Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/2F902D58953E11EFA996495BC4F9AE02.roa
File:                     2F902D58953E11EFA996495BC4F9AE02.roa (raw, json)
Hash identifier:          2Jv9MG7xi06P5kcDDPgdjuTC+iMwAJuA2IsIX/ADqHI=
Subject key identifier:   D0:7D:12:62:CC:C7:8F:05:6C:4E:82:7D:00:90:93:7A:D1:DB:E8:84
Certificate issuer:       /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Certificate serial:       02BB
Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/2F902D58953E11EFA996495BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:40:12 +0000
ROA not before:           Thu 31 Jul 2025 02:39:02 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135587
IP address blocks:        103.7.122.0/24 maxlen: 24
                          2001:df1:49c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
                          rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
        Validity
            Not Before: Jul 31 02:39:02 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46bec-4b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:36:5a:3b:07:df:df:87:68:e3:29:78:37:
                    58:da:eb:65:9d:5c:c6:d0:c7:e1:13:fa:0a:80:62:
                    77:94:74:fc:5e:e5:85:aa:c4:e7:5f:5c:8e:96:44:
                    92:3d:2c:38:bf:ef:42:ac:c4:4c:7e:e4:b3:10:26:
                    f7:eb:c0:3e:c4:1b:a9:f1:3b:00:34:47:4f:61:23:
                    a3:53:8a:e1:33:b4:21:6a:3e:49:dc:c0:d3:2d:40:
                    ec:d8:55:fd:c6:b0:79:e1:e1:78:55:5b:c0:89:c3:
                    00:c0:74:ba:f2:ff:b6:37:05:e3:92:39:c9:39:32:
                    63:2a:3b:f7:f6:ca:9f:46:78:82:d4:91:e0:26:cd:
                    83:a7:36:c2:38:07:8e:b6:29:8b:60:e8:60:0c:59:
                    b2:a7:d1:51:ab:b6:23:0b:1f:cf:d0:b0:89:2b:f6:
                    49:53:a6:65:33:08:e0:c9:39:6e:29:f6:bc:d5:fc:
                    b8:04:59:ec:24:b5:d3:40:e1:1f:a6:73:bf:48:5c:
                    52:74:5f:52:4a:31:09:dc:e3:6b:9c:f3:29:44:4f:
                    87:f7:48:29:be:d9:10:a7:d7:9e:47:63:1e:5f:49:
                    9e:a6:10:69:94:61:df:80:67:31:eb:3c:f5:54:f2:
                    16:82:e7:69:80:4b:da:90:62:f7:04:0a:94:fc:be:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7D:12:62:CC:C7:8F:05:6C:4E:82:7D:00:90:93:7A:D1:DB:E8:84
            X509v3 Authority Key Identifier:
                keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/2F902D58953E11EFA996495BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.122.0/24
                IPv6:
                  2001:df1:49c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:45:ac:c9:4d:1c:60:01:25:7b:86:c2:40:00:ef:be:43:a4:
         09:e3:a0:e0:8d:7f:1a:92:47:bf:63:a4:97:73:dc:e4:ee:9c:
         d3:1c:23:8b:cf:73:75:22:14:2b:62:5f:c9:67:bc:fa:5f:6a:
         d4:cf:14:4f:e5:14:43:70:81:b7:50:63:96:34:c3:b4:3a:cf:
         17:47:b5:fc:fd:f7:55:63:99:e2:fc:ed:7b:a3:a3:76:c9:87:
         8e:1e:d4:44:77:eb:b3:a0:e6:03:49:02:3c:e8:70:38:c8:dd:
         69:57:10:f0:3d:22:50:77:1d:27:53:d8:29:ee:b2:8a:2a:3c:
         2a:fd:1e:d2:81:b4:4d:f2:3b:db:1f:90:a8:0d:95:70:d4:1d:
         d6:1b:04:a2:db:ee:04:0c:9e:2a:ca:4d:17:d3:5b:fd:1c:13:
         8d:67:01:37:54:63:75:c5:80:ae:21:90:fe:f3:7f:be:d7:9a:
         d5:2b:1d:5e:6e:7f:bc:e8:f4:98:3d:66:43:57:62:cb:7d:60:
         e3:0e:1c:c4:ff:26:86:fb:2c:3c:50:21:9a:73:8c:0d:3d:a7:
         42:fe:f9:08:c0:92:bc:5a:48:31:5c:bf:3e:48:5b:86:23:99:
         33:d9:e6:04:94:d0:cd:79:bb:70:4f:ed:a7:a2:18:df:41:8b:
         93:37:3f:63
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy
OUNDNzZCNjUwHhcNMjUwNzMxMDIzOTAyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmJlYy00YjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn3Q2WjsH39+HaOMpeDdY2utlnVzG0MfhE/oKgGJ3lHT8XuWFqsTnX1yOlkSS
PSw4v+9CrMRMfuSzECb368A+xBup8TsANEdPYSOjU4rhM7Qhaj5J3MDTLUDs2FX9
xrB54eF4VVvAicMAwHS68v+2NwXjkjnJOTJjKjv39sqfRniC1JHgJs2DpzbCOAeO
timLYOhgDFmyp9FRq7YjCx/P0LCJK/ZJU6ZlMwjgyTluKfa81fy4BFnsJLXTQOEf
pnO/SFxSdF9SSjEJ3ONrnPMpRE+H90gpvtkQp9eeR2MeX0mephBplGHfgGcx6zz1
VPIWgudpgEvakGL3BAqU/L6EyQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNB9EmLM
x48FbE6CfQCQk3rR2+iEMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4
M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjcxNDIvOTY2MTg1QkEzODNDMTFFREIwOUYwMjE0QzRGOUFFMDIvMkY5MDJENTg5
NTNFMTFFRkE5OTY0OTVCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZwd6MA8EAgACMAkDBwAgAQ3xScAwDQYJKoZIhvcNAQELBQADggEB
ACdFrMlNHGABJXuGwkAA775DpAnjoOCNfxqSR79jpJdz3OTunNMcI4vPc3UiFCti
X8lnvPpfatTPFE/lFENwgbdQY5Y0w7Q6zxdHtfz991VjmeL87Xujo3bJh44e1ER3
67Og5gNJAjzocDjI3WlXEPA9IlB3HSdT2CnusooqPCr9HtKBtE3yO9sfkKgNlXDU
HdYbBKLb7gQMnirKTRfTW/0cE41nATdUY3XFgK4hkP7zf77XmtUrHV5uf7zo9Jg9
ZkNXYst9YOMOHMT/Job7LDxQIZpzjA09p0L++QjAkrxaSDFcvz5IW4YjmTPZ5gSU
0M15u3BP7aeiGN9Bi5M3P2M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:04 2026 by rpki-client