Authority Key Identifier:
                keyid:CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/57845FE2794811F1AAEBC54078A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.216.0/22
                  116.206.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:fe:7c:d6:77:22:dd:2b:a6:32:31:35:aa:e0:f3:b2:11:55:
         db:23:cb:75:be:94:81:a9:cc:80:62:bc:ef:1a:ab:c2:9e:bd:
         97:59:3f:bb:e2:90:20:c0:af:d8:0c:e8:07:84:ac:e3:c1:81:
         ef:82:6b:1a:dd:34:c1:07:69:9c:cc:f3:17:f2:9b:87:46:c1:
         9f:1b:c4:0a:46:53:23:c4:ce:ce:e6:31:04:82:c3:d2:0f:01:
         b4:1a:80:3d:46:d3:cc:d7:57:68:75:7c:75:a0:12:f1:3c:0d:
         8d:97:af:39:63:87:9f:97:8e:7d:e9:e0:65:f9:b5:c7:6b:65:
         01:e0:54:b9:bb:36:22:65:c1:77:58:53:3d:a6:63:af:7a:2e:
         43:a7:ad:6a:b9:a8:2b:81:27:3a:72:37:6d:90:35:85:77:d9:
         79:e3:3c:14:7a:56:64:05:6c:30:f4:44:da:40:cd:78:b0:a0:
         23:f6:6c:9b:f5:e4:2d:8e:ec:c6:cd:9f:93:2a:b0:16:b1:8c:
         f8:89:14:b8:a1:50:90:88:2f:07:b0:b5:f7:ff:14:01:ad:15:
         eb:21:43:bc:13:fa:74:54:3a:37:6e:61:32:a5:95:19:8a:c1:
         cd:4b:7d:8f:98:af:88:c2:39:91:84:b2:93:dc:df:09:d7:6e:
         9b:ba:b7:d7
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MEY5NzExMC8GA1UEBRMoQ0JCRDVCMUMzMUMxNjEyRTE1QUNFQzQ3MjU0RkQyRjMz
RUM2OUM2NDAeFw0yNjA5MTUxOTU5MDVaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYTlhMzg5LTliNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0j92Z3Wuzim1M/fXql3G+ez6R5FozzJEE7A4q2SA9T2zDQ/+xGgQe4h9Im4N/
Ktco0fnmAH9F4ZF0fYwjot3Phj3WB3hCpCN8MpnsEF0OC+kdFvnY2Ue2VFp7IXsB
hdJAjX1xOVU0n4arm/C4j3G1SVfhCKG7pYmtEBOZFNRHY7vXXQnVL3ldwx6GJD9N
Sd9tqKTSP/itPqn3pPHJyZjrNZ9pbvJCaVm733B/5HWZugsaDf6CTHEJyhqZvRaA
m9TXfgvKXDGUjbx04LD5uHw30VqB4K/NXhhOhlTMtqZ92A+wO4qCY0QLrfv3v6EU
wpx4AqTrTerNgNUUgim2QRIdAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQU9NVTm7CF
y3bM936aCtfvyOIif0YwHwYDVR0jBBgwFoAUy71bHDHBYS4VrOxHJU/S8z7GnGQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwRjk3L0QwRkUwMEFBNzk0
NjExRjFCN0JBODM4RDc3QTMwRkJDL3k3MWJIREhCWVM0VnJPeEhKVV9TOHo3R25H
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveTcxYkhESEJZUzRWck94SEpVX1M4ejdHbkdRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEY5Ny9EMEZFMDBBQTc5NDYxMUYxQjdCQTgzOEQ3N0EzMEZCQy81Nzg0NUZFMjc5
NDgxMUYxQUFFQkM1NDA3OEEzMEZCQy5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAJn09gDBAJ0zmgwDQYJKoZIhvcNAQELBQADggEBACv+fNZ3It0rpjIx
Narg87IRVdsjy3W+lIGpzIBivO8aq8KevZdZP7vikCDAr9gM6AeErOPBge+Caxrd
NMEHaZzM8xfym4dGwZ8bxApGUyPEzs7mMQSCw9IPAbQagD1G08zXV2h1fHWgEvE8
DY2Xrzljh5+Xjn3p4GX5tcdrZQHgVLm7NiJlwXdYUz2mY696LkOnrWq5qCuBJzpy
N22QNYV32XnjPBR6VmQFbDD0RNpAzXiwoCP2bJv15C2O7MbNn5MqsBaxjPiJFLih
UJCILwewtff/FAGtFeshQ7wT+nRUOjduYTKllRmKwc1LfY+Yr4jCOZGEspPc3wnX
bpu6t9c=
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:39:15 2026 by rpki-client