Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa
File:                     5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (raw, json)
Hash identifier:          uQST/Lwu1Y8zjcr3hEjaSSFHSY2dGeUpzp8QmH+ETJY=
Subject key identifier:   9C:45:C4:A2:ED:70:63:3D:5E:C0:42:2F:A8:A2:38:D3:BF:42:33:38
Certificate issuer:       /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Certificate serial:       052B
Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:52:03 +0000
ROA not before:           Tue 15 Apr 2025 00:04:42 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135123
IP address blocks:        103.210.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl
                          rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
        Validity
            Not Before: Apr 15 00:04:42 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3fe33-d445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:f8:c7:f9:04:a4:ae:97:da:85:da:9a:a5:
                    4c:68:42:87:01:5c:f4:09:03:3f:78:3a:05:c0:61:
                    18:38:1e:e0:10:4b:ca:2e:e4:3c:7f:6b:da:cd:2d:
                    cd:0f:dd:b4:0d:a0:0a:7d:c4:6d:6c:78:88:16:29:
                    03:b0:ae:b3:70:e3:9d:15:5c:05:ac:83:52:65:d3:
                    2b:81:0c:69:83:fa:42:f3:bc:c6:cd:0d:eb:6d:06:
                    a8:5a:62:36:35:6a:03:2b:b5:f3:d7:e0:81:ad:bd:
                    15:c9:8f:02:97:14:38:f0:95:4b:f2:9f:d1:f6:b9:
                    9c:16:05:dd:2e:ae:d4:d6:0f:1a:c6:31:6b:a4:ce:
                    b6:ee:9c:3f:44:60:06:3b:76:31:08:2c:e0:ad:b1:
                    9f:f9:79:f1:94:a6:64:8c:b7:20:e8:6f:a8:a6:21:
                    b7:19:9e:40:d0:f8:32:82:f7:f1:3b:f8:f7:ad:ca:
                    bd:5c:91:c4:a4:12:c1:77:d9:e8:9f:26:ca:5c:98:
                    bf:d6:55:6a:24:e3:92:95:86:c1:9f:6a:54:ad:61:
                    40:a9:a0:1d:1d:35:3a:6c:ed:de:49:05:58:40:be:
                    65:7c:97:8c:9a:69:ab:48:c6:4a:c1:e8:33:70:6a:
                    64:d6:51:9c:bd:ea:4a:57:83:30:83:f7:38:b9:cc:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:45:C4:A2:ED:70:63:3D:5E:C0:42:2F:A8:A2:38:D3:BF:42:33:38
            X509v3 Authority Key Identifier:
                keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:85:86:cf:4c:c7:ef:ad:94:00:25:9f:5a:f8:a8:5a:34:ed:
         7e:e1:c7:36:ee:e0:f4:07:f0:a1:c2:06:8f:a6:6d:da:5a:66:
         47:4e:d9:ee:20:39:01:e7:13:57:be:a1:af:93:c9:f1:7f:1f:
         a3:62:5d:8b:9b:15:85:02:71:98:8c:92:a4:c0:15:1e:83:58:
         d2:11:e4:47:10:9d:7e:f3:b3:50:94:54:5a:c9:6e:2a:57:ec:
         c6:8a:a7:0b:66:e0:d6:80:82:04:df:c2:c0:29:95:d5:4f:8b:
         1d:75:b7:de:de:61:eb:19:bb:f2:33:c3:e0:73:83:5e:1e:61:
         cc:03:f5:98:bb:5e:cb:0d:40:ac:ef:bb:4d:4c:ff:db:f0:81:
         d6:4b:bc:b4:3d:80:5b:1e:93:44:eb:6d:2b:75:9c:39:e0:ad:
         e8:ce:6b:fa:f8:c4:4a:7e:df:20:95:bf:ce:ac:11:f4:cc:88:
         59:1e:83:c4:87:d6:65:3c:35:b4:f7:5a:00:83:7c:e2:c2:79:
         de:fa:40:18:24:3f:67:40:25:3c:26:5f:06:49:9f:03:78:69:
         5d:9d:e1:c8:a6:0b:f9:25:d0:12:67:3e:b7:12:8f:89:77:60:
         f6:3b:0e:77:f9:1d:e2:60:e2:67:20:ff:d6:48:95:54:e0:3b:
         06:62:d5:47
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkzNzExMTAvBgNVBAUTKDMyRjg5MDBEMzg1NkJFNDNBNzJENkM3RjkzRTkwNEI1
QjgzQ0MzNEQwHhcNMjUwNDE1MDAwNDQyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmUzMy1kNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjP4x/kEpK6X2oXamqVMaEKHAVz0CQM/eDoFwGEYOB7gEEvKLuQ8f2vazS3N
D920DaAKfcRtbHiIFikDsK6zcOOdFVwFrINSZdMrgQxpg/pC87zGzQ3rbQaoWmI2
NWoDK7Xz1+CBrb0VyY8ClxQ48JVL8p/R9rmcFgXdLq7U1g8axjFrpM627pw/RGAG
O3YxCCzgrbGf+XnxlKZkjLcg6G+opiG3GZ5A0PgygvfxO/j3rcq9XJHEpBLBd9no
nybKXJi/1lVqJOOSlYbBn2pUrWFAqaAdHTU6bO3eSQVYQL5lfJeMmmmrSMZKwegz
cGpk1lGcvepKV4Mwg/c4ucyWDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJxFxKLt
cGM9XsBCL6iiONO/QjM4MB8GA1UdIwQYMBaAFDL4kA04Vr5Dpy1sf5PpBLW4PMNN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTM3MS8zNkZFRTdFQTM4
QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3ZrT25MV3hfay1rRXRiZzh3
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL012aVFEVGhXdmtPbkxXeF9rLWtFdGJnOHcwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTkzNzEvMzZGRUU3RUEzOEJEMTFFQzlERDRFQjUwQzRGOUFFMDIvNUZDNkNFRkMz
OEJGMTFFQzlCQTUxRTUyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ9IEMA0GCSqGSIb3DQEBCwUAA4IBAQCShYbPTMfvrZQAJZ9a+Kha
NO1+4cc27uD0B/ChwgaPpm3aWmZHTtnuIDkB5xNXvqGvk8nxfx+jYl2LmxWFAnGY
jJKkwBUeg1jSEeRHEJ1+87NQlFRayW4qV+zGiqcLZuDWgIIE38LAKZXVT4sddbfe
3mHrGbvyM8Pgc4NeHmHMA/WYu17LDUCs77tNTP/b8IHWS7y0PYBbHpNE620rdZw5
4K3ozmv6+MRKft8glb/OrBH0zIhZHoPEh9ZlPDW091oAg3ziwnne+kAYJD9nQCU8
Jl8GSZ8DeGldneHIpgv5JdASZz63Eo+Jd2D2Ow53+R3iYOJnIP/WSJVU4DsGYtVH
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:14 2026 by rpki-client