Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/A1DC8404684D11F1A6C7E6E99747A888.roa
File:                     A1DC8404684D11F1A6C7E6E99747A888.roa (raw, json)
Hash identifier:          ngNJK+0LZfBPO2VlnhkTqA6lop0/Ha7ck3GNNL+/LPg=
Subject key identifier:   B7:A2:81:B9:32:1B:AF:C2:65:25:F9:DF:E4:F9:CD:B9:46:2C:09:7B
Certificate issuer:       /CN=A9154C6E/serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
Certificate serial:       48
Authority key identifier: 48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/A1DC8404684D11F1A6C7E6E99747A888.roa
Signing time:             Mon 15 Jun 2026 00:03:27 +0000
ROA not before:           Mon 15 Jun 2026 00:03:26 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133102
IP address blocks:        103.242.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154C6E, serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
        Validity
            Not Before: Jun 15 00:03:26 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a2f414e-e377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:a4:df:67:84:e7:70:2c:d5:64:27:24:12:
                    d5:37:14:5d:18:ef:96:bd:70:b8:be:c7:fb:10:27:
                    ab:e8:59:eb:ed:ec:75:35:96:3c:a0:38:6d:e7:39:
                    e3:14:97:fd:62:7d:fd:35:bc:e0:96:95:10:eb:eb:
                    dd:81:19:5d:a1:71:a0:0c:16:a3:af:b0:8d:45:7c:
                    aa:ca:b5:da:5b:31:08:13:5f:48:38:8a:95:51:23:
                    96:53:cf:30:ea:61:d8:fc:7f:ad:07:c5:a6:77:b7:
                    ac:90:0c:94:a9:f8:08:8b:4f:08:c0:b7:1b:07:89:
                    08:be:34:17:bb:d2:88:8c:2c:84:6c:67:6d:2a:41:
                    07:7e:99:46:1d:88:c8:cb:77:b7:02:95:66:cd:f9:
                    27:cb:e9:dc:23:16:ad:18:4b:0e:97:eb:36:c1:fa:
                    ca:4f:d8:b9:d3:d7:6b:23:eb:fb:8d:64:14:69:4d:
                    bc:2d:43:af:28:83:dc:eb:c7:10:a1:bf:55:e2:84:
                    7c:96:2d:23:6d:1c:0d:43:6a:04:c5:c7:91:38:13:
                    af:5b:e1:f9:cd:1d:cb:0c:f7:1b:32:55:f8:10:da:
                    7b:3b:1f:a4:6a:cb:aa:f4:2d:fd:71:9a:65:bb:16:
                    65:eb:02:11:4f:33:5e:61:e6:31:4f:b0:f6:f9:69:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A2:81:B9:32:1B:AF:C2:65:25:F9:DF:E4:F9:CD:B9:46:2C:09:7B
            X509v3 Authority Key Identifier:
                keyid:48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/A1DC8404684D11F1A6C7E6E99747A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f9:c0:7f:ec:24:53:a5:b1:11:f3:7c:fd:51:00:82:ba:43:
         d7:30:80:2c:66:4a:c5:df:7a:fd:9a:a7:3b:60:9e:98:46:78:
         00:d9:c3:36:d4:47:8b:d3:98:89:7e:73:c2:95:b7:94:71:ee:
         e4:1e:e7:78:42:2e:25:b1:3d:f2:e2:e8:3f:69:40:61:e8:53:
         e6:12:1e:6c:cc:25:b5:5a:ae:d7:51:b5:81:f7:29:c4:a0:a6:
         21:b1:a1:2b:37:4c:0f:11:90:16:25:9a:ae:4a:8b:78:47:59:
         5b:a2:45:2b:33:22:58:1c:34:4a:93:cb:1f:2f:ca:66:c9:c5:
         d1:0b:86:e1:b1:e9:1d:4a:b2:d8:e0:c0:70:73:e8:e8:63:46:
         e3:ce:1b:ef:d1:a4:02:c6:1c:14:2a:78:e9:47:31:a6:11:53:
         e7:03:f9:58:7a:1f:f3:46:0f:3d:ba:d2:1d:77:18:ee:38:7d:
         16:63:ed:3f:8d:e0:de:9b:53:e1:36:15:7e:c6:eb:06:e4:c2:
         7e:d7:b5:66:47:44:53:bd:8a:e6:ec:52:d0:4e:93:fc:3d:71:
         0a:09:62:bf:be:06:5f:93:af:90:b6:01:14:32:3d:98:8e:d2:
         33:67:28:cb:18:d7:f0:e8:d5:c4:c7:99:80:dd:fd:a7:61:4f:
         3e:b7:09:da
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NEM2RTExMC8GA1UEBRMoNDhCREQ1MzM1OTNCMjA3RkI3MjI5RjE4NTIxQTI1OEYy
MzI5NEZGNjAeFw0yNjA2MTUwMDAzMjZaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMmY0MTRlLWUzNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDE06TfZ4TncCzVZCckEtU3FF0Y75a9cLi+x/sQJ6voWevt7HU1ljygOG3nOeMU
l/1iff01vOCWlRDr692BGV2hcaAMFqOvsI1FfKrKtdpbMQgTX0g4ipVRI5ZTzzDq
Ydj8f60HxaZ3t6yQDJSp+AiLTwjAtxsHiQi+NBe70oiMLIRsZ20qQQd+mUYdiMjL
d7cClWbN+SfL6dwjFq0YSw6X6zbB+spP2LnT12sj6/uNZBRpTbwtQ68og9zrxxCh
v1XihHyWLSNtHA1DagTFx5E4E69b4fnNHcsM9xsyVfgQ2ns7H6Rqy6r0Lf1xmmW7
FmXrAhFPM15h5jFPsPb5aXGBAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUt6KBuTIb
r8JlJfnf5PnNuUYsCXswHwYDVR0jBBgwFoAUSL3VM1k7IH+3Ip8YUholjyMpT/Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0QzZFLzA1RTQ2NTcyMDIx
MjExRjE5MEI4MjdCQTQ1NkY1NkJDL1NMM1ZNMWs3SUgtM0lwOFlVaG9sanlNcFRf
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU0wzVk0xazdJSC0zSXA4WVVob2xqeU1wVF9ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEM2RS8wNUU0NjU3MjAyMTIxMUYxOTBCODI3QkE0NTZGNTZCQy9BMURDODQwNDY4
NEQxMUYxQTZDN0U2RTk5NzQ3QTg4OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABn8uswDQYJKoZIhvcNAQELBQADggEBAEv5wH/sJFOlsRHzfP1RAIK6
Q9cwgCxmSsXfev2apztgnphGeADZwzbUR4vTmIl+c8KVt5Rx7uQe53hCLiWxPfLi
6D9pQGHoU+YSHmzMJbVartdRtYH3KcSgpiGxoSs3TA8RkBYlmq5Ki3hHWVuiRSsz
IlgcNEqTyx8vymbJxdELhuGx6R1KstjgwHBz6OhjRuPOG+/RpALGHBQqeOlHMaYR
U+cD+Vh6H/NGDz260h13GO44fRZj7T+N4N6bU+E2FX7G6wbkwn7XtWZHRFO9iubs
UtBOk/w9cQoJYr++Bl+Tr5C2ARQyPZiO0jNnKMsY1/Do1cTHmYDd/adhTz63Cdo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:47:06 2026 by rpki-client