Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/F9EE01A842E211F1B650BCD08E833773.roa
File:                     F9EE01A842E211F1B650BCD08E833773.roa (raw, json)
Hash identifier:          2XaqgQvJvdCsnon/kkAwU+ckm99qA9tybA5kJKKFgfM=
Subject key identifier:   17:E5:75:67:F5:80:FF:4C:58:CB:75:32:72:77:7C:B5:B0:A2:CC:1A
Certificate issuer:       /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Certificate serial:       01CF
Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/F9EE01A842E211F1B650BCD08E833773.roa
Signing time:             Tue 28 Apr 2026 09:16:45 +0000
ROA not before:           Tue 28 Apr 2026 09:16:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137975
IP address blocks:        103.119.25.0/24 maxlen: 24
                          103.119.26.0/24 maxlen: 24
                          103.119.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
                          rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
        Validity
            Not Before: Apr 28 09:16:45 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69f07afd-12e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:69:53:f5:01:ae:ed:9e:35:21:3e:0d:6b:
                    17:c5:3b:74:b8:5f:73:90:fe:2f:fa:af:fe:15:ad:
                    38:c2:8e:90:72:71:08:fc:82:52:47:09:6f:6a:8b:
                    37:68:b8:75:d5:78:0e:7d:c1:7d:07:bf:6b:e1:b2:
                    d1:3c:5a:da:03:96:12:84:aa:cf:69:4f:04:9d:df:
                    73:f2:29:d2:ce:d4:64:32:f0:3f:8d:35:0a:44:da:
                    ad:5a:cd:62:9b:72:35:3b:66:80:64:e7:45:47:c2:
                    94:93:c6:a9:08:5c:7c:25:de:19:eb:dd:c1:2b:0d:
                    88:45:0e:6d:ea:a9:ed:fe:c8:26:22:77:71:90:51:
                    11:84:a4:8c:59:0a:5a:e2:4f:3f:cf:29:8b:7b:e4:
                    3a:26:0b:d2:6f:64:cf:78:7f:16:ab:e7:c8:c2:5c:
                    9f:33:c0:02:89:12:0d:11:83:1b:98:0f:f3:86:11:
                    92:59:26:9d:8d:a4:95:ff:81:e4:a7:3c:c0:59:39:
                    ea:b3:86:cd:8a:2b:51:87:8c:df:9c:77:ae:57:8e:
                    f7:7c:98:c7:b7:05:fe:55:f1:45:1b:fd:1d:c5:73:
                    cf:5e:72:c1:1a:97:78:3e:d9:7e:c9:89:5a:33:cf:
                    16:25:93:75:68:5e:12:4f:c4:9e:9f:7c:ca:e9:c5:
                    da:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E5:75:67:F5:80:FF:4C:58:CB:75:32:72:77:7C:B5:B0:A2:CC:1A
            X509v3 Authority Key Identifier:
                keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/F9EE01A842E211F1B650BCD08E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.25.0-103.119.27.255

    Signature Algorithm: sha256WithRSAEncryption
         9d:66:c7:80:94:49:e3:a8:b8:92:3d:f4:2e:36:c2:99:b0:bc:
         44:09:fa:f5:5e:b8:59:a5:25:f7:58:bf:1f:7b:d6:1c:ea:c2:
         2c:1d:16:0a:52:68:3e:7c:96:4f:e9:d8:e2:db:1b:14:d5:02:
         27:99:a3:18:4e:d4:a3:93:56:3e:6d:19:f1:f4:33:d8:f3:b5:
         30:4a:01:c6:49:c7:61:f7:6a:1d:c8:a6:21:cd:97:00:63:1f:
         1d:24:a8:7f:2a:0b:15:a6:18:fa:b0:be:18:1c:cc:18:c3:74:
         95:60:69:79:f1:75:d0:8f:57:fb:99:4e:44:86:59:3a:1d:8e:
         31:fa:ef:f0:cb:a4:8f:aa:54:6b:19:1b:50:fe:f2:e4:e5:0a:
         68:4b:18:95:24:75:d6:b4:e9:31:ba:d1:0f:00:e9:0d:ab:d4:
         ee:a0:94:32:0c:65:fa:ca:e9:43:0d:11:51:d7:27:f2:4e:07:
         3a:02:f5:ca:80:85:e1:97:a9:31:55:dc:b7:2d:77:fd:4b:ec:
         06:a3:be:4b:ad:53:4c:4e:78:b5:e3:8b:91:09:d3:be:1d:76:
         bd:92:9c:16:c3:aa:2e:54:39:85:78:ed:20:b8:73:b5:16:d5:
         f9:9a:84:a2:a4:d3:98:52:05:39:f8:51:7c:30:1e:1c:fe:4c:
         51:19:c6:ae
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzM0IxMTAvBgNVBAUTKDg2REExOTAwRTYxNTBDQkQ5Q0Q4MTVBQzY3REM1M0E1
RTZEM0MwMjcwHhcNMjYwNDI4MDkxNjQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYwN2FmZC0xMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuVRpU/UBru2eNSE+DWsXxTt0uF9zkP4v+q/+Fa04wo6QcnEI/IJSRwlvaos3
aLh11XgOfcF9B79r4bLRPFraA5YShKrPaU8End9z8inSztRkMvA/jTUKRNqtWs1i
m3I1O2aAZOdFR8KUk8apCFx8Jd4Z693BKw2IRQ5t6qnt/sgmIndxkFERhKSMWQpa
4k8/zymLe+Q6JgvSb2TPeH8Wq+fIwlyfM8ACiRINEYMbmA/zhhGSWSadjaSV/4Hk
pzzAWTnqs4bNiitRh4zfnHeuV473fJjHtwX+VfFFG/0dxXPPXnLBGpd4Ptl+yYla
M88WJZN1aF4ST8Sen3zK6cXacwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFBfldWf1
gP9MWMt1MnJ3fLWwoswaMB8GA1UdIwQYMBaAFIbaGQDmFQy9nNgVrGfcU6Xm08An
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzQi9FOThBMTEzRTky
NjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRMMmMyQldzWjl4VHBlYlR3
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTkzM0IvRTk4QTExM0U5MjY0MTFFRTk5NDdEQTVCQzRGOUFFMDIvRjlFRTAxQTg0
MkUyMTFGMUI2NTBCQ0QwOEU4MzM3NzMucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABndxkDBAJndxgwDQYJKoZIhvcNAQELBQADggEBAJ1mx4CUSeOo
uJI99C42wpmwvEQJ+vVeuFmlJfdYvx971hzqwiwdFgpSaD58lk/p2OLbGxTVAieZ
oxhO1KOTVj5tGfH0M9jztTBKAcZJx2H3ah3IpiHNlwBjHx0kqH8qCxWmGPqwvhgc
zBjDdJVgaXnxddCPV/uZTkSGWTodjjH67/DLpI+qVGsZG1D+8uTlCmhLGJUkdda0
6TG60Q8A6Q2r1O6glDIMZfrK6UMNEVHXJ/JOBzoC9cqAheGXqTFV3Lctd/1L7Aaj
vkutU0xOeLXji5EJ074ddr2SnBbDqi5UOYV47SC4c7UW1fmahKKk05hSBTn4UXww
Hhz+TFEZxq4=
-----END CERTIFICATE-----
Generated at Wed May 13 06:11:37 2026 by rpki-client