Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4D73512C49EE11F1AA9A1823B9833773.roa
File:                     4D73512C49EE11F1AA9A1823B9833773.roa (raw, json)
Hash identifier:          V1RW8W7dqic9L1K5+YBO2JCGFRP7qQnUqHH9i5+a7KE=
Subject key identifier:   B3:70:79:7F:52:CA:01:1C:48:41:28:6D:51:73:B8:85:BF:CE:78:CC
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       0928
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4D73512C49EE11F1AA9A1823B9833773.roa
Signing time:             Thu 07 May 2026 08:36:31 +0000
ROA not before:           Thu 07 May 2026 08:36:31 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        103.234.54.0/24 maxlen: 24
                          150.107.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2344 (0x928)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: May  7 08:36:31 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69fc4f0f-441e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:03:ce:3e:84:a2:cf:12:a9:cf:00:4d:03:
                    74:ac:ab:e3:90:fd:9b:69:32:76:60:af:11:57:4c:
                    4c:ad:4d:58:e6:e7:22:2d:e2:c5:2b:2f:46:b0:15:
                    22:70:11:ec:e8:6a:d7:16:80:1d:3f:7c:d6:dd:75:
                    69:23:3f:73:e1:ba:35:7d:96:80:ce:36:eb:b6:84:
                    95:34:6f:9b:4d:20:f6:83:d0:54:eb:6a:3c:36:6a:
                    fd:18:e7:11:f1:73:9c:b4:ed:2d:c9:74:5d:9d:52:
                    45:16:08:dd:c3:44:3d:9f:5e:14:87:af:76:3c:9c:
                    d2:d5:81:1b:93:ca:30:6c:d6:9d:9b:8e:71:66:85:
                    f5:ad:dd:2a:df:ce:05:0e:61:52:2a:4c:2d:46:98:
                    25:15:67:68:bc:57:2e:9c:32:92:93:3e:b5:05:73:
                    37:98:a3:8b:66:7b:be:61:f6:2c:8f:6f:e1:3b:66:
                    da:49:f6:8d:63:4a:44:98:bf:a7:a7:eb:61:23:2a:
                    a8:5a:46:bb:a6:6b:a9:12:75:48:c1:eb:6f:14:db:
                    74:8a:c6:b8:1d:94:de:5c:14:71:3c:93:cc:bf:8c:
                    fe:14:c6:7e:b5:5c:83:61:17:1d:5e:d3:31:0a:ee:
                    47:52:bf:e7:3d:68:a8:51:f8:67:db:80:c9:97:2c:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:70:79:7F:52:CA:01:1C:48:41:28:6D:51:73:B8:85:BF:CE:78:CC
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4D73512C49EE11F1AA9A1823B9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.54.0/24
                  150.107.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e5:6b:84:09:6e:34:b9:dc:0d:6c:ee:4a:d8:ae:26:b4:59:
         ad:cc:20:30:f2:a8:41:11:1a:51:74:67:ad:d8:b7:32:de:92:
         32:2b:b2:c5:81:80:c8:98:db:a8:46:e2:a7:ab:76:7e:9b:f1:
         a9:d8:ef:26:14:24:49:84:44:0e:d6:1c:ab:88:5f:a3:bc:0c:
         bd:0d:81:61:c4:40:93:3b:b5:f9:37:82:e4:b3:c6:85:34:86:
         59:67:6d:d2:54:82:ac:61:31:ff:89:08:d0:bc:6b:3e:29:91:
         c2:92:9c:a2:b3:6e:81:7b:f9:de:9c:5c:9b:9f:b1:d0:12:79:
         98:b4:73:d5:75:a2:3c:4d:76:31:91:99:b9:40:33:3f:a2:4b:
         1c:26:8a:00:f2:a8:70:d4:c3:1b:4f:5d:3e:16:dc:41:a2:14:
         ba:76:de:d1:c3:43:26:dd:fd:46:00:19:e0:1b:7d:66:d1:b5:
         19:33:63:8a:ab:56:1f:21:d0:67:52:39:48:54:53:61:05:4a:
         7a:b4:6b:b9:a1:59:a3:22:3c:e1:89:f0:1e:17:10:3e:50:67:
         a2:80:12:77:3a:ff:40:cd:9b:9f:3e:6d:11:5f:66:3d:6f:ca:
         d4:8d:1b:fb:e1:25:b7:7c:0e:58:3f:ae:90:3d:fb:e2:5b:82:
         b2:33:57:85
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjYwNTA3MDgzNjMxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZjNGYwZi00NDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2dYDzj6Eos8Sqc8ATQN0rKvjkP2baTJ2YK8RV0xMrU1Y5uciLeLFKy9GsBUi
cBHs6GrXFoAdP3zW3XVpIz9z4bo1fZaAzjbrtoSVNG+bTSD2g9BU62o8Nmr9GOcR
8XOctO0tyXRdnVJFFgjdw0Q9n14Uh692PJzS1YEbk8owbNadm45xZoX1rd0q384F
DmFSKkwtRpglFWdovFcunDKSkz61BXM3mKOLZnu+YfYsj2/hO2baSfaNY0pEmL+n
p+thIyqoWka7pmupEnVIwetvFNt0isa4HZTeXBRxPJPMv4z+FMZ+tVyDYRcdXtMx
Cu5HUr/nPWioUfhn24DJlyzPdQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLNweX9S
ygEcSEEobVFzuIW/znjMMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNEQ3MzUxMkM0
OUVFMTFGMUFBOUExODIzQjk4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ+o2AwQAlmsCMA0GCSqGSIb3DQEBCwUAA4IBAQCH5WuECW40udwN
bO5K2K4mtFmtzCAw8qhBERpRdGet2Lcy3pIyK7LFgYDImNuoRuKnq3Z+m/Gp2O8m
FCRJhEQO1hyriF+jvAy9DYFhxECTO7X5N4Lks8aFNIZZZ23SVIKsYTH/iQjQvGs+
KZHCkpyis26Be/nenFybn7HQEnmYtHPVdaI8TXYxkZm5QDM/okscJooA8qhw1MMb
T10+FtxBohS6dt7Rw0Mm3f1GABngG31m0bUZM2OKq1YfIdBnUjlIVFNhBUp6tGu5
oVmjIjzhifAeFxA+UGeigBJ3Ov9AzZufPm0RX2Y9b8rUjRv74SW3fA5YP66QPfvi
W4KyM1eF
-----END CERTIFICATE-----
Generated at Wed May 13 05:38:24 2026 by rpki-client