Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/ECDFCD86656711EDBED7F511C4F9AE02.roa
File:                     ECDFCD86656711EDBED7F511C4F9AE02.roa (raw, json)
Hash identifier:          3BRTj+GkF4maItz4b47Rja3JmhquFkYQlVK+g5LZ41U=
Subject key identifier:   84:64:2A:21:50:37:C2:94:4E:B5:82:12:60:18:9A:DC:4B:6C:84:6A
Certificate issuer:       /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Certificate serial:       02FE
Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/ECDFCD86656711EDBED7F511C4F9AE02.roa
Signing time:             Mon 19 Oct 2026 01:49:26 +0000
ROA not before:           Mon 19 Oct 2026 01:49:26 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     150342
IP address blocks:        103.17.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
                          rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112571, serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
        Validity
            Not Before: Oct 19 01:49:26 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad57726-e623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:ce:92:c2:eb:95:2d:6d:4d:24:4b:45:52:
                    1d:39:9b:c0:fe:67:29:78:5c:f2:9e:25:81:e1:d7:
                    88:1d:21:c0:ab:89:ab:75:24:9a:69:01:23:99:4f:
                    fa:ab:86:4f:c2:05:80:5c:46:e4:45:4b:f2:36:61:
                    ed:4e:06:7e:0c:90:30:ad:fb:d7:8b:09:de:f9:de:
                    ec:23:4f:ea:bc:0d:25:5f:46:c4:f4:06:ea:53:be:
                    89:93:56:bf:8b:32:1f:de:77:92:6e:89:3a:c0:c0:
                    f5:60:2c:35:9a:b9:36:a9:72:9e:41:d5:c7:76:b5:
                    bc:b4:4b:df:88:1e:39:1e:6b:05:d3:dd:49:fb:56:
                    e0:b5:f6:37:0f:4a:f1:5b:69:29:5f:60:97:7a:c4:
                    eb:4e:09:ee:1b:ba:57:59:84:43:e7:29:10:b3:a2:
                    e8:9f:25:e1:1f:35:39:c1:9a:ed:f1:eb:6f:4e:0e:
                    60:20:ed:1f:f6:e6:f9:d1:48:25:da:fd:36:81:b0:
                    8d:d2:88:b4:46:75:3f:9e:ea:0d:70:31:97:b2:8f:
                    1a:02:91:f4:a8:27:8b:1d:9f:bd:8d:68:48:7f:26:
                    34:b0:bb:9d:58:51:5f:e3:fc:64:6d:8d:a5:f4:59:
                    d7:65:2e:e8:55:bf:4b:56:01:f7:ea:01:0c:9a:0a:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:64:2A:21:50:37:C2:94:4E:B5:82:12:60:18:9A:DC:4B:6C:84:6A
            X509v3 Authority Key Identifier:
                keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/ECDFCD86656711EDBED7F511C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:30:45:fe:3f:95:de:de:4f:86:dc:ed:9c:7b:0f:08:38:
         08:c4:f8:2c:9d:5f:c1:78:14:cd:b5:08:8f:c8:c4:d2:34:01:
         d5:ad:41:81:f8:49:4f:4e:e7:d7:4d:71:2f:79:a5:55:bc:25:
         b7:27:a7:62:e6:69:bc:04:af:4b:fc:06:6d:84:c4:55:38:45:
         0b:8a:5d:6c:49:19:54:69:91:2d:a4:9e:ce:d4:98:0e:18:50:
         55:1d:b7:c8:5f:b7:6c:85:86:b4:49:34:8e:76:78:9d:7f:ec:
         4f:12:e9:57:82:d9:c3:d8:5f:d7:11:02:4a:b0:ab:2b:0c:10:
         af:1a:8f:45:49:f0:4f:d3:33:19:08:0f:b9:7a:00:f4:b0:76:
         6d:a4:99:36:46:c8:d2:19:ef:59:a1:89:1a:32:db:ba:cb:32:
         07:d1:7d:74:8a:bd:f2:eb:b5:41:33:28:2c:67:f7:27:cb:93:
         30:36:7e:fd:17:06:49:63:3d:d3:ba:67:f2:d7:e9:91:90:ac:
         c3:dd:bc:c8:ee:16:11:94:f2:eb:6b:6b:9e:c5:27:60:12:1e:
         f2:8e:22:30:6a:e0:b3:6c:1f:74:e7:80:c4:6a:24:2c:23:76:
         9c:7d:97:15:71:04:3f:e9:39:9e:2e:db:a0:c9:80:12:56:12:
         92:51:ca:16
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI1NzExMTAvBgNVBAUTKDdBMkNBMDlBODU3MTI5QjE4MDQyODI0OTIzMTI0MzNE
QUI3NUU2QzIwHhcNMjYxMDE5MDE0OTI2WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQ1NzcyNi1lNjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+fOksLrlS1tTSRLRVIdOZvA/mcpeFzyniWB4deIHSHAq4mrdSSaaQEjmU/6
q4ZPwgWAXEbkRUvyNmHtTgZ+DJAwrfvXiwne+d7sI0/qvA0lX0bE9AbqU76Jk1a/
izIf3neSbok6wMD1YCw1mrk2qXKeQdXHdrW8tEvfiB45HmsF091J+1bgtfY3D0rx
W2kpX2CXesTrTgnuG7pXWYRD5ykQs6LonyXhHzU5wZrt8etvTg5gIO0f9ub50Ugl
2v02gbCN0oi0RnU/nuoNcDGXso8aApH0qCeLHZ+9jWhIfyY0sLudWFFf4/xkbY2l
9FnXZS7oVb9LVgH36gEMmgrFLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIRkKiFQ
N8KUTrWCEmAYmtxLbIRqMB8GA1UdIwQYMBaAFHosoJqFcSmxgEKCSSMSQz2rdebC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjU3MS8yMDk5NDlFNDYx
RUYxMUVEQTc2OEE5NjdDNEY5QUUwMi9laXlnbW9WeEtiR0FRb0pKSXhKRFBhdDE1
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VpeWdtb1Z4S2JHQVFvSkpJeEpEUGF0MTVzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTI1NzEvMjA5OTQ5RTQ2MUVGMTFFREE3NjhBOTY3QzRGOUFFMDIvRUNERkNEODY2
NTY3MTFFREJFRDdGNTExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZxEEMA0GCSqGSIb3DQEBCwUAA4IBAQBP0zBF/j+V3t5PhtztnHsP
CDgIxPgsnV/BeBTNtQiPyMTSNAHVrUGB+ElPTufXTXEveaVVvCW3J6di5mm8BK9L
/AZthMRVOEULil1sSRlUaZEtpJ7O1JgOGFBVHbfIX7dshYa0STSOdnidf+xPEulX
gtnD2F/XEQJKsKsrDBCvGo9FSfBP0zMZCA+5egD0sHZtpJk2RsjSGe9ZoYkaMtu6
yzIH0X10ir3y67VBMygsZ/cny5MwNn79FwZJYz3Tumfy1+mRkKzD3bzI7hYRlPLr
a2uexSdgEh7yjiIwauCzbB9054DEaiQsI3acfZcVcQQ/6TmeLtugyYASVhKSUcoW
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:52:06 2026 by rpki-client