Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/9950A304A55011EFA7FFA969C4F9AE02.roa
File:                     9950A304A55011EFA7FFA969C4F9AE02.roa (raw, json)
Hash identifier:          p3YSKm0XiU+1I3RwB+h4QT+40+6ZmIED9W91tOylVnw=
Subject key identifier:   28:BB:BE:98:C0:57:38:07:4D:0E:3B:3F:3D:7F:43:B9:00:C2:6A:E8
Certificate issuer:       /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
Certificate serial:       017D
Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/9950A304A55011EFA7FFA969C4F9AE02.roa
Signing time:             Tue 01 Sep 2026 05:55:39 +0000
ROA not before:           Tue 01 Sep 2026 05:55:39 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     9266
IP address blocks:        43.250.24.0/22 maxlen: 22
                          103.41.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl
                          rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
        Validity
            Not Before: Sep  1 05:55:39 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a9668db-729d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:cf:e0:61:86:21:80:b9:94:11:e5:c5:60:
                    23:da:74:58:a3:1f:93:7c:12:09:36:7c:65:a3:f2:
                    4c:e1:51:e7:07:d9:53:c1:97:e6:97:5e:57:1b:e2:
                    24:05:fe:53:d3:8d:4b:f5:1e:33:48:d8:54:37:97:
                    b2:96:7f:0e:d2:f5:11:27:de:70:81:66:ff:ac:f0:
                    43:ef:61:8f:e3:23:04:4a:ee:69:ad:10:cc:4c:67:
                    13:82:fd:09:41:a4:a3:27:14:d7:d3:89:7d:57:44:
                    17:9a:7e:88:85:1b:be:e8:97:5f:f4:99:e8:43:e7:
                    51:fa:e5:1b:f4:dd:ac:76:ec:33:3b:72:7e:b1:cd:
                    e4:c8:88:84:e4:3e:54:36:ca:48:8d:47:15:6d:95:
                    f5:d6:5f:a6:ae:45:86:5e:39:5a:03:62:8f:d5:5c:
                    b0:40:97:c9:e6:0b:9c:ab:f4:70:ef:f5:fd:ac:b7:
                    50:d3:9f:e7:64:ca:c4:9f:43:6a:02:aa:e0:4d:95:
                    30:03:4d:cb:95:14:85:73:af:ec:03:62:46:36:af:
                    51:31:a2:b1:6f:d2:3f:d6:1c:3c:d3:4d:4e:82:51:
                    61:49:58:be:d1:ad:7d:28:57:ec:8c:85:0a:99:d0:
                    0d:8f:a2:9b:3d:bb:a1:fc:57:0a:48:e3:ab:64:88:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BB:BE:98:C0:57:38:07:4D:0E:3B:3F:3D:7F:43:B9:00:C2:6A:E8
            X509v3 Authority Key Identifier:
                keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/9950A304A55011EFA7FFA969C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.24.0/22
                  103.41.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:21:1a:11:2d:06:f6:0d:10:f0:f4:36:95:97:f5:31:6f:0f:
         1d:b4:c5:00:dd:33:7f:03:b9:c6:99:3b:ad:1f:9b:28:65:6a:
         33:70:c0:d1:4d:8c:d8:ad:3d:b3:07:ea:3f:67:8a:d1:e1:d3:
         ab:35:7f:ee:cf:11:f9:67:f4:65:6e:a8:7a:79:ec:03:a9:a8:
         10:95:5f:38:67:71:db:71:6e:e5:93:17:6f:dd:ed:41:a2:9f:
         b2:b9:9b:21:89:35:ae:1e:31:63:9c:90:fa:b8:ae:48:a1:bd:
         52:17:b8:c3:fd:e6:3a:bb:3e:ce:b7:e0:40:63:5d:9f:a7:03:
         47:d6:75:f5:40:85:62:20:52:9d:38:70:be:aa:92:c8:81:d1:
         a7:eb:42:be:e5:c4:5c:c4:8a:52:56:48:6e:35:8b:26:ed:e9:
         2e:cc:95:ca:3d:c9:6c:80:d7:58:c2:3b:77:ef:a0:7c:15:2d:
         50:8f:45:36:80:ea:b5:8a:29:d6:fe:89:f7:ef:d0:90:a3:0c:
         76:79:29:72:61:bd:e1:83:dd:70:f6:3e:c6:95:a1:04:62:04:
         ab:d5:74:1d:6f:1e:5d:83:63:47:fa:18:ba:39:1c:2a:99:29:
         9f:31:5d:1d:95:f3:13:bc:9f:6f:46:1f:0b:83:4f:fc:12:c1:
         52:67:79:7e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ4NDAxMTAvBgNVBAUTKDlDRjcxNDc4QkY1OUIwMDhCMUI1NDJGQTkzQTdDMTBF
RkI3RjRENjIwHhcNMjYwOTAxMDU1NTM5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk2NjhkYi03MjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsOLP4GGGIYC5lBHlxWAj2nRYox+TfBIJNnxlo/JM4VHnB9lTwZfml15XG+Ik
Bf5T041L9R4zSNhUN5eyln8O0vURJ95wgWb/rPBD72GP4yMESu5prRDMTGcTgv0J
QaSjJxTX04l9V0QXmn6IhRu+6Jdf9JnoQ+dR+uUb9N2sduwzO3J+sc3kyIiE5D5U
NspIjUcVbZX11l+mrkWGXjlaA2KP1VywQJfJ5gucq/Rw7/X9rLdQ05/nZMrEn0Nq
AqrgTZUwA03LlRSFc6/sA2JGNq9RMaKxb9I/1hw8001OglFhSVi+0a19KFfsjIUK
mdANj6KbPbuh/FcKSOOrZIjkpwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCi7vpjA
VzgHTQ47Pz1/Q7kAwmroMB8GA1UdIwQYMBaAFJz3FHi/WbAIsbVC+pOnwQ77f01i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDg0MC8zNDJGODBEMDlG
QzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNBaXh0VUw2azZmQkR2dF9U
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTQ4NDAvMzQyRjgwRDA5RkM0MTFFRjk2MzFGODM2QzRGOUFFMDIvOTk1MEEzMDRB
NTUwMTFFRkE3RkZBOTY5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK/oYAwQCZymcMA0GCSqGSIb3DQEBCwUAA4IBAQAUIRoRLQb2DRDw
9DaVl/Uxbw8dtMUA3TN/A7nGmTutH5soZWozcMDRTYzYrT2zB+o/Z4rR4dOrNX/u
zxH5Z/Rlbqh6eewDqagQlV84Z3HbcW7lkxdv3e1Bop+yuZshiTWuHjFjnJD6uK5I
ob1SF7jD/eY6uz7Ot+BAY12fpwNH1nX1QIViIFKdOHC+qpLIgdGn60K+5cRcxIpS
VkhuNYsm7ekuzJXKPclsgNdYwjt376B8FS1Qj0U2gOq1iinW/on379CQowx2eSly
Yb3hg91w9j7GlaEEYgSr1XQdbx5dg2NH+hi6ORwqmSmfMV0dlfMTvJ9vRh8Lg0/8
EsFSZ3l+
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:13:48 2026 by rpki-client