Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/C80B0244CB2F11EEB240B62AC4F9AE02.roa
File:                     C80B0244CB2F11EEB240B62AC4F9AE02.roa (raw, json)
Hash identifier:          J33sDWTggg1bRmPFlhAXOyKZA4abpPYfOjDAZ5CZxPI=
Subject key identifier:   41:49:3C:3D:50:31:65:E8:77:6B:A8:4A:6C:8C:BA:B5:49:BE:B9:CF
Certificate issuer:       /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial:       041F
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/C80B0244CB2F11EEB240B62AC4F9AE02.roa
Signing time:             Fri 01 May 2026 01:31:04 +0000
ROA not before:           Fri 01 May 2026 01:31:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134424
IP address blocks:        103.185.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
                          rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055 (0x41f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
        Validity
            Not Before: May  1 01:31:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f40258-c5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:51:5c:33:9d:30:65:56:fe:d0:23:b4:0d:
                    7a:72:0e:b3:58:ea:d0:15:2b:82:50:9a:6e:c5:cb:
                    a6:8b:9e:d1:fb:e6:ea:9d:88:f7:40:e6:0e:fd:b8:
                    3b:d1:57:0a:ac:1c:93:66:ac:fb:9c:52:39:6b:ea:
                    72:0b:bb:e8:91:6e:c3:56:0a:f1:81:44:8d:c7:0d:
                    16:d5:5b:d3:5d:25:e6:3f:33:16:30:8b:5b:ba:b1:
                    c0:5e:82:ae:60:43:69:c0:a5:78:6d:42:36:a6:b2:
                    e9:ff:f1:53:a0:78:89:6a:51:2c:f4:af:be:44:7b:
                    05:22:92:34:33:90:b9:dc:6f:2f:8d:35:c7:14:4e:
                    dc:6f:72:e7:38:29:bb:0e:cb:0b:b2:ad:67:fa:fc:
                    00:98:59:f1:ed:1b:a8:d9:96:e6:42:01:3e:e6:09:
                    9c:33:35:6c:51:ad:33:34:8c:bf:aa:40:29:41:0e:
                    be:71:fd:d3:a8:a5:9b:73:fd:11:38:75:cb:90:18:
                    d9:68:47:de:72:13:33:dc:21:bf:0e:89:95:12:c1:
                    12:36:13:98:ae:f7:4e:47:07:42:bd:0a:6f:65:4d:
                    c3:3f:dc:4a:17:9b:7b:04:fe:44:83:7d:76:6b:1f:
                    3f:53:f9:00:6c:fc:1e:5c:5c:73:cf:e6:0a:08:2c:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:49:3C:3D:50:31:65:E8:77:6B:A8:4A:6C:8C:BA:B5:49:BE:B9:CF
            X509v3 Authority Key Identifier:
                keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/C80B0244CB2F11EEB240B62AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:2e:a8:51:b7:4f:57:52:a7:63:c4:ab:f7:e9:ac:2e:85:ba:
         be:0e:b6:d4:2d:2b:63:a5:35:cf:6a:f4:f1:c1:77:ed:e5:ac:
         5a:69:e4:39:2d:10:26:34:75:03:e9:e6:89:38:74:de:66:b7:
         f7:b8:d6:10:d4:b1:1d:f7:43:a0:4e:36:ae:e1:40:e7:ce:26:
         ec:9a:0a:41:92:fb:0e:77:cb:d3:ab:7e:81:3f:ed:06:9a:83:
         54:b0:b6:8e:6b:d1:c1:13:11:3e:fa:92:72:d9:f5:42:56:37:
         26:27:85:68:1b:c5:a0:37:ae:1b:c7:27:b6:df:2e:12:c5:5c:
         fe:29:ca:17:50:b4:56:09:94:ed:a6:50:61:56:f6:a1:47:18:
         52:d9:d4:ed:28:74:11:ca:63:c6:96:ef:6d:f4:de:15:27:13:
         38:78:3e:7b:f8:d5:2e:6a:04:99:bc:14:47:c9:6b:d6:08:66:
         fa:dd:df:27:8a:fe:c7:2b:f4:93:99:68:38:5d:b8:99:9c:66:
         5f:b3:3e:55:ab:30:7c:4f:9d:43:a9:29:58:31:43:bb:a4:1c:
         3a:3e:ef:62:73:0b:5d:f5:5d:99:b1:3d:4f:91:8f:0a:cd:cc:
         20:b5:53:58:37:06:0a:a2:ef:48:a9:46:a9:dd:65:1d:c2:88:
         46:c7:5f:14
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC
MjA0MzY3NTMwHhcNMjYwNTAxMDEzMTA0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY0MDI1OC1jNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtzFRXDOdMGVW/tAjtA16cg6zWOrQFSuCUJpuxcumi57R++bqnYj3QOYO/bg7
0VcKrByTZqz7nFI5a+pyC7vokW7DVgrxgUSNxw0W1VvTXSXmPzMWMItburHAXoKu
YENpwKV4bUI2prLp//FToHiJalEs9K++RHsFIpI0M5C53G8vjTXHFE7cb3LnOCm7
DssLsq1n+vwAmFnx7Ruo2ZbmQgE+5gmcMzVsUa0zNIy/qkApQQ6+cf3TqKWbc/0R
OHXLkBjZaEfechMz3CG/DomVEsESNhOYrvdORwdCvQpvZU3DP9xKF5t7BP5Eg312
ax8/U/kAbPweXFxzz+YKCCxEWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEFJPD1Q
MWXod2uoSmyMurVJvrnPMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3
RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njc3NDIvOTRFNTA4MDBCN0Q3MTFFQzlBODM3NDYyQzRGOUFFMDIvQzgwQjAyNDRD
QjJGMTFFRUIyNDBCNjJBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7kZMA0GCSqGSIb3DQEBCwUAA4IBAQBXLqhRt09XUqdjxKv36awu
hbq+DrbULStjpTXPavTxwXft5axaaeQ5LRAmNHUD6eaJOHTeZrf3uNYQ1LEd90Og
Tjau4UDnzibsmgpBkvsOd8vTq36BP+0GmoNUsLaOa9HBExE++pJy2fVCVjcmJ4Vo
G8WgN64bxye23y4SxVz+KcoXULRWCZTtplBhVvahRxhS2dTtKHQRymPGlu9t9N4V
JxM4eD57+NUuagSZvBRHyWvWCGb63d8niv7HK/STmWg4XbiZnGZfsz5VqzB8T51D
qSlYMUO7pBw6Pu9icwtd9V2ZsT1PkY8KzcwgtVNYNwYKou9IqUap3WUdwohGx18U
-----END CERTIFICATE-----
Generated at Wed May 13 06:13:16 2026 by rpki-client