Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/81B5E70C18B511F1AC11CD310A3D8C67.roa
File:                     81B5E70C18B511F1AC11CD310A3D8C67.roa (raw, json)
Hash identifier:          5Ie3ZIxlQpY2pGzYYtHErJYraDQp8xSopPGehYawBBk=
Subject key identifier:   2F:CB:AD:A2:FD:9D:46:7B:AA:2C:F2:8C:36:04:CC:24:01:2E:B5:03
Certificate issuer:       /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
Certificate serial:       0BB6
Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/81B5E70C18B511F1AC11CD310A3D8C67.roa
Signing time:             Thu 05 Mar 2026 17:05:27 +0000
ROA not before:           Thu 05 Mar 2026 17:05:27 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153038
IP address blocks:        103.145.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl
                          rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2998 (0xbb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
        Validity
            Not Before: Mar  5 17:05:27 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a9b7d7-99c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d5:c6:6d:b8:63:b4:a8:b8:7f:1b:bc:8b:27:
                    34:64:08:b3:58:7f:6c:09:44:71:23:6c:9c:f8:6f:
                    4c:7c:41:61:04:d2:ae:c7:a1:b9:33:2a:ac:86:ba:
                    64:7d:48:46:b1:28:e0:eb:e9:b6:09:9f:83:f6:ff:
                    69:cc:ce:96:b2:a5:c9:b2:cf:ba:76:45:7b:82:05:
                    5e:8b:b1:81:f8:ea:6f:51:3d:20:62:06:fe:7d:e8:
                    f0:ad:c7:e0:28:ed:7b:bf:cd:9f:4d:27:29:29:b6:
                    32:22:a2:a3:1e:23:2f:48:4f:09:d2:39:ac:b6:a7:
                    09:b3:95:ab:7c:91:4b:25:4c:0f:f4:ce:06:77:71:
                    35:07:d3:c2:6b:e5:ea:37:42:8f:c5:93:28:54:e3:
                    d4:be:59:d3:13:9d:42:6b:92:92:58:cf:d4:62:ae:
                    20:bd:fd:a6:11:44:11:57:77:4b:47:fa:35:f9:6c:
                    ef:56:fa:e1:25:e0:cf:0c:eb:c0:1e:e3:42:31:b5:
                    74:db:7f:92:b6:8d:08:a4:71:0f:0f:da:b0:16:71:
                    d8:b5:14:05:07:8c:4b:3b:02:1c:1a:f6:c1:2c:9f:
                    ab:84:a5:eb:1b:12:57:76:95:68:1b:c9:f1:d7:ec:
                    84:35:d2:3d:6f:48:e2:ca:b2:73:1d:93:94:98:96:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CB:AD:A2:FD:9D:46:7B:AA:2C:F2:8C:36:04:CC:24:01:2E:B5:03
            X509v3 Authority Key Identifier:
                keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/81B5E70C18B511F1AC11CD310A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:c0:56:5f:bb:3a:79:a7:27:06:b5:23:dd:b3:cc:72:61:21:
         ae:f9:52:4b:6b:e2:cc:ec:9a:9d:f4:68:31:6a:93:ff:5c:12:
         11:38:7f:6a:20:76:ab:75:f6:e5:62:fc:4b:98:73:a8:8d:95:
         af:51:db:a3:22:05:fd:50:7b:cc:03:5d:3e:54:dc:f6:8b:b8:
         a6:d2:70:85:4f:93:47:ed:1a:3e:f5:47:6b:0d:55:8e:38:53:
         b6:dd:02:f9:6a:0b:4a:30:ef:1a:a1:c7:14:e4:a6:e1:b6:9b:
         7c:cf:d7:f7:ea:f9:e6:81:e9:6c:b4:62:ef:4d:8b:46:16:ad:
         23:7a:d3:1a:24:39:4a:74:86:b2:f3:67:f6:32:0d:a2:3e:68:
         95:eb:f0:3a:96:25:96:5e:37:61:aa:ea:1b:f8:20:90:ce:99:
         a3:0a:3b:ef:47:1b:ad:be:f6:5b:55:62:80:73:4a:35:bf:33:
         4d:dd:7b:6c:f1:1b:ff:9b:24:a4:c2:4a:db:7c:f8:bf:42:81:
         7f:06:d9:17:1a:6b:1c:4b:24:3a:99:d6:be:18:d6:75:44:2c:
         b2:f1:74:d6:08:42:ad:c9:04:f3:2b:e7:83:ca:68:2f:48:2a:
         db:00:59:da:68:22:83:c0:14:3e:d2:34:1a:7d:1f:83:e2:09:
         49:60:1e:3e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICC7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2
Qzk0MjlGMjEwHhcNMjYwMzA1MTcwNTI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE5YjdkNy05OWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl9XGbbhjtKi4fxu8iyc0ZAizWH9sCURxI2yc+G9MfEFhBNKux6G5Myqshrpk
fUhGsSjg6+m2CZ+D9v9pzM6WsqXJss+6dkV7ggVei7GB+OpvUT0gYgb+fejwrcfg
KO17v82fTScpKbYyIqKjHiMvSE8J0jmstqcJs5WrfJFLJUwP9M4Gd3E1B9PCa+Xq
N0KPxZMoVOPUvlnTE51Ca5KSWM/UYq4gvf2mEUQRV3dLR/o1+WzvVvrhJeDPDOvA
HuNCMbV023+Sto0IpHEPD9qwFnHYtRQFB4xLOwIcGvbBLJ+rhKXrGxJXdpVoG8nx
1+yENdI9b0jiyrJzHZOUmJZz3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC/LraL9
nUZ7qizyjDYEzCQBLrUDMB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3
NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTBEMEQvRjAzN0JEMDg0NzY2MTFFQUFCQjExQTY1QzRGOUFFMDIvODFCNUU3MEMx
OEI1MTFGMUFDMTFDRDMxMEEzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5FNMA0GCSqGSIb3DQEBCwUAA4IBAQB2wFZfuzp5pycGtSPds8xy
YSGu+VJLa+LM7Jqd9GgxapP/XBIROH9qIHardfblYvxLmHOojZWvUdujIgX9UHvM
A10+VNz2i7im0nCFT5NH7Ro+9UdrDVWOOFO23QL5agtKMO8aoccU5Kbhtpt8z9f3
6vnmgelstGLvTYtGFq0jetMaJDlKdIay82f2Mg2iPmiV6/A6liWWXjdhquob+CCQ
zpmjCjvvRxutvvZbVWKAc0o1vzNN3Xts8Rv/mySkwkrbfPi/QoF/BtkXGmscSyQ6
mda+GNZ1RCyy8XTWCEKtyQTzK+eDymgvSCrbAFnaaCKDwBQ+0jQafR+D4glJYB4+
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:00:02 2026 by rpki-client