Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
File:                     BFC00D26D18011EEB673FD69C4F9AE02.roa (raw, json)
Hash identifier:          Ypo7gydrzszuF/9Pk7vyF/drA7thcMDp31Xr42wLQrI=
Subject key identifier:   E3:04:05:09:0D:9F:DB:46:52:5B:52:28:02:A6:1F:A0:A4:84:0F:87
Certificate issuer:       /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial:       073A
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
Signing time:             Thu 18 Jun 2026 22:26:42 +0000
ROA not before:           Thu 18 Jun 2026 22:26:42 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141743
IP address blocks:        103.163.94.0/24 maxlen: 24
                          103.167.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
                          rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850 (0x73a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184279, serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
        Validity
            Not Before: Jun 18 22:26:42 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a3470a2-3d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:b1:07:9a:6b:98:b7:3d:d0:34:8a:a9:48:
                    0a:93:5a:0d:6c:0c:d2:20:bb:b3:17:a6:95:61:32:
                    3e:a3:12:15:97:54:69:a6:d8:5a:63:37:db:8e:c4:
                    b5:c0:f0:f2:dc:f5:b7:d6:d0:7b:ee:0c:2e:07:34:
                    45:1e:7b:1b:78:da:96:bb:b2:d1:51:e5:2a:fb:87:
                    69:5b:1a:23:57:d4:7a:86:5e:6a:0e:34:2a:02:b4:
                    6d:8f:70:35:ec:e8:4c:91:93:bd:56:9a:05:a0:92:
                    21:78:b2:5a:75:bf:5d:d0:41:e6:c6:14:f7:e0:13:
                    d5:50:57:9c:d1:b8:01:d2:97:be:7b:86:dd:99:f7:
                    af:70:3d:55:45:b7:f9:4a:78:b1:98:48:49:6a:4b:
                    cc:a3:84:b9:42:6a:ee:67:07:75:5d:a3:31:7b:f6:
                    3d:42:fd:82:06:e9:48:97:5a:62:23:79:1a:ba:e3:
                    c5:0c:f7:65:15:c3:9c:63:ec:02:61:7c:87:38:55:
                    18:ac:a7:1f:0e:ef:39:ac:b0:67:6e:cd:c5:6e:45:
                    1e:32:93:9c:ec:d9:b1:02:09:b1:d5:c3:01:2e:95:
                    b2:60:f1:79:42:8d:42:b5:fe:64:96:79:0d:da:03:
                    18:f2:60:e6:5f:b3:91:be:d9:61:a7:70:57:4d:68:
                    e4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:04:05:09:0D:9F:DB:46:52:5B:52:28:02:A6:1F:A0:A4:84:0F:87
            X509v3 Authority Key Identifier:
                keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.94.0/24
                  103.167.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:cd:d3:a4:f6:88:01:cf:28:1b:d7:3a:c4:cb:76:4d:44:32:
         05:2e:1e:b9:f3:05:6b:a0:44:5e:15:a4:f9:cb:2f:3b:c3:81:
         b9:4b:bd:7c:5a:14:64:c9:f1:f9:76:33:d3:a2:6e:0c:70:10:
         ff:b3:1e:8f:db:4d:86:60:42:2f:d8:99:32:50:ef:a2:61:0f:
         e2:6f:04:d8:7b:75:ea:2c:cd:24:ba:98:05:ee:e5:c8:c5:02:
         4b:fd:ca:39:fb:8b:ab:34:67:76:35:d7:da:31:aa:37:8b:21:
         11:66:c4:90:09:95:12:8c:67:e0:9b:43:a3:5d:da:b7:64:a1:
         e6:73:a6:55:a5:67:6d:4f:c7:35:07:01:8b:69:c1:1b:4f:9d:
         ad:ae:b3:9f:09:a1:cd:4a:f9:5b:6c:6c:1a:da:7a:dc:aa:f3:
         71:06:6a:65:0f:b7:87:fc:0b:fa:89:b0:98:70:88:26:13:d6:
         a1:80:3a:4a:c5:27:da:63:ce:01:eb:e0:63:1a:89:76:37:79:
         00:97:9c:da:9c:0a:f8:e1:91:67:37:2e:ca:81:73:5a:60:86:
         34:85:86:98:92:2e:44:46:0a:83:39:b1:a0:02:27:d5:8f:83:
         01:bf:65:4a:ef:5d:d8:bf:df:28:cb:7b:3e:f0:d8:4d:86:c1:
         a1:47:c9:1c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQyNzkxMTAvBgNVBAUTKDA2RDI4QzQzRUFFNDNGMUY1REE1NkM2QTIxRTZDQUJC
RkNCODhEQkUwHhcNMjYwNjE4MjIyNjQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM0NzBhMi0zZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArMmxB5prmLc90DSKqUgKk1oNbAzSILuzF6aVYTI+oxIVl1RppthaYzfbjsS1
wPDy3PW31tB77gwuBzRFHnsbeNqWu7LRUeUq+4dpWxojV9R6hl5qDjQqArRtj3A1
7OhMkZO9VpoFoJIheLJadb9d0EHmxhT34BPVUFec0bgB0pe+e4bdmfevcD1VRbf5
SnixmEhJakvMo4S5QmruZwd1XaMxe/Y9Qv2CBulIl1piI3kauuPFDPdlFcOcY+wC
YXyHOFUYrKcfDu85rLBnbs3FbkUeMpOc7NmxAgmx1cMBLpWyYPF5Qo1Ctf5klnkN
2gMY8mDmX7ORvtlhp3BXTWjktwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOMEBQkN
n9tGUltSKAKmH6CkhA+HMB8GA1UdIwQYMBaAFAbSjEPq5D8fXaVsaiHmyrv8uI2+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI3OS8wRTM2MUJCNjlD
MTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4OWRwV3hxSWViS3VfeTRq
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0S01RLXJrUHg5ZHBXeHFJZWJLdV95NGpiNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQyNzkvMEUzNjFCQjY5QzE1MTFFQjk5N0FCRDU5QzRGOUFFMDIvQkZDMDBEMjZE
MTgwMTFFRUI2NzNGRDY5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ6NeAwQAZ6cKMA0GCSqGSIb3DQEBCwUAA4IBAQAHzdOk9ogBzygb
1zrEy3ZNRDIFLh658wVroEReFaT5yy87w4G5S718WhRkyfH5djPTom4McBD/sx6P
202GYEIv2JkyUO+iYQ/ibwTYe3XqLM0kupgF7uXIxQJL/co5+4urNGd2NdfaMao3
iyERZsSQCZUSjGfgm0OjXdq3ZKHmc6ZVpWdtT8c1BwGLacEbT52trrOfCaHNSvlb
bGwa2nrcqvNxBmplD7eH/Av6ibCYcIgmE9ahgDpKxSfaY84B6+BjGol2N3kAl5za
nAr44ZFnNy7KgXNaYIY0hYaYki5ERgqDObGgAifVj4MBv2VK713Yv98oy3s+8NhN
hsGhR8kc
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:22:55 2026 by rpki-client