Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/0EE57B38378F11EF88F9BF5AC4F9AE02.roa
File:                     0EE57B38378F11EF88F9BF5AC4F9AE02.roa (raw, json)
Hash identifier:          WHnvu+Pkyj9CrMAjMQLr+EPjFUT9HZOr2H0sC02K+Yc=
Subject key identifier:   83:FF:BF:E2:8E:DE:2D:F0:4B:17:2E:63:5C:2B:6A:12:A5:86:98:A0
Certificate issuer:       /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Certificate serial:       0144
Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/0EE57B38378F11EF88F9BF5AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:25:00 +0000
ROA not before:           Fri 03 Oct 2025 06:02:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     133098
IP address blocks:        103.248.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
        Validity
            Not Before: Oct  3 06:02:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a43e2c-238d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:ab:28:ad:05:45:ec:c2:4b:e7:88:f6:d8:
                    50:25:0f:c4:86:b4:e2:d4:4f:5e:7b:f1:96:4c:10:
                    24:e1:2a:87:07:41:54:ef:ce:ca:ea:a4:be:4e:44:
                    76:ac:43:b6:80:24:1f:57:55:3b:85:f2:94:7a:5a:
                    dc:79:e2:f3:e2:e6:9e:46:82:2f:ad:ba:15:57:28:
                    f9:8e:4a:c8:cf:0e:4d:0b:54:f7:80:f5:ca:8d:55:
                    3d:40:40:93:5c:eb:fe:1d:92:ed:10:64:02:34:8d:
                    05:25:df:7c:6b:f3:55:fb:db:2e:ad:f0:cb:af:e0:
                    5e:89:f3:96:84:80:6d:10:58:bb:0a:3d:67:57:a1:
                    77:f8:f7:b0:9f:62:16:a9:cd:e2:e9:d3:53:6d:c5:
                    b3:68:a2:ed:ce:96:91:b9:a7:ad:d0:3c:9c:1c:d7:
                    66:6f:c4:03:ba:43:e5:be:84:6e:a4:d6:f2:25:af:
                    45:4b:5a:06:7b:38:c8:df:0e:56:af:dc:3b:37:b4:
                    26:ae:39:3e:f8:8c:ca:8b:d6:99:b5:1b:73:6d:8b:
                    04:99:68:5e:86:f4:d1:58:3f:f8:f5:2a:6d:c2:cb:
                    e9:fc:1a:72:17:c7:d1:b7:5e:dc:a2:23:a2:6f:be:
                    a0:f1:ac:e5:b9:ad:9a:23:47:75:3c:33:16:ba:6b:
                    81:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FF:BF:E2:8E:DE:2D:F0:4B:17:2E:63:5C:2B:6A:12:A5:86:98:A0
            X509v3 Authority Key Identifier:
                keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/0EE57B38378F11EF88F9BF5AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:5f:1c:02:cc:84:cc:6d:75:c4:51:62:c5:ab:ae:3d:ec:4a:
         f9:fe:d9:9b:fd:18:be:7c:74:1a:f2:25:53:79:cb:a1:62:9d:
         86:86:59:b3:f0:8e:f7:52:97:68:bc:d8:e0:32:2f:88:df:65:
         b5:53:b4:44:28:65:38:c3:39:21:84:7d:b0:e5:50:99:4a:a4:
         42:de:3e:fe:1c:c9:53:ee:eb:51:6e:fc:07:2d:47:cc:23:dc:
         96:d8:dc:78:04:84:27:97:ad:d6:bd:f8:8e:a3:01:73:dc:4f:
         aa:95:0b:39:7f:33:4b:00:30:33:33:ec:c7:32:ee:fa:e9:6a:
         33:42:b9:d0:a6:19:79:7b:a0:bf:ca:9f:e5:8d:ca:c5:97:39:
         b2:b1:d5:ed:52:3f:39:93:7a:18:d7:4e:a3:10:7d:ed:79:62:
         ed:84:eb:90:a4:15:f2:70:f5:90:35:fa:a8:70:c2:ae:1b:4e:
         32:82:43:43:16:56:b7:07:f9:54:8c:7f:81:e1:0e:98:7b:84:
         3b:c3:8e:2c:be:05:ba:5d:75:a3:eb:79:52:7a:48:02:72:ff:
         63:7c:02:44:ec:4e:a9:00:0c:10:17:5c:77:08:35:a6:d2:97:
         b2:b7:95:93:66:06:03:56:67:49:61:6d:ce:cb:34:5b:7e:bb:
         9e:6a:cb:04
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYzMDIxMTAvBgNVBAUTKDIxQkU4QzhGRTk1M0Y2RUM5N0I3RjEyMTYxN0VEOTEw
NDdEQUE1QTQwHhcNMjUxMDAzMDYwMjIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2UyYy0yMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0D6rKK0FRezCS+eI9thQJQ/EhrTi1E9ee/GWTBAk4SqHB0FU787K6qS+TkR2
rEO2gCQfV1U7hfKUelrceeLz4uaeRoIvrboVVyj5jkrIzw5NC1T3gPXKjVU9QECT
XOv+HZLtEGQCNI0FJd98a/NV+9surfDLr+BeifOWhIBtEFi7Cj1nV6F3+Pewn2IW
qc3i6dNTbcWzaKLtzpaRuaet0DycHNdmb8QDukPlvoRupNbyJa9FS1oGezjI3w5W
r9w7N7Qmrjk++IzKi9aZtRtzbYsEmWhehvTRWD/49Sptwsvp/BpyF8fRt17coiOi
b76g8azlua2aI0d1PDMWumuBMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIP/v+KO
3i3wSxcuY1wrahKlhpigMB8GA1UdIwQYMBaAFCG+jI/pU/bsl7fxIWF+2RBH2qWk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi9BMzJGREZERTM3
NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1eVh0X0VoWVg3WkVFZmFw
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzYzMDIvQTMyRkRGREUzNzQ2MTFFRjk2NjUzMzI2QzRGOUFFMDIvMEVFNTdCMzgz
NzhGMTFFRjg4RjlCRjVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ/iPMA0GCSqGSIb3DQEBCwUAA4IBAQCjXxwCzITMbXXEUWLFq649
7Er5/tmb/Ri+fHQa8iVTecuhYp2Ghlmz8I73UpdovNjgMi+I32W1U7REKGU4wzkh
hH2w5VCZSqRC3j7+HMlT7utRbvwHLUfMI9yW2Nx4BIQnl63WvfiOowFz3E+qlQs5
fzNLADAzM+zHMu766WozQrnQphl5e6C/yp/ljcrFlzmysdXtUj85k3oY106jEH3t
eWLthOuQpBXycPWQNfqocMKuG04ygkNDFla3B/lUjH+B4Q6Ye4Q7w44svgW6XXWj
63lSekgCcv9jfAJE7E6pAAwQF1x3CDWm0peyt5WTZgYDVmdJYW3OyzRbfrueassE
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:17 2026 by rpki-client