Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa
File:                     983A5536450611F093EC3A65C4F9AE02.roa (raw, json)
Hash identifier:          rlIDc3lNpEtnI3hRK54wCg94Be4WAJirdysXicNPq4g=
Subject key identifier:   B5:FC:FD:08:FA:4F:5D:08:E5:C7:ED:AD:3A:C7:5D:96:98:E1:36:67
Certificate issuer:       /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial:       1517
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa
Signing time:             Thu 02 Jul 2026 17:17:58 +0000
ROA not before:           Thu 02 Jul 2026 17:17:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     401701
IP address blocks:        103.106.188.0/22 maxlen: 24
                          103.116.244.0/22 maxlen: 24
                          116.204.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
                          rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5399 (0x1517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
        Validity
            Not Before: Jul  2 17:17:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a469d46-059c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:71:db:e4:e8:03:ab:c1:4e:f5:19:b1:2d:71:
                    b9:f0:73:65:8d:df:69:40:24:91:42:cb:02:f0:4f:
                    24:ce:f6:c8:47:0d:69:25:82:8c:99:65:05:90:49:
                    50:c5:dd:3b:4e:87:9b:5c:dd:08:c4:95:50:c5:c8:
                    82:5b:a9:13:e8:d3:f3:76:6e:86:29:ff:8b:2c:bd:
                    03:82:ce:ca:d6:52:f0:44:2f:13:aa:2f:be:5a:82:
                    6d:b4:13:f1:30:d4:99:31:0b:4c:fb:6a:c6:01:75:
                    4d:eb:7f:11:c6:c1:04:3d:ac:4c:12:07:88:f6:aa:
                    58:74:74:1f:5b:ed:50:70:a0:62:ab:4f:f8:60:2f:
                    27:9c:3b:9b:9c:f6:31:d2:6c:89:bf:3f:3d:db:95:
                    bc:72:f5:56:0a:d7:63:18:4f:14:58:7a:7d:8a:a7:
                    bf:dc:f9:2b:11:10:dc:cc:7c:84:9e:42:e3:76:0b:
                    d1:20:90:55:e3:c7:1e:24:33:21:8e:02:15:bf:2b:
                    ee:1b:d0:95:59:3a:27:4f:7e:33:15:04:08:d4:f9:
                    b4:eb:16:de:b4:89:fd:ba:94:e8:8a:b4:48:5c:d5:
                    74:7a:89:27:9b:c1:72:97:f6:0e:5f:4a:58:2d:06:
                    d2:59:54:68:2b:4d:78:2d:dc:e6:95:01:35:ef:ed:
                    d1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FC:FD:08:FA:4F:5D:08:E5:C7:ED:AD:3A:C7:5D:96:98:E1:36:67
            X509v3 Authority Key Identifier:
                keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.188.0/22
                  103.116.244.0/22
                  116.204.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:bd:de:cf:9b:39:7c:76:57:7b:45:67:17:97:cb:5c:fa:
         e0:a0:78:2e:23:37:d1:01:bc:8f:6d:7c:d2:74:8d:c8:ce:70:
         62:b8:8a:d9:8d:8c:30:36:18:d7:4b:62:54:f2:97:28:cb:57:
         6e:36:db:1a:e6:c1:b9:2d:ce:67:35:29:b0:d6:1f:a3:66:71:
         48:3b:a7:8b:04:10:f3:95:41:b6:a3:15:2e:a6:8d:a9:e0:c6:
         30:95:90:ce:16:15:bb:3d:d4:93:c5:64:a4:1c:36:09:d3:da:
         84:b5:c8:4d:96:12:77:30:09:5c:19:91:95:c6:b8:af:75:6a:
         5d:69:21:8d:fd:97:ad:55:8a:bf:82:83:6f:ce:78:15:98:a3:
         aa:6b:cb:07:e2:20:d4:c6:76:83:45:78:27:cb:9e:af:82:75:
         7e:79:d3:f6:cf:45:31:eb:67:ee:ba:19:17:60:fe:0a:0a:a7:
         71:71:c9:3f:c5:c3:1a:a0:c8:c8:26:46:0f:3b:1f:fb:b4:22:
         06:cb:0d:79:63:cf:e9:81:9d:6e:76:ec:15:ee:7e:cc:12:55:
         ae:20:b5:63:39:43:d3:5b:54:8c:fd:3c:bf:24:a3:99:6a:9b:
         67:e8:40:a7:8a:47:e7:24:86:ee:99:de:f9:71:95:c8:44:20:
         4f:eb:bf:20
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICFRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC
RDY0MDBFMDkwHhcNMjYwNzAyMTcxNzU4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ2OWQ0Ni0wNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiHHb5OgDq8FO9RmxLXG58HNljd9pQCSRQssC8E8kzvbIRw1pJYKMmWUFkElQ
xd07ToebXN0IxJVQxciCW6kT6NPzdm6GKf+LLL0Dgs7K1lLwRC8Tqi++WoJttBPx
MNSZMQtM+2rGAXVN638RxsEEPaxMEgeI9qpYdHQfW+1QcKBiq0/4YC8nnDubnPYx
0myJvz8925W8cvVWCtdjGE8UWHp9iqe/3PkrERDczHyEnkLjdgvRIJBV48ceJDMh
jgIVvyvuG9CVWTonT34zFQQI1Pm06xbetIn9upToirRIXNV0eoknm8Fyl/YOX0pY
LQbSWVRoK014LdzmlQE17+3RnQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLX8/Qj6
T10I5cftrTrHXZaY4TZnMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw
MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvOTgzQTU1MzY0
NTA2MTFGMDkzRUMzQTY1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQCZ2q8AwQCZ3T0AwQCdMyEMA0GCSqGSIb3DQEBCwUAA4IBAQB/pr3e
z5s5fHZXe0VnF5fLXPrgoHguIzfRAbyPbXzSdI3IznBiuIrZjYwwNhjXS2JU8pco
y1duNtsa5sG5Lc5nNSmw1h+jZnFIO6eLBBDzlUG2oxUupo2p4MYwlZDOFhW7PdST
xWSkHDYJ09qEtchNlhJ3MAlcGZGVxrivdWpdaSGN/ZetVYq/goNvzngVmKOqa8sH
4iDUxnaDRXgny56vgnV+edP2z0Ux62fuuhkXYP4KCqdxcck/xcMaoMjIJkYPOx/7
tCIGyw15Y8/pgZ1uduwV7n7MElWuILVjOUPTW1SM/Ty/JKOZaptn6ECnikfnJIbu
md75cZXIRCBP678g
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:04 2026 by rpki-client