Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/D8D89576CF2F11EC8378951DC4F9AE02.roa
File:                     D8D89576CF2F11EC8378951DC4F9AE02.roa (raw, json)
Hash identifier:          kyih9MHHocNwE9MOGke3BF00ufTMcRqOo0CJ2pKhiNM=
Subject key identifier:   D9:B9:6A:2B:F3:C4:25:E1:DF:30:FD:C5:F9:1E:27:5C:C8:07:B8:DC
Certificate issuer:       /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Certificate serial:       03B6
Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/D8D89576CF2F11EC8378951DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:21:00 +0000
ROA not before:           Tue 03 Jun 2025 01:55:31 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     149811
IP address blocks:        103.186.242.0/24 maxlen: 24
                          103.186.243.0/24 maxlen: 24
                          2400:7660:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl
                          rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
        Validity
            Not Before: Jun  3 01:55:31 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e8dc-9cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:7d:e7:cd:31:1f:2a:f0:a1:2d:00:8c:cb:
                    fe:65:5b:81:90:fc:2d:f9:b1:19:58:0b:36:ad:f7:
                    29:57:6b:19:82:76:6d:17:4c:aa:77:33:d6:cf:cd:
                    2c:36:df:ae:b9:39:2b:ad:a3:36:60:cb:72:85:94:
                    a5:88:cc:ec:ad:e2:11:e5:e1:00:c1:fc:18:c4:45:
                    be:37:4f:b9:e9:65:77:19:fa:5b:33:5b:d6:bb:e8:
                    94:22:4a:3a:ed:9b:66:a3:6b:5c:ab:a7:03:d6:4f:
                    2c:18:3a:ba:a8:b0:35:d4:93:8e:f0:70:fb:dc:8c:
                    03:2a:3f:6c:e1:17:f9:65:ac:7d:04:00:bb:87:62:
                    c6:e5:cf:fd:22:82:ae:21:5c:cd:80:be:9d:0e:20:
                    a8:27:17:09:2a:ed:78:aa:80:99:f4:d2:6b:60:aa:
                    2a:08:c0:81:b6:5a:a9:b4:64:c6:78:e8:12:d3:63:
                    7b:9c:2f:eb:70:30:ec:63:9b:14:d9:c6:42:b4:86:
                    58:de:02:74:84:33:59:71:63:c8:3c:3f:1b:6b:fe:
                    56:0d:21:73:d8:84:ee:25:5d:70:30:23:2d:6b:25:
                    e2:e2:09:27:1c:f0:e9:fd:bf:0e:d8:27:de:cc:2c:
                    3c:1f:f5:dc:65:0f:44:e2:ef:f1:0c:df:3d:96:3a:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B9:6A:2B:F3:C4:25:E1:DF:30:FD:C5:F9:1E:27:5C:C8:07:B8:DC
            X509v3 Authority Key Identifier:
                keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/D8D89576CF2F11EC8378951DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.242.0/23
                IPv6:
                  2400:7660:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:26:38:2b:0b:69:d8:3b:db:e1:8b:25:cd:29:2a:66:3d:58:
         ce:e6:83:a1:63:3f:28:b2:69:f7:c5:4d:ed:9b:68:2f:aa:02:
         64:1f:53:f5:48:09:01:2c:60:4d:85:53:c6:27:7b:8b:41:d0:
         02:2e:a0:4a:58:f9:ec:c7:e6:cc:a2:9a:49:c2:6c:75:9c:b3:
         c3:27:bf:87:f6:55:52:8e:41:b5:de:58:78:a4:8a:5c:94:1e:
         7d:bf:d7:a7:51:55:5b:cc:53:13:48:c2:e2:df:de:a6:d8:c0:
         30:b2:12:77:51:ce:09:ea:42:8a:a9:7b:ab:64:8f:51:72:67:
         9e:74:63:78:16:5b:3d:fa:17:b3:03:c3:cf:44:a3:9b:cf:2a:
         74:30:99:03:87:fa:4d:31:08:87:e1:4a:e4:6f:8e:9e:a5:20:
         fc:8e:86:ea:30:40:85:74:3c:1b:15:26:1e:43:a0:b5:ae:96:
         e8:b3:0d:a5:1d:97:4d:97:7c:5f:17:0d:65:65:f5:10:2d:3a:
         f3:bd:9c:09:20:3d:2e:d4:df:76:96:d1:e1:a7:e7:be:fa:75:
         77:53:37:45:91:06:af:d5:b4:ba:68:cf:df:18:64:d9:e3:53:
         ad:28:65:c2:ba:f5:44:bb:dc:47:f2:06:63:b1:46:fd:d6:b7:
         95:b5:f5:7e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc2OUIxMTAvBgNVBAUTKDI0Q0NFODBERjBENDhBNkQwQzM5MUEzQUYwREQ2NDRE
REJGQjc1QUIwHhcNMjUwNjAzMDE1NTMxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZThkYy05Y2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6h9580xHyrwoS0AjMv+ZVuBkPwt+bEZWAs2rfcpV2sZgnZtF0yqdzPWz80s
Nt+uuTkrraM2YMtyhZSliMzsreIR5eEAwfwYxEW+N0+56WV3GfpbM1vWu+iUIko6
7Ztmo2tcq6cD1k8sGDq6qLA11JOO8HD73IwDKj9s4Rf5Zax9BAC7h2LG5c/9IoKu
IVzNgL6dDiCoJxcJKu14qoCZ9NJrYKoqCMCBtlqptGTGeOgS02N7nC/rcDDsY5sU
2cZCtIZY3gJ0hDNZcWPIPD8ba/5WDSFz2ITuJV1wMCMtayXi4gknHPDp/b8O2Cfe
zCw8H/XcZQ9E4u/xDN89ljrDHwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNm5aivz
xCXh3zD9xfkeJ1zIB7jcMB8GA1UdIwQYMBaAFCTM6A3w1IptDDkaOvDdZE3b+3Wr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY5Qi9CMDkzNUQ1NEND
NjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWltME1PUm82OE4xa1Rkdjdk
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pNem9EZkRVaW0wTU9SbzY4TjFrVGR2N2Rhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODc2OUIvQjA5MzVENTRDQzYzMTFFQzlCOEU5NjJCQzRGOUFFMDIvRDhEODk1NzZD
RjJGMTFFQzgzNzg5NTFEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ7ryMA8EAgACMAkDBwAkAHZg//8wDQYJKoZIhvcNAQELBQADggEB
AAkmOCsLadg72+GLJc0pKmY9WM7mg6FjPyiyaffFTe2baC+qAmQfU/VICQEsYE2F
U8Yne4tB0AIuoEpY+ezH5syimknCbHWcs8Mnv4f2VVKOQbXeWHikilyUHn2/16dR
VVvMUxNIwuLf3qbYwDCyEndRzgnqQoqpe6tkj1FyZ550Y3gWWz36F7MDw89Eo5vP
KnQwmQOH+k0xCIfhSuRvjp6lIPyOhuowQIV0PBsVJh5DoLWuluizDaUdl02XfF8X
DWVl9RAtOvO9nAkgPS7U33aW0eGn5776dXdTN0WRBq/VtLpoz98YZNnjU60oZcK6
9US73EfyBmOxRv3Wt5W19X4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:20 2026 by rpki-client