Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/3CF4087AD90611ED890F5D5FC4F9AE02.roa
File:                     3CF4087AD90611ED890F5D5FC4F9AE02.roa (raw, json)
Hash identifier:          4ZmDz0huIaWm/DTwuUb93xnXK/d7kmZ8GktldPFPCz8=
Subject key identifier:   F5:06:82:79:66:1E:5B:DA:41:4F:B2:4E:7F:EC:C8:B9:6B:5D:5D:89
Certificate issuer:       /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Certificate serial:       024E
Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/3CF4087AD90611ED890F5D5FC4F9AE02.roa
Signing time:             Thu 07 May 2026 02:33:59 +0000
ROA not before:           Thu 07 May 2026 02:33:59 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151184
IP address blocks:        103.131.58.0/23 maxlen: 23
                          103.131.58.0/24 maxlen: 24
                          103.131.59.0/24 maxlen: 24
                          2001:df2:4140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
                          rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
        Validity
            Not Before: May  7 02:33:59 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fbfa17-0d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:ef:5b:c7:24:6e:b5:52:f4:4c:04:c0:75:
                    7d:ff:8d:b3:dc:e1:fb:d7:18:8f:e4:18:15:88:b7:
                    f8:75:f6:16:aa:65:67:91:ff:c5:87:84:ed:21:5b:
                    f4:ce:a6:d9:2f:b3:cd:1b:a7:92:2b:8c:72:4c:02:
                    3d:ac:6d:f3:a9:3a:70:c8:8c:7c:2b:3b:69:51:f5:
                    2a:04:35:aa:cd:b0:80:1d:73:46:d5:11:d5:7b:4e:
                    7b:b1:af:e4:d8:9c:f8:90:3f:ef:ae:af:b5:f0:c5:
                    13:ca:a5:50:b4:0a:11:62:39:67:97:65:24:6d:a3:
                    8e:74:c1:ad:e9:bd:89:ad:39:93:98:c3:c0:b1:09:
                    1e:52:75:20:e8:e4:72:55:38:bf:85:6c:94:44:d7:
                    fa:de:d0:79:34:b6:cb:c6:d9:67:a3:e1:ad:eb:6e:
                    0d:b7:ef:4e:fb:f2:2a:0c:0b:d4:7e:2e:12:8e:8d:
                    d0:c4:37:9e:53:51:5d:e2:a7:f9:3b:75:43:e0:8e:
                    21:79:76:f8:93:12:03:db:82:45:33:3e:51:eb:51:
                    a9:88:4a:2e:70:c4:cc:f5:df:10:d9:3f:07:68:f0:
                    e2:0c:99:e1:55:29:a1:35:36:f6:b8:96:97:df:b9:
                    97:e1:94:e2:9e:97:86:e7:b7:ca:a1:cc:77:11:05:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:06:82:79:66:1E:5B:DA:41:4F:B2:4E:7F:EC:C8:B9:6B:5D:5D:89
            X509v3 Authority Key Identifier:
                keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/3CF4087AD90611ED890F5D5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.58.0/23
                IPv6:
                  2001:df2:4140::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:90:27:91:93:08:57:8d:6f:dd:cd:b3:ff:04:04:58:c0:22:
         ca:67:ee:ee:60:e3:26:9c:5a:53:c7:cc:ff:04:a2:e6:54:77:
         a6:ff:b8:19:9b:c7:89:07:77:0c:75:40:4c:38:67:9f:7a:6b:
         fa:4d:0b:a8:8c:c7:7d:2e:9f:6c:e9:c6:17:8a:88:7b:ca:40:
         c0:75:31:71:b5:4b:88:96:4d:e7:51:26:39:d3:84:cb:d3:0d:
         c7:60:60:c2:4c:29:3d:19:d2:ab:3d:10:b3:bb:0c:36:6f:cc:
         d6:0f:90:81:de:75:e8:58:7b:8e:d4:05:d3:1c:93:5a:20:43:
         2b:4a:2b:e5:d3:86:91:c3:e4:c9:2c:11:e8:75:e0:23:21:6c:
         d3:90:e3:46:52:49:f6:a6:b2:54:82:da:7d:db:31:75:c3:8d:
         35:40:ab:57:b6:6b:e8:e7:00:71:08:73:75:b7:a4:d2:7a:d8:
         e5:3b:96:31:80:a4:4b:65:5c:6c:af:47:79:99:5c:4d:75:ce:
         99:cc:0b:75:cc:b2:b6:91:18:44:95:66:4f:56:59:f1:01:27:
         70:0f:58:62:28:b6:94:3d:d9:e9:b5:72:31:58:af:9b:4c:e9:
         da:37:0d:6c:bd:23:e5:b3:41:1c:25:e8:18:ef:ac:c2:3a:d5:
         0e:0f:5b:73
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYzOTIxMTAvBgNVBAUTKDZENjk0MzI3QTc4QjBGNUU3QzJEMEM3NDYzNzc0ODFE
RUREREEwMDIwHhcNMjYwNTA3MDIzMzU5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZiZmExNy0wZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv23vW8ckbrVS9EwEwHV9/42z3OH71xiP5BgViLf4dfYWqmVnkf/Fh4TtIVv0
zqbZL7PNG6eSK4xyTAI9rG3zqTpwyIx8KztpUfUqBDWqzbCAHXNG1RHVe057sa/k
2Jz4kD/vrq+18MUTyqVQtAoRYjlnl2UkbaOOdMGt6b2JrTmTmMPAsQkeUnUg6ORy
VTi/hWyURNf63tB5NLbLxtlno+Gt624Nt+9O+/IqDAvUfi4Sjo3QxDeeU1Fd4qf5
O3VD4I4heXb4kxID24JFMz5R61GpiEoucMTM9d8Q2T8HaPDiDJnhVSmhNTb2uJaX
37mX4ZTinpeG57fKocx3EQWRTQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPUGgnlm
HlvaQU+yTn/syLlrXV2JMB8GA1UdIwQYMBaAFG1pQyeniw9efC0MdGN3SB3t3aAC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM5Mi8xOUZENENDMkQ5
MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQxNThMUXgwWTNkSUhlM2Rv
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JXbERKNmVMRDE1OExReDBZM2RJSGUzZG9BSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYzOTIvMTlGRDRDQzJEOTAyMTFFRDg3ODQ0OTU5QzRGOUFFMDIvM0NGNDA4N0FE
OTA2MTFFRDg5MEY1RDVGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ4M6MA8EAgACMAkDBwAgAQ3yQUAwDQYJKoZIhvcNAQELBQADggEB
ALCQJ5GTCFeNb93Ns/8EBFjAIspn7u5g4yacWlPHzP8EouZUd6b/uBmbx4kHdwx1
QEw4Z596a/pNC6iMx30un2zpxheKiHvKQMB1MXG1S4iWTedRJjnThMvTDcdgYMJM
KT0Z0qs9ELO7DDZvzNYPkIHedehYe47UBdMck1ogQytKK+XThpHD5MksEeh14CMh
bNOQ40ZSSfamslSC2n3bMXXDjTVAq1e2a+jnAHEIc3W3pNJ62OU7ljGApEtlXGyv
R3mZXE11zpnMC3XMsraRGESVZk9WWfEBJ3APWGIotpQ92em1cjFYr5tM6do3DWy9
I+WzQRwl6BjvrMI61Q4PW3M=
-----END CERTIFICATE-----
Generated at Wed May 13 09:00:15 2026 by rpki-client