Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/040BF942A03F11F182F8557D3A11F970.roa
File:                     040BF942A03F11F182F8557D3A11F970.roa (raw, json)
Hash identifier:          iHoNlT/spAD2Eea17ZDNX1rjckiRNgZlmME02gc+oSc=
Subject key identifier:   77:A9:F8:B1:74:33:3A:32:DF:0E:23:1E:E5:60:60:0F:0E:95:3A:BA
Certificate issuer:       /CN=A918E8BB/serialNumber=3DB9CF0FAD38D1AA30F8A00D4274B4A01CD2B1E8
Certificate serial:       02
Authority key identifier: 3D:B9:CF:0F:AD:38:D1:AA:30:F8:A0:0D:42:74:B4:A0:1C:D2:B1:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbnPD6040aow-KANQnS0oBzSseg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/040BF942A03F11F182F8557D3A11F970.roa
Signing time:             Tue 25 Aug 2026 04:39:54 +0000
ROA not before:           Tue 25 Aug 2026 04:39:54 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     132827
IP address blocks:        103.10.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/PbnPD6040aow-KANQnS0oBzSseg.crl
                          rsync://rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/PbnPD6040aow-KANQnS0oBzSseg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbnPD6040aow-KANQnS0oBzSseg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 09:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E8BB, serialNumber=3DB9CF0FAD38D1AA30F8A00D4274B4A01CD2B1E8
        Validity
            Not Before: Aug 25 04:39:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a8d1c9a-9168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:e5:fa:51:08:59:eb:6d:43:65:b4:8e:ea:
                    71:31:75:ee:91:e9:a7:2b:ac:eb:79:8d:14:98:79:
                    b4:60:0e:77:33:7d:b4:c7:c9:4c:85:47:2d:77:be:
                    90:36:2f:56:2a:3a:54:2b:04:06:9c:64:53:95:6d:
                    17:f8:46:42:33:6d:23:ed:c3:02:64:60:ed:e1:20:
                    4d:36:68:27:64:a9:f3:3a:c6:ad:50:ef:00:c8:1c:
                    57:36:ca:ad:92:84:af:bf:6b:e7:33:51:a8:13:bc:
                    7b:ef:fc:fe:55:52:c4:05:26:c8:c2:3e:4a:d4:9f:
                    a3:e3:6f:c0:9f:0d:43:42:49:ab:1e:52:b5:5b:8d:
                    3a:48:39:51:0d:63:28:4e:ec:cb:6a:74:ed:3c:69:
                    51:8d:21:f7:1f:72:58:56:7c:ed:a5:fb:cc:8f:31:
                    86:c9:65:f4:8e:5a:83:72:5d:af:90:c2:e1:e5:c3:
                    4e:2f:cb:bd:67:a1:f1:bf:4e:77:fc:6d:90:e8:e1:
                    29:ea:f1:0c:cb:11:6d:4a:4e:e0:16:63:42:47:a7:
                    74:46:72:59:3f:3f:47:bc:b6:41:bd:1b:ce:80:22:
                    93:1b:c8:49:5c:f4:8e:21:59:d4:16:cd:68:b4:55:
                    4b:2d:72:09:61:41:bf:1b:2d:1f:ba:5a:5d:d0:15:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A9:F8:B1:74:33:3A:32:DF:0E:23:1E:E5:60:60:0F:0E:95:3A:BA
            X509v3 Authority Key Identifier:
                keyid:3D:B9:CF:0F:AD:38:D1:AA:30:F8:A0:0D:42:74:B4:A0:1C:D2:B1:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/PbnPD6040aow-KANQnS0oBzSseg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbnPD6040aow-KANQnS0oBzSseg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/040BF942A03F11F182F8557D3A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:82:a1:52:71:97:41:a9:9f:e4:87:4f:ac:c5:20:59:39:f5:
         76:26:53:4a:bc:fb:f5:1b:c9:47:ac:5c:40:a8:01:b0:d1:27:
         02:51:9e:5b:07:cf:dc:57:10:91:04:f1:82:46:c2:02:a3:59:
         b7:5b:4d:48:07:ea:ee:f3:df:ac:19:7d:05:4a:13:69:22:5d:
         f0:13:53:ba:5f:43:ab:4e:4a:c3:61:b3:3e:cb:ce:fa:b7:9e:
         fe:07:fb:d4:a8:33:15:43:08:41:40:2d:92:e6:f9:44:56:70:
         65:e9:de:53:e9:66:a4:08:ee:7b:04:18:1c:27:a3:8d:d7:68:
         76:a8:58:55:9e:df:22:1b:48:e1:da:68:b5:24:f4:f7:bc:97:
         e7:38:2d:54:a1:6f:76:71:c8:27:d7:f2:23:4d:48:6e:4f:0d:
         34:d0:0c:0a:47:4b:d1:55:e0:55:c5:07:79:dc:fa:3c:e1:64:
         eb:f9:93:b4:8f:ab:e3:b5:0c:44:a1:79:36:47:a4:63:1c:18:
         39:cc:96:11:e9:d0:d1:b1:34:51:43:f5:73:1a:b4:60:e9:1b:
         ea:d3:21:b9:61:be:dc:34:c1:97:7e:81:a2:3a:ab:c8:61:5d:
         a4:11:17:c0:70:83:c0:10:0a:f1:58:e8:a1:b0:7e:f8:ea:48:
         66:b5:fa:da
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RThCQjExMC8GA1UEBRMoM0RCOUNGMEZBRDM4RDFBQTMwRjhBMDBENDI3NEI0QTAx
Q0QyQjFFODAeFw0yNjA4MjUwNDM5NTRaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOGQxYzlhLTkxNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVEeX6UQhZ621DZbSO6nExde6R6acrrOt5jRSYebRgDnczfbTHyUyFRy13vpA2
L1YqOlQrBAacZFOVbRf4RkIzbSPtwwJkYO3hIE02aCdkqfM6xq1Q7wDIHFc2yq2S
hK+/a+czUagTvHvv/P5VUsQFJsjCPkrUn6Pjb8CfDUNCSaseUrVbjTpIOVENYyhO
7MtqdO08aVGNIfcfclhWfO2l+8yPMYbJZfSOWoNyXa+QwuHlw04vy71nofG/Tnf8
bZDo4Snq8QzLEW1KTuAWY0JHp3RGclk/P0e8tkG9G86AIpMbyElc9I4hWdQWzWi0
VUstcglhQb8bLR+6Wl3QFWqbAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUd6n4sXQz
OjLfDiMe5WBgDw6VOrowHwYDVR0jBBgwFoAUPbnPD6040aow+KANQnS0oBzSsegw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOEJCLzUwOUY0ODgyQTAz
RTExRjE5QTE0MkM1ODNBMTFGOTcwL1BiblBENjA0MGFvdy1LQU5RblMwb0J6U3Nl
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUGJuUEQ2MDQwYW93LUtBTlFuUzBvQnpTc2VnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RThCQi81MDlGNDg4MkEwM0UxMUYxOUExNDJDNTgzQTExRjk3MC8wNDBCRjk0MkEw
M0YxMUYxODJGODU1N0QzQTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnCuwwDQYJKoZIhvcNAQELBQADggEBAEWCoVJxl0Gpn+SHT6zFIFk5
9XYmU0q8+/UbyUesXECoAbDRJwJRnlsHz9xXEJEE8YJGwgKjWbdbTUgH6u7z36wZ
fQVKE2kiXfATU7pfQ6tOSsNhsz7Lzvq3nv4H+9SoMxVDCEFALZLm+URWcGXp3lPp
ZqQI7nsEGBwno43XaHaoWFWe3yIbSOHaaLUk9Pe8l+c4LVShb3ZxyCfX8iNNSG5P
DTTQDApHS9FV4FXFB3nc+jzhZOv5k7SPq+O1DESheTZHpGMcGDnMlhHp0NGxNFFD
9XMatGDpG+rTIblhvtw0wZd+gaI6q8hhXaQRF8Bwg8AQCvFY6KGwfvjqSGa1+to=
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:41:05 2026 by rpki-client