Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/1ECF63EE674511EEBD995841C4F9AE02.roa
File:                     1ECF63EE674511EEBD995841C4F9AE02.roa (raw, json)
Hash identifier:          6rD6wcHtLIJW6RZB/L66CQMMVgT4vo22V6KDDUwd5sM=
Subject key identifier:   0F:79:8C:58:33:69:C0:9B:9F:29:7A:C7:8D:30:6B:B6:47:BB:5F:BE
Certificate issuer:       /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
Certificate serial:       0234
Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/1ECF63EE674511EEBD995841C4F9AE02.roa
Signing time:             Wed 23 Sep 2026 02:52:36 +0000
ROA not before:           Wed 23 Sep 2026 02:52:36 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     151834
IP address blocks:        103.217.70.0/23 maxlen: 23
                          103.217.70.0/24 maxlen: 24
                          103.217.71.0/24 maxlen: 24
                          2401:40e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl
                          rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
        Validity
            Not Before: Sep 23 02:52:36 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab33ef4-dd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:ff:ac:12:5c:2e:ea:e2:a9:5e:17:74:02:
                    91:05:25:2c:9d:48:d3:2f:de:74:17:0c:64:be:5d:
                    d1:7f:96:c8:e6:6a:8c:e7:2e:d7:7d:21:f6:a8:2e:
                    f6:bf:0b:06:f4:4f:97:71:3c:5b:ba:21:b7:7f:38:
                    dc:f4:8f:e3:a6:ed:8c:c8:ad:34:d3:86:a5:31:f1:
                    b5:8f:fe:31:a2:6b:6c:76:43:d5:bb:dc:f6:26:a5:
                    72:45:77:5f:8c:2a:86:c7:1c:6d:5a:c7:32:6e:52:
                    c7:1b:bd:24:cc:d3:b3:88:fe:54:15:ef:9b:f1:7a:
                    7b:28:48:e3:ea:eb:7a:c8:14:f3:c0:76:0d:25:a0:
                    02:ec:2e:28:74:01:30:f6:1e:bb:15:81:c1:3b:31:
                    02:73:23:7c:b9:17:4d:2e:4b:12:13:cf:d8:52:30:
                    f6:92:f5:1c:6d:0c:73:7e:f7:d7:fb:e0:a0:20:9e:
                    35:ad:15:6a:62:44:0d:3a:6b:11:c7:e5:25:3a:88:
                    6c:c3:d5:f8:0a:2f:b3:3d:43:e2:09:dc:76:8e:b4:
                    47:5f:3d:15:08:b6:b4:1c:88:35:74:77:29:c9:a2:
                    37:39:6c:08:ec:51:95:bf:54:7c:e8:90:61:a5:13:
                    ee:80:1e:79:5b:9c:4c:16:ad:63:b5:13:fa:9d:d3:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:79:8C:58:33:69:C0:9B:9F:29:7A:C7:8D:30:6B:B6:47:BB:5F:BE
            X509v3 Authority Key Identifier:
                keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/1ECF63EE674511EEBD995841C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.70.0/23
                IPv6:
                  2401:40e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:4b:42:ed:eb:22:f3:25:8a:85:1c:ef:9d:cc:5b:5b:de:ad:
         da:95:7f:9b:2a:56:29:fa:e3:fa:87:6c:cf:79:ba:56:68:91:
         22:d0:58:52:60:29:5c:30:ee:2c:77:62:72:49:45:90:0c:ef:
         98:8e:f1:cb:3f:52:89:b2:2b:40:51:3e:89:28:07:17:cd:94:
         bc:9a:99:45:d1:ea:8e:1e:fb:16:49:93:d1:20:11:09:b2:e7:
         8e:6a:c5:db:9d:0a:90:a0:eb:d1:d4:d7:15:35:d5:f9:f7:7b:
         26:9c:82:fd:b4:be:3a:28:64:d7:e8:94:80:bb:51:f2:46:c2:
         77:83:b4:4d:70:5b:7f:b3:97:69:07:56:1e:12:86:c7:37:f4:
         54:ed:ce:1b:78:73:ee:b1:ac:14:94:54:5b:ff:fc:fc:76:c8:
         46:45:77:0f:4f:86:e2:d2:20:c0:d4:98:47:35:d2:91:5d:20:
         3c:0b:8e:9f:9e:e6:70:e4:6b:02:72:e7:3c:83:57:9b:30:a7:
         94:b9:7c:87:65:3c:6b:03:1a:ab:50:c1:ab:11:67:23:38:a4:
         7b:c5:df:91:53:23:40:5d:72:ee:ea:b5:5d:33:41:07:e4:ca:
         d7:fe:9c:47:65:a2:30:59:39:e7:c2:9a:33:ef:36:a6:88:08:
         c7:dc:fe:24
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI3NDQxMTAvBgNVBAUTKEJEMjFCRTk4MzA3NTQyOTE2RDgxRTBGRUQ5RjhGNTMy
NDA0OTQ0ODAwHhcNMjYwOTIzMDI1MjM2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIzM2VmNC1kZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Qv/rBJcLuriqV4XdAKRBSUsnUjTL950Fwxkvl3Rf5bI5mqM5y7XfSH2qC72
vwsG9E+XcTxbuiG3fzjc9I/jpu2MyK0004alMfG1j/4xomtsdkPVu9z2JqVyRXdf
jCqGxxxtWscyblLHG70kzNOziP5UFe+b8Xp7KEjj6ut6yBTzwHYNJaAC7C4odAEw
9h67FYHBOzECcyN8uRdNLksSE8/YUjD2kvUcbQxzfvfX++CgIJ41rRVqYkQNOmsR
x+UlOohsw9X4Ci+zPUPiCdx2jrRHXz0VCLa0HIg1dHcpyaI3OWwI7FGVv1R86JBh
pRPugB55W5xMFq1jtRP6ndM7wwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFA95jFgz
acCbnyl6x40wa7ZHu1++MB8GA1UdIwQYMBaAFL0hvpgwdUKRbYHg/tn49TJASUSA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjc0NC84RThCOUM5RTY3
NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURCMVFwRnRnZUQtMmZqMU1rQkpS
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZTRy1tREIxUXBGdGdlRC0yZmoxTWtCSlJJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjI3NDQvOEU4QjlDOUU2NzQ0MTFFRThBOTJGODNGQzRGOUFFMDIvMUVDRjYzRUU2
NzQ1MTFFRUJEOTk1ODQxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ9lGMA0EAgACMAcDBQAkAUDgMA0GCSqGSIb3DQEBCwUAA4IBAQB3
S0Lt6yLzJYqFHO+dzFtb3q3alX+bKlYp+uP6h2zPebpWaJEi0FhSYClcMO4sd2Jy
SUWQDO+YjvHLP1KJsitAUT6JKAcXzZS8mplF0eqOHvsWSZPRIBEJsueOasXbnQqQ
oOvR1NcVNdX593smnIL9tL46KGTX6JSAu1HyRsJ3g7RNcFt/s5dpB1YeEobHN/RU
7c4beHPusawUlFRb//z8dshGRXcPT4bi0iDA1JhHNdKRXSA8C46fnuZw5GsCcuc8
g1ebMKeUuXyHZTxrAxqrUMGrEWcjOKR7xd+RUyNAXXLu6rVdM0EH5MrX/pxHZaIw
WTnnwpoz7zamiAjH3P4k
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:12:53 2026 by rpki-client