Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/D9B1050C794711F18C3268FE77A30FBC.roa
File:                     D9B1050C794711F18C3268FE77A30FBC.roa (raw, json)
Hash identifier:          MZj0KWbRgcpAkQHNAEsOeyaAYyuXdWg3Z7/YmLPlVvg=
Subject key identifier:   C4:64:3C:71:A3:B2:6B:ED:34:BF:83:45:65:39:4C:09:9C:E8:8A:5E
Certificate issuer:       /CN=A9190F97/serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
Certificate serial:       3A
Authority key identifier: CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/D9B1050C794711F18C3268FE77A30FBC.roa
Signing time:             Tue 15 Sep 2026 19:59:10 +0000
ROA not before:           Tue 15 Sep 2026 19:59:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     46606
IP address blocks:        103.211.216.0/23 maxlen: 24
                          103.211.218.0/23 maxlen: 24
                          116.206.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190F97, serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
        Validity
            Not Before: Sep 15 19:59:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa9a38e-1811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:e7:ee:d5:be:64:5f:29:d5:29:20:75:91:
                    8b:2d:fc:b9:82:28:e4:83:54:70:c1:1e:54:56:06:
                    1e:17:dd:7f:5e:bf:95:69:88:90:1d:06:44:fd:cb:
                    9a:37:84:92:74:ec:8c:e6:ea:61:bf:3e:97:f4:0e:
                    69:46:7f:09:42:f2:6e:11:e6:f4:58:2a:13:44:c7:
                    9f:be:4a:19:c9:2f:e2:c7:b9:25:ea:8d:c0:3c:79:
                    c7:4a:90:cc:40:6b:97:68:2f:aa:fd:99:d2:3b:f4:
                    3a:8a:d8:54:84:ef:8c:28:90:b7:af:19:33:bd:95:
                    84:fe:f0:fc:af:c2:59:28:3c:b9:f4:b2:ac:69:5e:
                    79:a3:6d:83:bd:5f:f8:1c:f1:1d:19:f6:2e:d5:92:
                    10:7f:0d:05:8d:aa:8f:0b:e5:68:77:d0:f8:60:97:
                    2a:73:ef:53:a0:aa:99:22:5e:de:f7:c6:f7:03:c4:
                    16:5e:e8:ad:89:67:33:b9:c1:15:37:a4:08:3a:3b:
                    ed:f3:11:d6:44:ae:e8:3f:c4:3a:bf:fc:da:68:66:
                    f2:27:40:5f:a5:76:68:b4:4c:ee:e6:07:bc:8f:f4:
                    96:6b:a5:66:35:9d:58:fc:1a:bc:77:47:43:e4:85:
                    b5:a5:88:8d:2b:5c:2d:fd:f4:d8:6a:c6:c8:80:8e:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:64:3C:71:A3:B2:6B:ED:34:BF:83:45:65:39:4C:09:9C:E8:8A:5E
            X509v3 Authority Key Identifier:
                keyid:CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/D9B1050C794711F18C3268FE77A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.216.0/22
                  116.206.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:d1:bf:c2:82:5e:49:54:5a:92:86:7d:fc:c3:1d:e3:d0:ac:
         5d:16:a5:02:4d:42:63:ba:e7:31:b1:c1:38:56:a3:6e:27:37:
         6b:cb:52:46:2e:04:41:f7:19:da:de:85:9c:68:a1:b8:a8:b0:
         e4:01:ed:41:25:ea:62:72:0f:eb:83:d7:d5:16:f1:3a:3b:75:
         98:da:68:04:d7:7c:35:ae:bb:6b:95:ad:80:38:01:db:90:f8:
         b2:31:9b:aa:b3:12:28:68:b8:16:e2:be:e9:83:e9:88:83:6b:
         d7:1a:30:17:ac:f7:03:a1:11:67:d7:3f:56:9a:cd:3a:b3:d6:
         eb:65:d7:da:0a:1f:98:66:09:ab:69:b3:56:07:19:08:fd:5d:
         05:20:46:c1:f2:df:66:be:33:fc:ca:16:3b:89:4f:d2:92:f3:
         82:21:64:d5:bd:e5:40:17:76:14:ff:22:90:98:43:5b:f9:92:
         36:42:fe:e8:0e:00:15:99:7d:5f:33:69:39:73:20:85:96:52:
         7c:5b:ad:82:b5:a8:01:e0:21:b7:0d:86:ca:6e:65:b2:b1:51:
         67:e7:f4:52:eb:21:3e:29:b7:24:ef:f7:db:bf:16:1f:a6:ec:
         d6:a5:c6:77:64:3a:e3:56:34:5d:19:eb:37:67:35:8f:c1:2e:
         de:69:bb:cf
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MEY5NzExMC8GA1UEBRMoQ0JCRDVCMUMzMUMxNjEyRTE1QUNFQzQ3MjU0RkQyRjMz
RUM2OUM2NDAeFw0yNjA5MTUxOTU5MTBaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYTlhMzhlLTE4MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC60+fu1b5kXynVKSB1kYst/LmCKOSDVHDBHlRWBh4X3X9ev5VpiJAdBkT9y5o3
hJJ07Izm6mG/Ppf0DmlGfwlC8m4R5vRYKhNEx5++ShnJL+LHuSXqjcA8ecdKkMxA
a5doL6r9mdI79DqK2FSE74wokLevGTO9lYT+8PyvwlkoPLn0sqxpXnmjbYO9X/gc
8R0Z9i7VkhB/DQWNqo8L5Wh30Phglypz71OgqpkiXt73xvcDxBZe6K2JZzO5wRU3
pAg6O+3zEdZErug/xDq//NpoZvInQF+ldmi0TO7mB7yP9JZrpWY1nVj8Grx3R0Pk
hbWliI0rXC399NhqxsiAjqgNAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUxGQ8caOy
a+00v4NFZTlMCZzoil4wHwYDVR0jBBgwFoAUy71bHDHBYS4VrOxHJU/S8z7GnGQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwRjk3L0QwRkUwMEFBNzk0
NjExRjFCN0JBODM4RDc3QTMwRkJDL3k3MWJIREhCWVM0VnJPeEhKVV9TOHo3R25H
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveTcxYkhESEJZUzRWck94SEpVX1M4ejdHbkdRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEY5Ny9EMEZFMDBBQTc5NDYxMUYxQjdCQTgzOEQ3N0EzMEZCQy9EOUIxMDUwQzc5
NDcxMUYxOEMzMjY4RkU3N0EzMEZCQy5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAJn09gDBAJ0zmgwDQYJKoZIhvcNAQELBQADggEBADbRv8KCXklUWpKG
ffzDHePQrF0WpQJNQmO65zGxwThWo24nN2vLUkYuBEH3GdrehZxoobiosOQB7UEl
6mJyD+uD19UW8To7dZjaaATXfDWuu2uVrYA4AduQ+LIxm6qzEihouBbivumD6YiD
a9caMBes9wOhEWfXP1aazTqz1utl19oKH5hmCatps1YHGQj9XQUgRsHy32a+M/zK
FjuJT9KS84IhZNW95UAXdhT/IpCYQ1v5kjZC/ugOABWZfV8zaTlzIIWWUnxbrYK1
qAHgIbcNhspuZbKxUWfn9FLrIT4ptyTv99u/Fh+m7NalxndkOuNWNF0Z6zdnNY/B
Lt5pu88=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:10:29 2026 by rpki-client