Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa
File:                     EC61C060DDB411ED93355C4FC4F9AE02.roa (raw, json)
Hash identifier:          9JSzm9lf4Elq7GXzCtPh1TTKhYzIdjlENWgNE400fvg=
Subject key identifier:   11:52:FE:68:61:CA:32:AB:58:22:7A:2E:16:A8:33:C2:35:0D:C1:6E
Certificate issuer:       /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial:       0229
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:29:37 +0000
ROA not before:           Mon 07 Apr 2025 03:08:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3462
IP address blocks:        103.112.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
                          rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
        Validity
            Not Before: Apr  7 03:08:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3eae1-6708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:7a:ca:c7:c7:c3:a2:71:54:b5:7b:e6:4a:
                    37:51:60:98:21:ab:9a:bb:15:67:6e:cf:5a:a6:c6:
                    7e:b3:c6:52:5a:92:65:49:d2:b7:3e:e6:d6:84:6e:
                    e1:68:6a:8a:ce:74:84:81:92:69:ec:92:11:b1:c0:
                    9c:31:d9:83:6b:35:d7:51:a8:80:76:26:2c:34:de:
                    1f:7b:19:46:74:5e:dc:1d:89:d7:5e:1e:40:c7:14:
                    87:19:79:82:d3:b7:53:9b:34:c7:39:4d:69:dc:c1:
                    dd:b2:1f:1b:8f:f4:b8:9a:57:b5:27:d7:34:9c:ba:
                    b0:c4:d5:ea:92:39:4d:e4:ea:82:30:3e:5c:1b:95:
                    c7:41:f2:53:1d:d9:1a:c5:b8:6b:75:77:a9:7d:0a:
                    07:87:d1:0d:cb:d9:27:60:75:27:85:00:ba:b9:c2:
                    d1:e8:1a:17:36:df:35:2f:ec:fa:4d:34:e3:8c:eb:
                    eb:43:61:78:3d:d8:14:a2:b2:ba:d4:17:78:2a:ae:
                    14:66:0a:b8:dc:f0:ff:e0:d0:9b:95:6d:38:38:cf:
                    54:b6:af:66:1b:39:cf:e9:47:f2:ce:72:90:e8:f9:
                    d5:d1:61:f3:51:74:55:be:92:43:5f:3d:fe:f0:51:
                    bd:3f:81:e3:83:85:47:7f:07:bf:7b:55:9b:fb:58:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:52:FE:68:61:CA:32:AB:58:22:7A:2E:16:A8:33:C2:35:0D:C1:6E
            X509v3 Authority Key Identifier:
                keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:ed:27:b3:1d:ca:10:48:b9:19:15:f1:9f:7c:31:08:8b:b1:
         e9:71:b2:38:a2:0b:ee:33:1e:a9:8a:37:b7:fb:fd:65:3f:49:
         ab:79:ac:a2:9e:07:59:b4:25:ac:cc:d2:68:92:30:8b:fe:49:
         c1:50:ff:5a:42:b8:01:d0:6d:25:d8:85:ed:90:76:0a:32:8e:
         43:17:fd:e9:30:bc:44:47:f6:65:ea:a6:56:c5:e1:d7:0d:a3:
         00:29:34:a3:18:07:e4:50:90:ca:d4:78:3f:89:be:e2:53:97:
         d1:22:ef:b8:d4:a3:cc:52:b9:59:9a:34:58:54:25:df:10:cf:
         c9:08:40:f6:62:42:9a:4a:6c:6a:08:a5:80:8d:c8:3e:61:13:
         72:52:a6:b5:e5:f6:11:69:e6:ea:fc:3e:14:72:3d:6a:4a:15:
         3b:91:c3:af:b2:0f:37:b9:01:bd:09:e4:a2:e5:10:9c:42:4c:
         22:d4:b9:f3:cb:a8:a5:1e:18:6b:6e:0f:a3:d4:a1:a7:35:be:
         c7:66:6f:ec:90:81:79:7a:23:36:b1:0e:ea:d8:50:d5:d4:90:
         60:dd:a6:41:46:bd:b3:61:7d:54:34:26:a8:0d:6a:81:e5:b7:
         a6:dd:ec:d4:eb:00:df:f3:2e:d4:cb:8b:fd:34:e2:c8:a9:ff:
         25:5b:0d:01
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFCNUIxMTAvBgNVBAUTKDI4ODQ4REMzRjE5RTc3MjlGRkUzN0VGN0U0RjBBNUM5
QzVCNDkwRTkwHhcNMjUwNDA3MDMwODUzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWFlMS02NzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoPF6ysfHw6JxVLV75ko3UWCYIauauxVnbs9apsZ+s8ZSWpJlSdK3PubWhG7h
aGqKznSEgZJp7JIRscCcMdmDazXXUaiAdiYsNN4fexlGdF7cHYnXXh5AxxSHGXmC
07dTmzTHOU1p3MHdsh8bj/S4mle1J9c0nLqwxNXqkjlN5OqCMD5cG5XHQfJTHdka
xbhrdXepfQoHh9ENy9knYHUnhQC6ucLR6BoXNt81L+z6TTTjjOvrQ2F4PdgUorK6
1Bd4Kq4UZgq43PD/4NCblW04OM9Utq9mGznP6UfyznKQ6PnV0WHzUXRVvpJDXz3+
8FG9P4Hjg4VHfwe/e1Wb+1harQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBFS/mhh
yjKrWCJ6LhaoM8I1DcFuMB8GA1UdIwQYMBaAFCiEjcPxnncp/+N+9+TwpcnFtJDp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUI1Qi84RDU3RTE3Q0RE
OTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5bl80MzczNVBDbHljVzBr
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tJU053X0dlZHluXzQzNzM1UENseWNXMGtPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDFCNUIvOEQ1N0UxN0NERDk1MTFFREFFOEM2QzdBQzRGOUFFMDIvRUM2MUMwNjBE
REI0MTFFRDkzMzU1QzRGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3AwMA0GCSqGSIb3DQEBCwUAA4IBAQBH7SezHcoQSLkZFfGffDEI
i7HpcbI4ogvuMx6pije3+/1lP0mreayingdZtCWszNJokjCL/knBUP9aQrgB0G0l
2IXtkHYKMo5DF/3pMLxER/Zl6qZWxeHXDaMAKTSjGAfkUJDK1Hg/ib7iU5fRIu+4
1KPMUrlZmjRYVCXfEM/JCED2YkKaSmxqCKWAjcg+YRNyUqa15fYRaebq/D4Ucj1q
ShU7kcOvsg83uQG9CeSi5RCcQkwi1Lnzy6ilHhhrbg+j1KGnNb7HZm/skIF5eiM2
sQ7q2FDV1JBg3aZBRr2zYX1UNCaoDWqB5bem3ezU6wDf8y7Uy4v9NOLIqf8lWw0B
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:18 2026 by rpki-client