Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/86F4D41881C811ECB5F90D48C4F9AE02.roa
File:                     86F4D41881C811ECB5F90D48C4F9AE02.roa (raw, json)
Hash identifier:          Xhn46ZuwU9UkhOrgq4ZB8YmMSE+NMY3kKfcQRSPX9Uk=
Subject key identifier:   05:01:0D:C0:2F:FD:4F:DB:E2:6E:E3:48:C3:75:AC:2F:D8:3F:7E:12
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       06E4
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/86F4D41881C811ECB5F90D48C4F9AE02.roa
Signing time:             Tue 28 Apr 2026 23:29:50 +0000
ROA not before:           Tue 28 Apr 2026 23:29:50 +0000
ROA not after:            Fri 28 Aug 2026 00:00:00 +0000
asID:                     138665
IP address blocks:        103.136.0.0/22 maxlen: 22
                          103.136.0.0/24 maxlen: 24
                          103.136.1.0/24 maxlen: 24
                          2404:8940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764 (0x6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: Apr 28 23:29:50 2026 GMT
            Not After : Aug 28 00:00:00 2026 GMT
        Subject: CN=69f142ee-c34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:3c:c8:94:1e:f2:83:0c:90:81:31:68:91:
                    a0:ea:67:89:e9:48:a9:2f:04:f6:bf:bb:10:1d:68:
                    26:44:c5:c3:2d:3f:7b:d3:35:76:91:b3:cb:9c:47:
                    39:ce:3d:c9:e1:ae:82:c4:b6:d5:a8:d8:c4:41:5b:
                    c4:53:8a:20:51:83:54:e0:c0:da:95:e8:41:c8:38:
                    8c:df:32:ca:6b:44:77:1b:2e:20:a4:e4:d8:c1:6f:
                    97:e0:cd:48:0b:29:42:94:08:51:5d:52:01:3b:04:
                    b4:b7:8b:e5:d4:05:81:8b:77:14:fc:dd:8e:20:7c:
                    96:88:08:6f:c4:b9:89:27:9a:d3:f0:ae:d9:87:48:
                    40:7d:b0:be:d3:76:24:10:a8:1f:00:23:94:7e:02:
                    59:2c:ad:48:63:d9:72:21:79:d1:bb:8f:c7:07:fb:
                    53:d7:00:6b:b7:ab:79:40:e1:13:a5:8e:9b:b7:12:
                    b5:23:ed:b4:49:3c:f3:e1:b3:ab:f4:84:81:fa:83:
                    d7:dc:51:5c:d8:58:1a:f1:d7:da:9b:b8:18:a2:ad:
                    de:59:9c:cc:81:f5:93:bc:0f:f0:d9:b8:4a:ba:40:
                    a8:96:a4:82:23:48:3d:b6:19:96:9d:c2:31:e4:51:
                    e4:39:74:ea:84:5e:33:46:59:0b:db:dd:7c:b2:9d:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:01:0D:C0:2F:FD:4F:DB:E2:6E:E3:48:C3:75:AC:2F:D8:3F:7E:12
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/86F4D41881C811ECB5F90D48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.0.0/22
                IPv6:
                  2404:8940::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:de:be:67:02:56:8f:da:2b:2f:1f:b7:d7:35:a8:fe:a3:1a:
         2c:34:fb:45:88:54:26:28:9f:25:26:5d:be:7b:70:3e:34:1c:
         43:1d:24:43:25:05:ca:23:67:bc:59:d6:97:bd:c7:cb:34:3b:
         7b:70:21:b1:24:c0:e6:3b:cd:f5:87:f5:c2:32:66:8b:4b:49:
         df:0a:57:31:bd:85:80:b3:62:37:4e:dd:6a:28:e3:d7:e0:e5:
         09:15:d3:a2:b2:8d:ed:12:ba:02:20:f9:48:90:08:82:6a:95:
         f9:2d:d7:03:65:29:23:08:95:ad:4a:17:d3:43:a6:7a:d2:d3:
         69:34:27:fa:c1:66:ec:95:29:b0:ac:a9:e3:7c:9a:c2:73:7c:
         83:15:48:0c:2e:cb:35:9f:bd:8a:62:1e:78:1a:9e:36:f1:8c:
         23:2c:4d:b7:a9:85:79:d2:3d:c0:7d:97:fa:9e:32:d3:8d:2c:
         98:96:af:db:a7:76:d3:4f:d6:96:07:b9:b3:82:58:69:77:60:
         48:c7:b1:4f:44:be:23:24:bc:48:3c:ec:49:e5:04:7c:fb:64:
         67:3b:cf:cb:ef:a4:59:35:44:e4:63:d3:bd:e8:ba:3a:0e:cc:
         e6:6b:cb:52:41:9b:80:80:ee:41:5b:76:06:4e:cc:81:f6:70:
         f7:00:27:d8
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1
RDk0MDY1MDAwHhcNMjYwNDI4MjMyOTUwWhcNMjYwODI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYxNDJlZS1jMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvG48yJQe8oMMkIExaJGg6meJ6UipLwT2v7sQHWgmRMXDLT970zV2kbPLnEc5
zj3J4a6CxLbVqNjEQVvEU4ogUYNU4MDalehByDiM3zLKa0R3Gy4gpOTYwW+X4M1I
CylClAhRXVIBOwS0t4vl1AWBi3cU/N2OIHyWiAhvxLmJJ5rT8K7Zh0hAfbC+03Yk
EKgfACOUfgJZLK1IY9lyIXnRu4/HB/tT1wBrt6t5QOETpY6btxK1I+20STzz4bOr
9ISB+oPX3FFc2Fga8dfam7gYoq3eWZzMgfWTvA/w2bhKukColqSCI0g9thmWncIx
5FHkOXTqhF4zRlkL2918sp3UIwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAUBDcAv
/U/b4m7jSMN1rC/YP34SMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw
MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzUxNTUvMzc0NEIzQzRCMDI4MTFFQjlEMjc4OTFBQzRGOUFFMDIvODZGNEQ0MTg4
MUM4MTFFQ0I1RjkwRDQ4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQCZ4gAMA8EAgACMAkDBwAkBIlAAAAwDQYJKoZIhvcNAQELBQADggEB
ADvevmcCVo/aKy8ft9c1qP6jGiw0+0WIVCYonyUmXb57cD40HEMdJEMlBcojZ7xZ
1pe9x8s0O3twIbEkwOY7zfWH9cIyZotLSd8KVzG9hYCzYjdO3Woo49fg5QkV06Ky
je0SugIg+UiQCIJqlfkt1wNlKSMIla1KF9NDpnrS02k0J/rBZuyVKbCsqeN8msJz
fIMVSAwuyzWfvYpiHnganjbxjCMsTbephXnSPcB9l/qeMtONLJiWr9undtNP1pYH
ubOCWGl3YEjHsU9EviMkvEg87EnlBHz7ZGc7z8vvpFk1RORj073oujoOzOZry1JB
m4CA7kFbdgZOzIH2cPcAJ9g=
-----END CERTIFICATE-----
Generated at Wed May 13 03:34:16 2026 by rpki-client