Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C32999EE391F11EFBFAB6D66C4F9AE02.roa
File:                     C32999EE391F11EFBFAB6D66C4F9AE02.roa (raw, json)
Hash identifier:          M4sCC9h+jOw1aprcitO1VbFmajV+N+fzu/Vlxn3AA6E=
Subject key identifier:   28:73:C4:B5:46:0B:1A:98:94:FB:AA:2E:80:94:B7:A6:B7:3F:B4:6A
Certificate issuer:       /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial:       0180
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C32999EE391F11EFBFAB6D66C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:01:00 +0000
ROA not before:           Fri 13 Jun 2025 04:34:58 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.10.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
                          rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
        Validity
            Not Before: Jun 13 04:34:58 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a62c-bf32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:c0:5c:c9:29:d4:73:2b:a0:bc:0b:39:22:
                    d9:a4:60:e4:16:d3:77:e0:cc:c8:ea:2b:be:83:08:
                    ce:88:82:fe:92:77:0a:de:08:a1:68:08:4b:fe:71:
                    51:f5:11:d5:d0:23:84:6a:31:56:1f:c0:67:f8:41:
                    bf:85:7e:55:51:3b:f5:65:4b:2a:f2:c9:bd:2a:37:
                    fe:45:3c:d1:21:18:f1:da:47:a2:c6:06:73:d4:4c:
                    f6:86:7d:a3:52:fd:ea:45:5b:3f:99:9d:6a:0f:91:
                    16:73:e2:62:e5:6d:eb:4d:2a:67:32:3f:2a:c2:7f:
                    15:d6:00:01:a0:13:44:b9:89:01:6d:42:5c:e0:3e:
                    56:96:ac:82:d9:65:7e:62:33:19:64:b1:76:8b:32:
                    b9:c1:57:6d:3d:43:df:ce:77:14:d2:cf:a1:73:74:
                    65:a9:83:b2:49:86:80:c4:b8:fc:72:39:d5:e1:73:
                    51:19:79:da:c6:eb:5f:74:c0:31:02:cf:2b:66:1d:
                    bf:e7:f1:a8:11:c9:84:1b:a5:40:d8:7d:3a:44:95:
                    b2:a0:1a:57:9a:d3:ea:88:10:0d:6c:06:1f:6a:2b:
                    b1:2e:28:f7:51:6b:36:29:a0:6d:eb:03:28:90:b3:
                    f8:ce:1c:03:08:1e:95:86:1a:5f:13:92:4c:c3:6e:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:73:C4:B5:46:0B:1A:98:94:FB:AA:2E:80:94:B7:A6:B7:3F:B4:6A
            X509v3 Authority Key Identifier:
                keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C32999EE391F11EFBFAB6D66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:80:dc:16:cc:76:ff:25:3b:e9:c9:bf:21:1b:2c:5f:ac:
         71:41:b4:e4:2e:60:c9:b7:52:6f:d1:b4:b6:46:42:e5:c6:f2:
         4d:39:c7:00:14:d5:90:a3:1e:c4:d1:e3:45:3a:5f:bc:21:70:
         4f:25:12:ae:bc:08:7d:dd:4e:b1:e6:c6:d3:df:5f:b4:63:cb:
         8a:33:4c:58:00:8a:b8:5c:22:22:cb:f3:f8:bf:7e:51:aa:ca:
         1e:16:ba:cc:be:cd:a5:fe:6c:11:ee:9e:c7:39:6b:e7:74:b0:
         b2:cb:30:50:b5:0f:6e:a1:d0:c0:09:e1:ec:7b:70:87:8a:32:
         e2:f9:a4:3a:f5:88:21:b7:70:a5:d5:01:e9:b9:8d:db:f8:fc:
         74:1f:b8:cd:e9:33:cc:73:ea:42:d6:0c:2c:df:ef:15:1b:76:
         f1:93:15:3b:9b:f8:41:43:5d:ec:58:ee:22:2a:76:1b:47:e7:
         c4:46:72:b3:64:b7:94:02:c3:71:b2:1c:38:ac:b3:4a:ed:66:
         39:7c:b1:96:3d:e4:17:7f:f1:3e:e9:c5:8c:a6:40:51:10:d3:
         5c:90:53:be:b3:a7:6b:db:73:d3:c6:c9:d9:6d:dc:a5:9e:28:
         ef:b2:02:9e:7f:7e:9d:93:d2:96:59:12:18:e9:e9:88:39:31:
         be:5a:0f:ab
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY5MDYxMTAvBgNVBAUTKDUwMzI3MkRBM0VGMEFCRURFOTUzOUM3RTI0M0ExQjg2
ODZCMTYxRkIwHhcNMjUwNjEzMDQzNDU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTYyYy1iZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArN3AXMkp1HMroLwLOSLZpGDkFtN34MzI6iu+gwjOiIL+kncK3gihaAhL/nFR
9RHV0COEajFWH8Bn+EG/hX5VUTv1ZUsq8sm9Kjf+RTzRIRjx2keixgZz1Ez2hn2j
Uv3qRVs/mZ1qD5EWc+Ji5W3rTSpnMj8qwn8V1gABoBNEuYkBbUJc4D5WlqyC2WV+
YjMZZLF2izK5wVdtPUPfzncU0s+hc3RlqYOySYaAxLj8cjnV4XNRGXnaxutfdMAx
As8rZh2/5/GoEcmEG6VA2H06RJWyoBpXmtPqiBANbAYfaiuxLij3UWs2KaBt6wMo
kLP4zhwDCB6VhhpfE5JMw26M+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFChzxLVG
CxqYlPuqLoCUt6a3P7RqMB8GA1UdIwQYMBaAFFAycto+8Kvt6VOcfiQ6G4aGsWH7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjkwNi8yODNBNjY4RUU3
NzYxMUVFQUFGRjNFNzRDNEY5QUUwMi9VREp5Mmo3d3EtM3BVNXgtSkRvYmhvYXhZ
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VESnkyajd3cS0zcFU1eC1KRG9iaG9heFlmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDY5MDYvMjgzQTY2OEVFNzc2MTFFRUFBRkYzRTc0QzRGOUFFMDIvQzMyOTk5RUUz
OTFGMTFFRkJGQUI2RDY2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZwoJMA0GCSqGSIb3DQEBCwUAA4IBAQBW/YDcFsx2/yU76cm/IRss
X6xxQbTkLmDJt1Jv0bS2RkLlxvJNOccAFNWQox7E0eNFOl+8IXBPJRKuvAh93U6x
5sbT31+0Y8uKM0xYAIq4XCIiy/P4v35RqsoeFrrMvs2l/mwR7p7HOWvndLCyyzBQ
tQ9uodDACeHse3CHijLi+aQ69Yght3Cl1QHpuY3b+Px0H7jN6TPMc+pC1gws3+8V
G3bxkxU7m/hBQ13sWO4iKnYbR+fERnKzZLeUAsNxshw4rLNK7WY5fLGWPeQXf/E+
6cWMpkBRENNckFO+s6dr23PTxsnZbdylnijvsgKef36dk9KWWRIY6emIOTG+Wg+r
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:13 2026 by rpki-client