Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/A6C94076624711EC9B815772C4F9AE02.roa
File:                     A6C94076624711EC9B815772C4F9AE02.roa (raw, json)
Hash identifier:          V13ycXWWqywILndXonJ3QjvrQDnIDg003VYRA9hMyI8=
Subject key identifier:   F2:03:0F:80:65:58:61:B2:5A:B6:97:12:3F:00:54:30:1F:D4:44:54
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       06BE
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/A6C94076624711EC9B815772C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:57:22 +0000
ROA not before:           Fri 16 May 2025 23:33:11 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     10075
IP address blocks:        103.136.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1726 (0x6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: May 16 23:33:11 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a453d1-7ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:b0:47:85:cc:89:00:8f:4b:4a:3a:fa:99:
                    54:90:ad:4e:b7:a1:af:a3:5a:2a:e3:c8:13:74:c3:
                    25:50:28:5f:df:4e:36:2f:74:eb:81:61:c3:9a:c7:
                    fa:b0:36:db:fa:8f:41:65:34:32:91:3b:61:51:b8:
                    3e:ea:0c:b9:3e:33:5d:72:72:9e:db:c5:4c:79:bc:
                    cf:bb:ae:29:84:e3:b7:0f:c5:74:99:ae:d4:8b:6e:
                    ff:6e:2c:2e:92:d3:74:cc:a7:ac:ef:6b:c3:f0:47:
                    83:56:cb:4c:df:4b:ac:9c:ee:d0:28:de:21:99:60:
                    67:2d:c8:48:47:ef:61:0f:c0:3e:99:70:2d:b7:7c:
                    9f:e2:34:bd:cc:74:e3:e8:1f:da:52:4b:d2:54:2d:
                    32:d8:91:9b:53:fc:e1:de:62:0e:57:8e:06:f6:17:
                    5d:47:20:24:c9:8d:30:72:67:58:f4:f4:66:01:d6:
                    92:0e:ee:70:86:2b:fb:15:ff:a4:77:77:1a:e7:11:
                    cd:73:5e:f8:3e:44:d7:53:1f:b4:f6:28:a1:cc:80:
                    4a:e2:06:87:26:51:d5:bf:17:0f:d4:87:fb:d6:6c:
                    d7:0f:dc:8e:ef:24:73:15:87:23:dc:04:bc:dc:04:
                    82:5d:e0:b6:4c:5d:fb:46:cd:8c:ee:f1:ea:09:8c:
                    a0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:03:0F:80:65:58:61:B2:5A:B6:97:12:3F:00:54:30:1F:D4:44:54
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/A6C94076624711EC9B815772C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e4:44:be:57:cb:4f:60:a7:b9:f8:0c:3e:26:45:09:54:7d:
         56:4d:f3:6d:98:fc:e8:e3:79:a3:06:db:39:e5:a6:96:5c:d7:
         5b:15:d6:0e:43:a9:2f:cf:5e:0d:49:c4:47:7c:59:36:2b:07:
         a9:f3:c5:b6:e7:51:da:06:47:12:8c:82:94:ec:83:73:25:aa:
         d7:70:9c:83:8b:70:05:19:73:56:96:c8:bf:31:ca:2c:27:5a:
         68:05:f5:b5:4a:18:9c:4d:e4:3b:7d:46:33:19:ad:da:2a:f3:
         aa:4b:f5:44:5a:03:4d:8e:92:51:7a:8c:82:9e:96:2d:f2:38:
         bc:ea:c5:c2:e0:d9:e4:ce:bb:1d:35:27:34:89:f2:51:fe:3f:
         58:ef:4f:dc:94:a7:a6:64:cd:ff:de:4b:ac:73:53:10:0a:89:
         a4:08:f5:eb:42:25:39:81:ee:14:01:02:1f:e1:00:b9:e0:c1:
         48:32:e4:e9:e3:6a:87:0a:41:5f:d0:d8:f5:a3:13:e4:83:1d:
         b0:db:1e:4e:15:0a:f9:14:ce:4e:1b:b6:25:49:73:56:ca:fe:
         d9:f5:a2:1d:ae:6e:b1:3c:f4:07:9b:3f:c7:72:57:f1:87:22:
         ba:68:79:45:99:60:c0:1e:5e:ab:10:63:37:b3:32:72:f6:00:
         04:70:f6:5c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1
RDk0MDY1MDAwHhcNMjUwNTE2MjMzMzExWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTNkMS03Y2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArKewR4XMiQCPS0o6+plUkK1Ot6Gvo1oq48gTdMMlUChf3042L3TrgWHDmsf6
sDbb+o9BZTQykTthUbg+6gy5PjNdcnKe28VMebzPu64phOO3D8V0ma7Ui27/biwu
ktN0zKes72vD8EeDVstM30usnO7QKN4hmWBnLchIR+9hD8A+mXAtt3yf4jS9zHTj
6B/aUkvSVC0y2JGbU/zh3mIOV44G9hddRyAkyY0wcmdY9PRmAdaSDu5whiv7Ff+k
d3ca5xHNc174PkTXUx+09iihzIBK4gaHJlHVvxcP1If71mzXD9yO7yRzFYcj3AS8
3ASCXeC2TF37Rs2M7vHqCYygQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPIDD4Bl
WGGyWraXEj8AVDAf1ERUMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw
MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzUxNTUvMzc0NEIzQzRCMDI4MTFFQjlEMjc4OTFBQzRGOUFFMDIvQTZDOTQwNzY2
MjQ3MTFFQzlCODE1NzcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4gCMA0GCSqGSIb3DQEBCwUAA4IBAQAp5ES+V8tPYKe5+Aw+JkUJ
VH1WTfNtmPzo43mjBts55aaWXNdbFdYOQ6kvz14NScRHfFk2Kwep88W251HaBkcS
jIKU7INzJarXcJyDi3AFGXNWlsi/McosJ1poBfW1ShicTeQ7fUYzGa3aKvOqS/VE
WgNNjpJReoyCnpYt8ji86sXC4NnkzrsdNSc0ifJR/j9Y70/clKemZM3/3kusc1MQ
ComkCPXrQiU5ge4UAQIf4QC54MFIMuTp42qHCkFf0Nj1oxPkgx2w2x5OFQr5FM5O
G7YlSXNWyv7Z9aIdrm6xPPQHmz/HclfxhyK6aHlFmWDAHl6rEGM3szJy9gAEcPZc
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:50 2026 by rpki-client