Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/4D36C07677C311EF84D38A3BC4F9AE02.roa
File:                     4D36C07677C311EF84D38A3BC4F9AE02.roa (raw, json)
Hash identifier:          UonUgi37eGK5+UZSgpaI5VcXY/NpGaUyQWHx23St90A=
Subject key identifier:   B6:7B:22:C7:33:CC:9D:B6:95:B9:31:C1:0B:3D:C5:87:56:25:CC:DD
Certificate issuer:       /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Certificate serial:       0111
Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/4D36C07677C311EF84D38A3BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:53:14 +0000
ROA not before:           Sat 31 May 2025 06:57:57 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132530
IP address blocks:        103.24.192.0/24 maxlen: 24
                          103.24.193.0/24 maxlen: 24
                          2001:df3:b2c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
                          rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
        Validity
            Not Before: May 31 06:57:57 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e25a-4086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:a1:ae:e6:59:07:d9:10:24:53:9b:ba:44:
                    7e:43:fe:36:ae:98:3c:fb:c8:b2:1c:89:58:37:f7:
                    e0:fb:1d:a6:12:50:d5:f2:66:fa:be:a8:91:88:b4:
                    c0:d3:be:37:21:f3:c3:87:a1:6b:3d:4b:a0:27:ec:
                    56:64:5a:bd:34:87:f4:ac:56:c7:a2:89:9d:de:7c:
                    7e:b5:d4:d3:0b:2d:f0:64:5c:52:62:f9:6a:02:17:
                    8f:52:5e:61:6f:ca:74:cc:fd:3b:ae:e7:35:3c:a6:
                    06:0c:c3:d7:09:29:ff:29:6b:b9:6a:b8:fe:8e:51:
                    6e:8b:4d:9e:f4:9e:1e:61:c1:9e:ac:53:aa:62:3a:
                    8c:51:f6:5d:9b:6a:4d:9c:74:24:6b:e8:6d:2c:9c:
                    36:35:5f:c9:47:5d:c8:6f:62:fc:0f:a3:c3:bd:89:
                    ae:c5:8d:5e:18:5e:9f:22:dc:84:27:97:0c:4f:1c:
                    a1:f7:bc:35:2b:c9:f2:58:23:3c:1a:f9:be:43:3c:
                    bb:42:1b:53:5a:a6:1c:3b:60:db:84:8d:60:b8:24:
                    7a:a1:7f:a5:ab:0d:74:29:40:66:79:c5:9b:6a:4a:
                    cd:a3:ec:40:6a:07:b4:4a:8d:3f:8a:23:a2:67:0f:
                    03:5d:24:6c:71:9a:cc:a2:91:c7:ab:7e:f0:dd:41:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7B:22:C7:33:CC:9D:B6:95:B9:31:C1:0B:3D:C5:87:56:25:CC:DD
            X509v3 Authority Key Identifier:
                keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/4D36C07677C311EF84D38A3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.192.0/23
                IPv6:
                  2001:df3:b2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:1b:09:e9:20:f7:fd:8d:5a:1c:83:05:30:a8:e8:34:cb:59:
         8f:0c:33:d0:fb:c5:a2:22:f4:68:98:01:3d:da:82:51:c3:e3:
         27:dc:ba:1c:c1:97:f0:23:6d:b8:d3:3a:47:f4:f9:58:ed:87:
         61:13:42:8d:d5:ed:b3:8e:c5:2c:d1:93:01:8c:bd:c0:fd:df:
         77:fe:c9:3f:00:27:c7:a9:c8:36:bf:a7:94:e9:ce:de:57:b9:
         da:b4:64:13:07:31:22:06:d5:ff:4e:a4:20:2e:0e:7d:db:7e:
         3f:82:c4:87:4a:22:5b:b4:b4:6b:73:01:9f:4a:1d:c3:ea:53:
         f1:7b:85:21:8e:82:40:b7:99:7b:ea:b8:9b:39:11:20:dc:e3:
         de:84:fe:f1:6d:4e:a9:11:f0:c8:e5:e8:fd:e4:00:1c:fe:c2:
         3c:ff:74:16:23:78:f0:ff:12:5b:d9:98:85:88:ec:77:42:75:
         31:a9:f8:62:59:e6:89:cd:de:9e:7d:e6:9c:f4:e6:94:3e:e5:
         50:07:7a:4e:f6:d0:d9:de:b5:a1:2a:5f:b3:85:2e:cd:39:17:
         0f:4d:bb:0a:5b:e0:bb:e4:4e:fe:9c:c9:96:fa:27:e4:43:5a:
         6c:44:7a:6b:a2:30:cc:dc:22:1a:0f:b0:bf:10:4f:2f:01:d1:
         26:14:12:28
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE3NjkxMTAvBgNVBAUTKEZGOTIzNDdGNUQ1NDY4ODExRkQyNTNBNDhCRkM2OUZF
NTcwQUE0NTAwHhcNMjUwNTMxMDY1NzU3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTI1YS00MDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwbahruZZB9kQJFObukR+Q/42rpg8+8iyHIlYN/fg+x2mElDV8mb6vqiRiLTA
0743IfPDh6FrPUugJ+xWZFq9NIf0rFbHoomd3nx+tdTTCy3wZFxSYvlqAhePUl5h
b8p0zP07ruc1PKYGDMPXCSn/KWu5arj+jlFui02e9J4eYcGerFOqYjqMUfZdm2pN
nHQka+htLJw2NV/JR13Ib2L8D6PDvYmuxY1eGF6fItyEJ5cMTxyh97w1K8nyWCM8
Gvm+Qzy7QhtTWqYcO2DbhI1guCR6oX+lqw10KUBmecWbakrNo+xAage0So0/iiOi
Zw8DXSRscZrMopHHq37w3UEapQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLZ7Iscz
zJ22lbkxwQs9xYdWJczdMB8GA1UdIwQYMBaAFP+SNH9dVGiBH9JTpIv8af5XCqRQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTc2OS9EMjZERERCMDc3
QkUxMUVGOUYyQTQ1NDdDNEY5QUUwMi9fNUkwZjExVWFJRWYwbE9raV94cF9sY0tw
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL181STBmMTFVYUlFZjBsT2tpX3hwX2xjS3BGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTE3NjkvRDI2REREQjA3N0JFMTFFRjlGMkE0NTQ3QzRGOUFFMDIvNEQzNkMwNzY3
N0MzMTFFRjg0RDM4QTNCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZxjAMA8EAgACMAkDBwAgAQ3zssAwDQYJKoZIhvcNAQELBQADggEB
AIcbCekg9/2NWhyDBTCo6DTLWY8MM9D7xaIi9GiYAT3aglHD4yfcuhzBl/AjbbjT
Okf0+Vjth2ETQo3V7bOOxSzRkwGMvcD933f+yT8AJ8epyDa/p5Tpzt5Xudq0ZBMH
MSIG1f9OpCAuDn3bfj+CxIdKIlu0tGtzAZ9KHcPqU/F7hSGOgkC3mXvquJs5ESDc
496E/vFtTqkR8Mjl6P3kABz+wjz/dBYjePD/ElvZmIWI7HdCdTGp+GJZ5onN3p59
5pz05pQ+5VAHek720NnetaEqX7OFLs05Fw9Nuwpb4LvkTv6cyZb6J+RDWmxEemui
MMzcIhoPsL8QTy8B0SYUEig=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:07 2026 by rpki-client