Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa
File:                     1443F7BA200411EE84DAD06BC4F9AE02.roa (raw, json)
Hash identifier:          GxUpazujfgY5cn1MaM9eSO0/Bux/JNanPMwBcWHaLik=
Subject key identifier:   87:AA:E0:E7:97:FA:FF:00:2C:C4:A7:1A:B1:AB:9C:2A:AF:0D:9C:5A
Certificate issuer:       /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
Certificate serial:       05C3
Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa
Signing time:             Wed 16 Sep 2026 23:45:28 +0000
ROA not before:           Wed 16 Sep 2026 23:45:28 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     141008
IP address blocks:        103.154.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192E6F, serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
        Validity
            Not Before: Sep 16 23:45:28 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aab2a18-48df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:3b:4c:6c:f1:0e:4a:e1:4f:a4:47:e6:1c:
                    a2:a4:61:c2:54:7c:56:82:85:e8:7d:69:ba:9d:dc:
                    d8:82:8d:9e:de:87:af:03:2b:80:f5:cc:9a:2b:ec:
                    aa:ee:8b:8d:29:2d:21:1d:4a:fc:00:af:44:db:20:
                    fc:db:7d:cd:d0:9c:7e:46:ad:ed:26:1a:76:fb:c7:
                    59:3a:0f:1f:79:26:22:65:4a:c7:dc:87:14:6c:8a:
                    d5:e5:5e:8b:a0:4f:c5:38:39:58:3c:06:0a:f7:28:
                    af:19:07:12:83:33:bb:e2:24:c3:d2:8a:45:6d:86:
                    0e:39:17:b6:21:9e:00:50:cd:7c:e9:48:d6:38:6b:
                    8f:04:ac:24:1a:e9:6d:59:64:fa:a6:6c:1d:a8:e4:
                    e6:8a:c5:25:09:4b:66:71:4b:22:e1:67:9b:3c:96:
                    e5:ff:d2:22:4c:04:6d:2d:50:c7:e6:47:e5:71:a4:
                    f2:f8:55:6d:05:15:0b:c1:38:ba:71:53:01:71:ab:
                    b2:6e:1f:28:54:b7:42:fa:62:62:0b:fd:ef:f5:00:
                    e5:7b:32:a0:44:ab:d9:f9:7d:fa:cf:e6:10:68:ce:
                    bf:c6:56:e3:44:0a:6a:7d:7d:83:bc:bb:41:1e:94:
                    fa:31:9a:6b:ab:73:ab:4e:c2:ab:eb:c2:32:15:5d:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AA:E0:E7:97:FA:FF:00:2C:C4:A7:1A:B1:AB:9C:2A:AF:0D:9C:5A
            X509v3 Authority Key Identifier:
                keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:4e:f3:c8:60:cf:17:65:c0:d4:ec:c7:fd:38:7f:82:6c:
         86:39:66:46:33:3e:52:e8:00:ee:ab:dd:8f:90:21:ed:be:08:
         43:06:11:a6:eb:ab:42:d3:f6:7d:b1:28:d8:15:58:59:e0:cd:
         49:3b:8f:b7:05:f0:ab:a8:31:1f:8e:89:fd:37:fe:63:d9:0f:
         f4:13:d4:8d:30:8d:2d:bc:e9:dc:60:46:69:5f:09:c2:52:1d:
         e9:88:1d:fe:1d:31:4d:a3:3b:e6:e7:91:a8:34:f5:c2:67:06:
         a7:7b:63:8d:d2:38:45:9e:f3:77:fe:1d:66:5b:43:77:0b:f6:
         88:7f:69:08:ec:38:2f:6d:5a:f0:ad:5b:ac:1d:3a:7e:5a:fb:
         65:84:82:ae:5b:41:16:c0:25:8e:4e:0d:65:a0:2c:29:2f:af:
         85:57:95:0f:2d:5a:65:18:22:88:b2:cc:96:ad:cf:57:69:75:
         5a:86:e4:08:09:be:ab:53:7d:9b:02:c0:51:a0:c6:6d:4c:ea:
         40:e6:2f:83:6d:dc:6d:4d:bb:d6:63:d5:e2:77:81:df:21:0a:
         f1:e2:29:12:97:a3:93:69:98:e1:e8:43:73:6f:94:90:23:21:
         0a:aa:c0:7a:c5:76:03:c8:b0:11:9c:80:6d:9f:d4:58:e8:19:
         52:18:5a:fc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJFNkYxMTAvBgNVBAUTKDkzRjQ5REQzRURDOUQ1OTI3MUFGRTEzMTNDOTIxREU2
NkMyMjIwNjQwHhcNMjYwOTE2MjM0NTI4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFiMmExOC00OGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvrU7TGzxDkrhT6RH5hyipGHCVHxWgoXofWm6ndzYgo2e3oevAyuA9cyaK+yq
7ouNKS0hHUr8AK9E2yD8233N0Jx+Rq3tJhp2+8dZOg8feSYiZUrH3IcUbIrV5V6L
oE/FODlYPAYK9yivGQcSgzO74iTD0opFbYYOORe2IZ4AUM186UjWOGuPBKwkGult
WWT6pmwdqOTmisUlCUtmcUsi4WebPJbl/9IiTARtLVDH5kflcaTy+FVtBRULwTi6
cVMBcauybh8oVLdC+mJiC/3v9QDlezKgRKvZ+X36z+YQaM6/xlbjRApqfX2DvLtB
HpT6MZprq3OrTsKr68IyFV1idwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIeq4OeX
+v8ALMSnGrGrnCqvDZxaMB8GA1UdIwQYMBaAFJP0ndPtydWSca/hMTySHeZsIiBk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkU2Ri82MkVCMURGRTI2
QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFaSnhyLUV4UEpJZDVtd2lJ
R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tfU2QwLTNKMVpKeHItRXhQSklkNW13aUlHUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJFNkYvNjJFQjFERkUyNkI4MTFFQzlGMjA1QjFFQzRGOUFFMDIvMTQ0M0Y3QkEy
MDA0MTFFRTg0REFEMDZCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5rEMA0GCSqGSIb3DQEBCwUAA4IBAQBHwk7zyGDPF2XA1OzH/Th/
gmyGOWZGMz5S6ADuq92PkCHtvghDBhGm66tC0/Z9sSjYFVhZ4M1JO4+3BfCrqDEf
jon9N/5j2Q/0E9SNMI0tvOncYEZpXwnCUh3piB3+HTFNozvm55GoNPXCZwane2ON
0jhFnvN3/h1mW0N3C/aIf2kI7DgvbVrwrVusHTp+WvtlhIKuW0EWwCWOTg1loCwp
L6+FV5UPLVplGCKIssyWrc9XaXVahuQICb6rU32bAsBRoMZtTOpA5i+DbdxtTbvW
Y9Xid4HfIQrx4ikSl6OTaZjh6ENzb5SQIyEKqsB6xXYDyLARnIBtn9RY6BlSGFr8
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:53:03 2026 by rpki-client