Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/08CD1510027011EB98FEC44BC4F9AE02.roa
File:                     08CD1510027011EB98FEC44BC4F9AE02.roa (raw, json)
Hash identifier:          +IMdgWTdcA1g1fqND4+7nCJIPD1lLydbWWaRQ1akOWM=
Subject key identifier:   7C:5C:2E:AA:FD:80:A2:8F:5C:C9:01:F0:72:64:24:42:3E:32:07:B0
Certificate issuer:       /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial:       1063
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/08CD1510027011EB98FEC44BC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 08:57:54 +0000
ROA not before:           Wed 29 Apr 2026 08:57:54 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137443
IP address blocks:        103.133.176.0/22 maxlen: 24
                          103.151.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
                          rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4195 (0x1063)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
        Validity
            Not Before: Apr 29 08:57:54 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69f1c812-be92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:77:da:9e:11:f8:7a:f7:07:07:5a:5f:97:
                    e8:bb:e6:58:ee:70:ef:36:6b:ba:6d:47:47:e9:42:
                    ed:47:1a:42:86:9f:af:b7:9e:4f:32:74:ef:36:04:
                    a0:07:91:34:9c:06:81:0a:f1:ed:d0:30:81:0f:2d:
                    7c:8e:18:76:38:db:74:98:9b:20:54:a9:1f:f8:60:
                    a9:aa:bf:7e:16:d1:64:7b:0c:f5:ad:9d:92:c2:8d:
                    0f:dd:a2:c6:26:75:c0:83:03:22:7e:15:72:20:6d:
                    8e:97:c7:cc:c6:9e:dc:05:4d:2a:ba:d1:65:33:a8:
                    21:ba:29:f5:69:e2:e3:aa:d4:06:58:10:b0:45:76:
                    fb:5e:fb:df:34:85:a7:23:2c:72:9a:4b:cd:0d:21:
                    03:27:47:94:a0:68:90:51:76:bc:ef:0e:5a:47:bb:
                    64:16:5a:97:53:bc:b6:60:f3:79:e3:67:f1:9d:77:
                    5c:b2:bf:ac:9b:a0:34:a1:d9:92:b1:42:20:fe:0c:
                    f4:61:9e:f3:d9:a8:06:3d:9c:9e:44:34:4f:d8:9d:
                    d0:c1:5b:83:ab:eb:56:02:3c:0c:c1:52:32:53:ef:
                    70:b5:94:21:8e:e0:30:51:ea:92:dd:8c:46:da:67:
                    d5:45:9e:4c:06:7c:b8:c6:42:55:75:31:2f:22:c5:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5C:2E:AA:FD:80:A2:8F:5C:C9:01:F0:72:64:24:42:3E:32:07:B0
            X509v3 Authority Key Identifier:
                keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/08CD1510027011EB98FEC44BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.176.0/22
                  103.151.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:db:e2:aa:d4:6d:f3:bb:5e:af:9d:fe:1a:85:2a:3f:f9:e7:
         b0:97:bd:38:ad:a6:90:6d:a6:40:1f:0e:88:5e:26:14:5d:5f:
         93:0e:70:2e:b8:9d:16:0a:99:56:f1:36:aa:a5:d4:de:b0:4e:
         77:52:4c:50:86:fa:ea:87:33:9d:5e:a5:63:e8:2e:16:7a:92:
         7d:bf:60:0e:b5:6d:7d:bd:e3:54:2e:db:50:dc:3d:a6:eb:e5:
         81:e5:b9:7b:da:ab:0d:52:db:a4:c8:71:6c:45:af:a8:6f:32:
         2a:02:0e:36:fa:cc:e7:6f:91:9c:37:eb:b9:63:df:ae:99:b6:
         e9:76:dc:93:f1:c8:d5:4a:30:97:c8:f4:be:7b:57:46:71:a5:
         69:d6:fc:0a:f9:16:10:2e:99:86:a3:59:a2:e3:34:16:fc:0b:
         ec:8f:03:c5:da:d5:ee:db:f6:e5:b7:bb:4b:bf:6b:6a:c5:06:
         10:97:a2:53:06:2d:2f:5a:6b:75:38:e1:e1:04:6e:89:77:0a:
         0e:db:56:a3:9b:a8:78:5c:c0:7f:8d:7b:5b:13:c9:f1:59:16:
         85:02:de:32:40:5f:16:11:ee:50:86:1a:a8:8d:24:f5:4c:73:
         a7:fe:46:a9:59:63:9a:59:91:ee:bc:89:72:ce:22:3d:c8:13:
         cc:3a:15:a2
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICEGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD
RDM0MEFCMjgwHhcNMjYwNDI5MDg1NzU0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYxYzgxMi1iZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApxR32p4R+Hr3BwdaX5fou+ZY7nDvNmu6bUdH6ULtRxpChp+vt55PMnTvNgSg
B5E0nAaBCvHt0DCBDy18jhh2ONt0mJsgVKkf+GCpqr9+FtFkewz1rZ2Swo0P3aLG
JnXAgwMifhVyIG2Ol8fMxp7cBU0qutFlM6ghuin1aeLjqtQGWBCwRXb7XvvfNIWn
IyxymkvNDSEDJ0eUoGiQUXa87w5aR7tkFlqXU7y2YPN542fxnXdcsr+sm6A0odmS
sUIg/gz0YZ7z2agGPZyeRDRP2J3QwVuDq+tWAjwMwVIyU+9wtZQhjuAwUeqS3YxG
2mfVRZ5MBny4xkJVdTEvIsX7JwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHxcLqr9
gKKPXMkB8HJkJEI+MgewMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz
RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzE2OTAvMTVCNDFCODg2M0YzMTFFOUEwODU0QzQ3QzRGOUFFMDIvMDhDRDE1MTAw
MjcwMTFFQjk4RkVDNDRCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ4WwAwQBZ5fYMA0GCSqGSIb3DQEBCwUAA4IBAQA62+Kq1G3zu16v
nf4ahSo/+eewl704raaQbaZAHw6IXiYUXV+TDnAuuJ0WCplW8TaqpdTesE53UkxQ
hvrqhzOdXqVj6C4WepJ9v2AOtW19veNULttQ3D2m6+WB5bl72qsNUtukyHFsRa+o
bzIqAg42+sznb5GcN+u5Y9+umbbpdtyT8cjVSjCXyPS+e1dGcaVp1vwK+RYQLpmG
o1mi4zQW/AvsjwPF2tXu2/blt7tLv2tqxQYQl6JTBi0vWmt1OOHhBG6JdwoO21aj
m6h4XMB/jXtbE8nxWRaFAt4yQF8WEe5QhhqojST1THOn/kapWWOaWZHuvIlyziI9
yBPMOhWi
-----END CERTIFICATE-----
Generated at Wed May 13 03:18:51 2026 by rpki-client