Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/3EED102CC53011F0ADCB012EC4F9AE02.roa
File:                     3EED102CC53011F0ADCB012EC4F9AE02.roa (raw, json)
Hash identifier:          xhv9klMH7WY9g3J7ol55oSW0zPIjpCPV6bNDdN9bbrM=
Subject key identifier:   71:19:51:B2:B1:9C:D3:20:3C:65:49:03:DD:17:10:8D:3C:1A:81:15
Certificate issuer:       /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Certificate serial:       0D35
Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/3EED102CC53011F0ADCB012EC4F9AE02.roa
Signing time:             Tue 30 Jun 2026 19:22:24 +0000
ROA not before:           Tue 30 Jun 2026 19:22:24 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     138640
IP address blocks:        103.114.96.0/24 maxlen: 24
                          103.114.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
                          rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3381 (0xd35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
        Validity
            Not Before: Jun 30 19:22:24 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a441770-01ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:20:48:1d:ab:c1:23:72:2b:6c:af:d8:4c:
                    b2:0b:e2:96:42:b0:ce:08:25:1a:4e:fc:b9:35:2c:
                    5c:f5:a8:da:2d:66:d9:8f:6f:2c:9d:b3:f3:d7:8f:
                    ab:89:a0:ad:c2:03:f6:3d:b4:ce:51:f1:10:b0:32:
                    1a:e5:b7:11:4a:12:75:2e:f3:87:28:81:7b:b2:46:
                    8d:06:83:2f:42:fc:79:d6:2f:e4:13:67:eb:5a:84:
                    7a:5d:37:09:71:23:e5:00:75:79:8a:5a:19:93:83:
                    43:1e:44:e0:f7:73:f7:5a:d6:53:88:1b:d9:7c:05:
                    a0:5b:c2:6c:e7:0a:c7:c5:e9:5e:6e:ee:c0:f4:dd:
                    76:b8:5a:2b:fe:1d:44:02:40:32:5d:49:d3:a3:23:
                    d9:f6:68:ef:f6:14:e1:66:32:d6:59:4b:7f:81:88:
                    00:6b:b3:0d:e7:44:6e:70:a8:24:c7:19:e8:9c:17:
                    aa:fc:fa:e2:3d:44:5a:1c:59:f0:ba:bc:f9:52:a9:
                    48:15:10:73:0c:ce:1f:d8:b3:15:ae:0a:32:95:4f:
                    ad:5d:d3:86:0b:ef:50:08:8a:50:12:c6:e9:d6:93:
                    52:f5:bc:de:d7:2d:05:bf:47:43:5c:fb:71:2a:bd:
                    87:25:ac:7d:6e:c0:e5:3e:eb:e1:f5:1c:d7:ea:5a:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:19:51:B2:B1:9C:D3:20:3C:65:49:03:DD:17:10:8D:3C:1A:81:15
            X509v3 Authority Key Identifier:
                keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/3EED102CC53011F0ADCB012EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:a6:71:54:db:1f:40:37:e5:d5:00:55:d0:aa:bc:17:8c:2f:
         22:e3:80:c2:17:fc:c7:77:73:f0:b2:6e:28:68:0b:b4:70:72:
         60:3b:41:3a:33:ca:63:78:65:a5:16:18:b9:d8:7e:86:2f:73:
         d3:f4:33:bc:ec:53:dc:d3:a6:36:1c:92:1c:03:41:af:79:3e:
         1b:60:c2:0a:b0:e3:8b:aa:df:ed:26:17:13:c8:6f:ae:9e:0e:
         5e:48:62:06:33:34:21:9f:06:1d:a3:6e:92:d6:11:8c:22:56:
         06:a9:fb:3e:05:d2:6a:42:00:fd:85:7a:fa:47:47:0d:da:f5:
         42:8a:8b:6e:ec:72:96:6a:85:e1:3a:d1:e4:dc:3a:04:f3:57:
         6b:6b:2c:26:7e:af:6a:30:65:f2:ef:0e:60:ce:75:9e:37:d3:
         47:44:3c:33:c9:cf:5e:b9:37:20:05:3d:7f:b5:3f:b5:b7:7e:
         91:55:e9:2a:4e:df:a4:bd:e5:7c:27:8f:a5:fd:c1:38:14:53:
         93:66:33:4c:0d:5e:67:97:81:da:6d:08:b3:71:8e:b1:c1:73:
         a3:d8:e5:26:52:88:9e:54:93:d9:c4:60:95:f4:bc:3c:ab:7a:
         f0:28:38:62:cc:22:ac:b9:2a:a7:db:5f:7d:86:a2:a2:48:e6:
         7e:19:c2:ae
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0
Qjc4RjE5QzIwHhcNMjYwNjMwMTkyMjI0WhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0MTc3MC0wMWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyeYgSB2rwSNyK2yv2EyyC+KWQrDOCCUaTvy5NSxc9ajaLWbZj28snbPz14+r
iaCtwgP2PbTOUfEQsDIa5bcRShJ1LvOHKIF7skaNBoMvQvx51i/kE2frWoR6XTcJ
cSPlAHV5iloZk4NDHkTg93P3WtZTiBvZfAWgW8Js5wrHxelebu7A9N12uFor/h1E
AkAyXUnToyPZ9mjv9hThZjLWWUt/gYgAa7MN50RucKgkxxnonBeq/PriPURaHFnw
urz5UqlIFRBzDM4f2LMVrgoylU+tXdOGC+9QCIpQEsbp1pNS9bze1y0Fv0dDXPtx
Kr2HJax9bsDlPuvh9RzX6lrYvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHEZUbKx
nNMgPGVJA90XEI08GoEVMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB
RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0JCRjEvMjQ1REM1Q0EwQUY3MTFFQUE4NUE1RDFBQzRGOUFFMDIvM0VFRDEwMkND
NTMwMTFGMEFEQ0IwMTJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ3JgMA0GCSqGSIb3DQEBCwUAA4IBAQACpnFU2x9AN+XVAFXQqrwX
jC8i44DCF/zHd3Pwsm4oaAu0cHJgO0E6M8pjeGWlFhi52H6GL3PT9DO87FPc06Y2
HJIcA0GveT4bYMIKsOOLqt/tJhcTyG+ung5eSGIGMzQhnwYdo26S1hGMIlYGqfs+
BdJqQgD9hXr6R0cN2vVCiotu7HKWaoXhOtHk3DoE81draywmfq9qMGXy7w5gznWe
N9NHRDwzyc9euTcgBT1/tT+1t36RVekqTt+kveV8J4+l/cE4FFOTZjNMDV5nl4Ha
bQizcY6xwXOj2OUmUoieVJPZxGCV9Lw8q3rwKDhizCKsuSqn2199hqKiSOZ+GcKu
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:04 2026 by rpki-client