Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa
File:                     B70383D6385411E9A0023656C4F9AE02.roa (raw, json)
Hash identifier:          7vWFkGFq5uxVXCbfQZ/86ifw+qgZ8YrPvE/ofrwS5C0=
Subject key identifier:   B9:F5:E8:EB:1A:6D:85:A6:A8:03:DF:71:6A:D3:51:89:45:77:34:40
Certificate issuer:       /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Certificate serial:       112D
Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 18:20:53 +0000
ROA not before:           Tue 30 Jun 2026 18:20:53 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136598
IP address blocks:        103.93.90.0/24 maxlen: 24
                          103.96.234.0/24 maxlen: 24
                          103.96.235.0/24 maxlen: 24
                          103.122.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl
                          rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4397 (0x112d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
        Validity
            Not Before: Jun 30 18:20:53 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a440905-cc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:10:31:fa:03:d4:55:94:0e:81:b0:8c:ae:
                    25:93:47:3a:32:9d:e8:6a:97:4e:76:e7:41:57:d7:
                    73:6a:3e:3f:f5:3b:66:bc:71:4e:54:a5:72:3e:7a:
                    04:27:f9:65:76:d8:73:b8:bb:e2:07:b2:ef:fa:07:
                    88:77:de:76:56:3e:12:59:31:27:41:08:8e:35:3d:
                    f3:15:6b:99:6d:c4:a1:14:c7:85:a0:b9:88:92:4a:
                    ad:fc:3d:73:32:71:e4:f1:01:f6:ee:6d:2b:09:cc:
                    1f:5c:67:bf:d1:0c:5d:f0:19:a7:74:be:69:af:48:
                    30:ca:88:ed:6d:70:34:1f:8a:09:4e:d8:8e:e1:f6:
                    f0:e0:5b:48:49:79:77:db:dc:93:bb:f9:6e:43:11:
                    af:f0:30:56:0f:bc:ac:68:2b:3d:9a:fe:42:e2:b2:
                    e8:2d:f6:3a:aa:53:ec:8d:d6:c0:6b:86:3a:97:3a:
                    02:87:03:41:44:3c:fc:f8:10:53:fe:4c:a6:76:c9:
                    33:e2:ad:fe:44:6a:8c:62:2e:68:51:47:3f:23:f3:
                    30:bc:94:8d:7b:be:01:39:eb:f5:23:48:af:f2:26:
                    99:82:23:a4:05:56:99:7b:79:38:4f:73:96:2f:35:
                    2e:14:09:60:f9:93:55:cb:09:ae:e3:94:57:ff:4e:
                    d3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F5:E8:EB:1A:6D:85:A6:A8:03:DF:71:6A:D3:51:89:45:77:34:40
            X509v3 Authority Key Identifier:
                keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.90.0/24
                  103.96.234.0/23
                  103.122.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:02:e4:1e:ba:e7:11:44:f8:68:f4:40:53:09:a8:cc:23:f0:
         6b:00:44:a3:30:2c:9b:67:1f:eb:77:47:4c:b2:ee:cc:af:75:
         10:22:2d:0c:d5:16:7a:e6:b5:7d:19:a3:88:fa:ed:b4:6c:82:
         b6:07:a6:46:24:89:9a:7f:f1:7d:cf:3c:cf:c6:fc:37:81:1b:
         8e:ff:01:14:ea:bc:ae:11:11:4f:d7:9c:22:39:8c:1c:3c:36:
         07:54:56:05:12:67:5c:f2:9d:ea:74:0f:c0:29:4a:ff:9e:8f:
         56:6b:e9:69:8d:6e:32:e8:8d:26:0e:2f:7f:5e:b5:a0:c4:aa:
         88:fe:7f:e4:0d:ae:57:70:51:f6:e7:a6:92:71:30:b5:80:be:
         bb:6e:b5:88:c6:e2:45:04:2b:b2:ff:59:05:b6:11:20:d4:d0:
         a3:82:a1:f7:60:d3:8b:18:97:fb:46:57:d2:7d:d8:31:75:e7:
         c3:0a:8d:96:78:21:6c:ed:88:ba:33:2c:01:2f:62:e9:77:77:
         03:5c:09:22:0e:14:15:e5:26:0d:78:30:ea:97:73:89:a3:de:
         cb:40:f7:cb:53:4a:40:5b:0d:85:77:16:8a:c8:7d:8c:c7:2f:
         10:4b:b4:27:31:47:fb:55:d3:4b:a0:e3:b9:40:e4:64:75:9c:
         25:cd:0b:d4
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICES0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD
MkI2RTg1NEMwHhcNMjYwNjMwMTgyMDUzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0MDkwNS1jYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuiYQMfoD1FWUDoGwjK4lk0c6Mp3oapdOdudBV9dzaj4/9TtmvHFOVKVyPnoE
J/lldthzuLviB7Lv+geId952Vj4SWTEnQQiONT3zFWuZbcShFMeFoLmIkkqt/D1z
MnHk8QH27m0rCcwfXGe/0Qxd8BmndL5pr0gwyojtbXA0H4oJTtiO4fbw4FtISXl3
29yTu/luQxGv8DBWD7ysaCs9mv5C4rLoLfY6qlPsjdbAa4Y6lzoChwNBRDz8+BBT
/kymdskz4q3+RGqMYi5oUUc/I/MwvJSNe74BOev1I0iv8iaZgiOkBVaZe3k4T3OW
LzUuFAlg+ZNVywmu45RX/07ToQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLn16Osa
bYWmqAPfcWrTUYlFdzRAMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4
NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjlCOUUvOThCNTdEODYzODUzMTFFOUFENDQyODUyQzRGOUFFMDIvQjcwMzgzRDYz
ODU0MTFFOUEwMDIzNjU2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZ11aAwQBZ2DqAwQAZ3osMA0GCSqGSIb3DQEBCwUAA4IBAQBtAuQe
uucRRPho9EBTCajMI/BrAESjMCybZx/rd0dMsu7Mr3UQIi0M1RZ65rV9GaOI+u20
bIK2B6ZGJImaf/F9zzzPxvw3gRuO/wEU6ryuERFP15wiOYwcPDYHVFYFEmdc8p3q
dA/AKUr/no9Wa+lpjW4y6I0mDi9/XrWgxKqI/n/kDa5XcFH256aScTC1gL67brWI
xuJFBCuy/1kFthEg1NCjgqH3YNOLGJf7RlfSfdgxdefDCo2WeCFs7Yi6MywBL2Lp
d3cDXAkiDhQV5SYNeDDql3OJo97LQPfLU0pAWw2FdxaKyH2Mxy8QS7QnMUf7VdNL
oOO5QORkdZwlzQvU
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:00 2026 by rpki-client