Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa
File:                     9F2E362C9B6E11ECA489542DC4F9AE02.roa (raw, json)
Hash identifier:          WIpmvZboL8zGeqdfKYkKJllfP49N0pu45nwr7tiKflE=
Subject key identifier:   60:36:90:58:CA:BF:64:23:26:AC:33:19:91:A8:6B:3A:DC:75:66:A8
Certificate issuer:       /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Certificate serial:       0430
Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:01:46 +0000
ROA not before:           Thu 27 Mar 2025 01:07:15 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     149518
IP address blocks:        103.182.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl
                          rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1072 (0x430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
        Validity
            Not Before: Mar 27 01:07:15 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40e8a-a11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:d0:07:59:1b:8d:26:dc:c7:f1:e3:ec:97:
                    19:98:a6:49:81:64:fe:be:5f:7e:e7:5f:f4:78:03:
                    62:dd:b4:f8:bd:b1:11:72:54:ba:66:d7:89:6f:cb:
                    79:ec:11:00:27:c3:17:e2:ff:f1:b3:ff:16:db:59:
                    bd:23:c4:22:dd:39:50:62:d5:30:d1:49:81:a6:3a:
                    fe:ae:c7:2e:df:44:e1:10:b1:5d:9e:7e:b3:a8:14:
                    1d:c5:f4:a6:b6:44:ff:6d:08:ae:de:68:d6:11:9b:
                    b0:b1:77:27:bc:80:9e:cf:70:93:0b:57:1c:46:a2:
                    81:9b:c6:bd:63:c5:15:ce:4b:b2:6b:e5:4a:48:68:
                    df:97:08:79:74:2f:63:a9:09:b2:f3:7e:69:b8:bf:
                    15:46:64:c4:20:a9:20:07:ad:0f:ec:82:a3:bb:50:
                    31:1c:39:6c:47:8d:6f:8c:2e:0d:fb:0e:8a:f1:84:
                    c9:87:c3:58:21:05:5d:06:39:08:6b:79:78:8b:7e:
                    cc:d6:ba:a6:91:0c:bd:67:74:16:77:bb:71:ef:7c:
                    fe:ee:46:c1:74:bb:eb:9f:55:cf:48:55:4b:1f:8d:
                    7c:64:44:3a:58:3a:64:f2:0b:74:b6:ca:e5:e8:f4:
                    85:95:44:21:bc:4f:ba:0c:06:ec:ca:50:27:12:39:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:36:90:58:CA:BF:64:23:26:AC:33:19:91:A8:6B:3A:DC:75:66:A8
            X509v3 Authority Key Identifier:
                keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e1:42:c9:98:a9:69:4f:a3:1f:e0:99:de:fe:4f:63:b3:a1:
         51:bc:c1:83:b5:2b:89:f0:ec:67:c7:f0:ef:86:22:7f:85:3c:
         f7:4b:62:fa:23:31:79:66:7a:f5:c8:0f:14:63:d9:74:50:0f:
         35:9d:d8:eb:f2:86:26:ef:9f:99:6d:c2:a4:e9:13:65:ae:aa:
         31:79:a9:1e:63:8a:fa:cd:dd:19:8e:de:e5:86:6d:cb:17:3a:
         75:90:13:5b:87:cb:0f:44:48:87:40:e3:88:ee:66:21:cc:25:
         6f:b9:8a:78:5e:02:54:58:f0:cd:6d:03:22:9e:a1:5d:fa:07:
         66:3b:8e:4d:eb:08:01:65:5c:2a:ed:28:f9:fb:59:89:db:35:
         d0:6f:50:31:e4:6a:77:14:fe:bc:8d:7e:b1:fd:00:7b:4f:db:
         33:1c:7a:c7:32:24:ea:d5:6e:50:d7:c4:15:85:1b:a5:18:61:
         19:46:a4:2e:90:5b:bd:13:37:a7:a7:c5:de:f9:7f:ad:d0:99:
         fb:3f:4e:fe:02:ab:7c:2b:33:81:14:c6:ff:b4:58:13:7b:57:
         e3:00:f7:0b:aa:e0:6c:c3:0b:fa:c9:6a:a9:b4:c8:46:95:ed:
         17:71:9e:01:49:b8:b3:d8:16:a4:87:76:71:06:4a:31:f1:7d:
         16:7d:7b:b9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJDQjUxMTAvBgNVBAUTKDY5RTFDRUNCODgxREE2Qzk2OEJBQUUwNzMyMzdDMjY2
MDk1QTQ1Q0QwHhcNMjUwMzI3MDEwNzE1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGU4YS1hMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsHQB1kbjSbcx/Hj7JcZmKZJgWT+vl9+51/0eANi3bT4vbERclS6ZteJb8t5
7BEAJ8MX4v/xs/8W21m9I8Qi3TlQYtUw0UmBpjr+rscu30ThELFdnn6zqBQdxfSm
tkT/bQiu3mjWEZuwsXcnvICez3CTC1ccRqKBm8a9Y8UVzkuya+VKSGjflwh5dC9j
qQmy835puL8VRmTEIKkgB60P7IKju1AxHDlsR41vjC4N+w6K8YTJh8NYIQVdBjkI
a3l4i37M1rqmkQy9Z3QWd7tx73z+7kbBdLvrn1XPSFVLH418ZEQ6WDpk8gt0tsrl
6PSFlUQhvE+6DAbsylAnEjlvgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGA2kFjK
v2QjJqwzGZGoazrcdWaoMB8GA1UdIwQYMBaAFGnhzsuIHabJaLquBzI3wmYJWkXN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNCNS8zOUQ3NjcyMDlC
NkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBzbG91cTRITWpmQ1pnbGFS
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FlSE95NGdkcHNsb3VxNEhNamZDWmdsYVJjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzJDQjUvMzlENzY3MjA5QjZBMTFFQ0E2ODIzNTIyQzRGOUFFMDIvOUYyRTM2MkM5
QjZFMTFFQ0E0ODk1NDJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7ZJMA0GCSqGSIb3DQEBCwUAA4IBAQBT4ULJmKlpT6Mf4Jne/k9j
s6FRvMGDtSuJ8Oxnx/DvhiJ/hTz3S2L6IzF5Znr1yA8UY9l0UA81ndjr8oYm75+Z
bcKk6RNlrqoxeakeY4r6zd0Zjt7lhm3LFzp1kBNbh8sPREiHQOOI7mYhzCVvuYp4
XgJUWPDNbQMinqFd+gdmO45N6wgBZVwq7Sj5+1mJ2zXQb1Ax5Gp3FP68jX6x/QB7
T9szHHrHMiTq1W5Q18QVhRulGGEZRqQukFu9Ezenp8Xe+X+t0Jn7P07+Aqt8KzOB
FMb/tFgTe1fjAPcLquBswwv6yWqptMhGle0XcZ4BSbiz2Bakh3ZxBkox8X0WfXu5
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:39:06 2026 by rpki-client