Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/7938B3C66FC111EC91536F62C4F9AE02.roa
File:                     7938B3C66FC111EC91536F62C4F9AE02.roa (raw, json)
Hash identifier:          AaMW+LlCOA85lK0XL2X+XTiK4VwW2KOVSnP7ROjHAcg=
Subject key identifier:   70:90:10:22:11:41:85:4E:F1:A2:FF:06:AF:F1:CE:99:E1:C8:7D:3D
Certificate issuer:       /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial:       0E2F
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/7938B3C66FC111EC91536F62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:39:22 +0000
ROA not before:           Sun 16 Mar 2025 18:07:50 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     59239
IP address blocks:        103.109.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
                          rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3631 (0xe2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
        Validity
            Not Before: Mar 16 18:07:50 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a44f99-4f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:b2:e1:33:e8:66:49:62:d8:5c:4c:70:47:
                    05:7f:30:1a:c0:0c:4e:20:43:9d:6a:fa:98:99:b8:
                    75:9f:3b:76:2f:99:a2:36:16:a0:e4:4f:7d:d3:7f:
                    18:86:17:96:9e:57:ce:f9:97:bd:60:a7:74:93:65:
                    15:93:46:a0:ff:c8:e4:b6:0e:1b:da:f5:03:bd:2e:
                    f8:db:b4:7c:5b:ec:56:f5:43:df:98:3d:40:ab:07:
                    5a:d3:9c:e1:66:ee:71:7e:d1:e2:db:f6:c3:6a:a3:
                    c1:6f:57:7e:d9:fd:91:67:e5:0f:4b:ae:3a:a8:f5:
                    54:65:69:99:2d:fc:72:08:5f:14:d0:0f:28:c0:9a:
                    2d:c1:b9:ca:01:9c:8b:25:a7:55:aa:72:1a:30:0f:
                    27:c8:53:01:ea:30:e5:e1:5f:2a:6b:cb:91:80:aa:
                    9a:0e:b8:a3:97:9d:14:34:e2:3f:41:41:83:39:3c:
                    22:57:57:cb:f5:c2:a7:bb:8b:f5:8f:62:c2:8c:7a:
                    af:f4:63:1f:ab:e9:ee:04:87:bc:ea:7c:7c:c9:54:
                    c1:93:da:51:7f:83:dd:b7:89:80:00:8f:02:e6:94:
                    d2:27:a1:e7:c9:c5:5f:23:bb:15:88:70:09:8a:9a:
                    d9:96:30:8e:46:d6:a0:0e:4c:25:1b:4c:82:f6:82:
                    57:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:90:10:22:11:41:85:4E:F1:A2:FF:06:AF:F1:CE:99:E1:C8:7D:3D
            X509v3 Authority Key Identifier:
                keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/7938B3C66FC111EC91536F62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:85:67:38:2d:ac:a8:71:27:34:75:86:64:4f:55:ec:ac:88:
         c3:d3:d8:1b:88:ba:b1:83:72:45:29:b6:3c:9c:19:dd:d2:47:
         65:55:d2:23:c0:9b:de:91:cf:98:67:e2:12:4e:4e:18:09:b4:
         87:21:86:95:f6:a5:bd:2e:04:e1:31:fb:20:36:58:4c:54:52:
         cb:02:91:ed:73:86:86:31:b7:7b:23:08:e1:59:54:34:d5:18:
         aa:97:90:10:5a:9c:a9:f4:6b:e8:c3:37:b8:41:53:c4:13:d8:
         21:88:32:cc:00:9f:fd:15:94:7d:0b:30:d0:d2:0e:6e:eb:cb:
         7b:af:be:05:e9:12:25:a4:44:ce:5e:69:4c:1b:d4:c7:f1:61:
         ae:cd:b2:56:e7:0d:55:b3:d9:d6:30:72:50:ca:75:90:38:26:
         81:90:39:8c:1c:93:07:f4:e2:fa:d0:db:c7:a6:63:f3:5f:37:
         22:84:b1:01:53:c9:a0:a9:c5:57:66:f6:34:cd:3f:15:fb:ed:
         58:09:bb:c1:0e:10:f4:e2:3d:a6:13:c6:cf:f3:c5:3b:8b:fa:
         1e:b5:d6:96:b3:bd:e0:f6:9e:a8:7b:37:69:18:22:0d:f5:4a:
         e5:65:f5:55:35:ee:dd:26:c2:3c:74:0e:ac:74:53:11:41:8f:
         18:84:d4:2b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1
MTJBMzNGNDEwHhcNMjUwMzE2MTgwNzUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGY5OS00ZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp9Oy4TPoZkli2FxMcEcFfzAawAxOIEOdavqYmbh1nzt2L5miNhag5E99038Y
hheWnlfO+Ze9YKd0k2UVk0ag/8jktg4b2vUDvS7427R8W+xW9UPfmD1Aqwda05zh
Zu5xftHi2/bDaqPBb1d+2f2RZ+UPS646qPVUZWmZLfxyCF8U0A8owJotwbnKAZyL
JadVqnIaMA8nyFMB6jDl4V8qa8uRgKqaDrijl50UNOI/QUGDOTwiV1fL9cKnu4v1
j2LCjHqv9GMfq+nuBIe86nx8yVTBk9pRf4Pdt4mAAI8C5pTSJ6HnycVfI7sViHAJ
iprZljCORtagDkwlG0yC9oJXYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHCQECIR
QYVO8aL/Bq/xzpnhyH09MB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3
ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTg4NDcvRERGQkIwQjhENzgxMTFFOUI0MjNBQzRCQzRGOUFFMDIvNzkzOEIzQzY2
RkMxMTFFQzkxNTM2RjYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ206MA0GCSqGSIb3DQEBCwUAA4IBAQA4hWc4LayocSc0dYZkT1Xs
rIjD09gbiLqxg3JFKbY8nBnd0kdlVdIjwJvekc+YZ+ISTk4YCbSHIYaV9qW9LgTh
MfsgNlhMVFLLApHtc4aGMbd7IwjhWVQ01Riql5AQWpyp9Gvowze4QVPEE9ghiDLM
AJ/9FZR9CzDQ0g5u68t7r74F6RIlpETOXmlMG9TH8WGuzbJW5w1Vs9nWMHJQynWQ
OCaBkDmMHJMH9OL60NvHpmPzXzcihLEBU8mgqcVXZvY0zT8V++1YCbvBDhD04j2m
E8bP88U7i/oetdaWs73g9p6oezdpGCIN9UrlZfVVNe7dJsI8dA6sdFMRQY8YhNQr
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:02 2026 by rpki-client