Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/A2835E90A0B211EBA87FF23EC4F9AE02.roa
File:                     A2835E90A0B211EBA87FF23EC4F9AE02.roa (raw, json)
Hash identifier:          B1e7/fiDB7LAV84pavQMlm4Qz4jizH6Xl6moR1SOVaw=
Subject key identifier:   17:47:6C:C9:18:19:5A:2D:CE:45:D0:5E:F1:A5:8A:2A:55:3C:63:CC
Certificate issuer:       /CN=A9192739/serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
Certificate serial:       0704
Authority key identifier: FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/A2835E90A0B211EBA87FF23EC4F9AE02.roa
Signing time:             Sun 02 Aug 2026 22:43:52 +0000
ROA not before:           Sun 02 Aug 2026 22:43:52 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140885
IP address blocks:        103.152.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl
                          rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 22:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192739, serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
        Validity
            Not Before: Aug  2 22:43:52 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6fc828-bbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:95:cc:16:bb:52:51:b8:ef:ee:4a:a0:a3:fb:
                    de:95:b4:28:c4:03:f2:3c:a9:c3:bd:b0:57:ec:2d:
                    c2:ec:01:e7:60:28:78:5b:3b:6a:83:a7:33:39:c3:
                    44:6e:b5:f0:7d:18:5d:84:b5:06:32:9f:37:5d:18:
                    92:ed:65:aa:c4:3a:1c:26:cb:a7:1c:24:f0:7f:8b:
                    e5:29:ce:26:9e:3e:a6:59:e2:fd:25:98:dd:39:f4:
                    8d:59:4b:48:df:36:19:a6:cf:9a:59:30:74:d6:74:
                    08:06:52:8e:94:3a:10:ff:81:78:b5:a9:5a:32:bd:
                    32:53:eb:f0:3a:fa:be:a1:c0:4d:19:37:e6:1d:1c:
                    09:0a:b3:28:da:c3:d5:ca:ed:01:90:58:0d:9b:a1:
                    85:ba:82:79:8f:f6:e5:9b:e2:ef:8a:16:c9:a1:a1:
                    28:b7:9d:07:5c:8f:28:7a:79:41:bf:c3:c0:75:4c:
                    a2:b6:61:d6:98:1e:72:19:b9:11:40:c0:85:d5:d7:
                    dc:e1:46:ff:1d:5c:62:c9:89:14:3c:b1:f7:b5:5c:
                    5b:bb:f1:cb:7d:a4:03:ee:ee:37:47:6e:b9:ba:a5:
                    59:7d:1c:03:e5:37:d7:0d:51:0e:36:16:cf:78:91:
                    34:c1:3b:54:06:b4:b8:71:ae:25:e8:2b:bf:15:46:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:47:6C:C9:18:19:5A:2D:CE:45:D0:5E:F1:A5:8A:2A:55:3C:63:CC
            X509v3 Authority Key Identifier:
                keyid:FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/A2835E90A0B211EBA87FF23EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:5a:de:da:b9:a6:dc:5c:62:17:f6:d7:46:4a:f0:f1:62:ca:
         b8:28:22:54:8d:4d:f7:9b:0d:77:b0:df:cb:d0:f0:43:5a:e9:
         2d:ba:a2:b3:2c:20:ca:a3:44:0e:b8:15:85:ea:25:72:8b:24:
         e3:6e:c7:6a:ee:85:d2:c4:8f:f9:52:33:60:35:63:33:4e:1a:
         20:04:fd:93:59:98:ff:1e:45:21:44:31:a4:49:1c:94:6b:a1:
         e9:5d:4f:65:3b:31:d8:ce:5e:d2:0f:bc:ac:c4:d1:e9:2e:5d:
         2f:9e:4a:40:ee:85:d2:0d:46:99:42:05:34:3b:1d:bb:06:45:
         4a:5f:1f:1b:b5:19:63:f0:11:9b:a3:98:be:c2:c8:a5:4d:c1:
         91:81:45:fc:e0:eb:6b:78:2a:b8:1c:4d:19:ed:a5:f3:7d:22:
         80:b7:36:c6:4f:6c:7a:79:88:66:40:40:62:11:5c:8e:02:78:
         d7:90:c8:05:ce:de:32:3e:b5:30:77:18:ba:32:24:ce:93:7b:
         ae:6f:7e:52:60:73:a5:27:10:f7:25:a2:89:19:e4:26:10:04:
         f7:2f:7f:08:22:d5:88:8f:8a:0e:3b:2c:72:d1:80:d9:2e:2b:
         9f:e0:a8:45:ee:e1:2b:2d:9a:d6:5e:f5:97:9d:db:3c:fb:2c:
         fb:d1:30:b8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI3MzkxMTAvBgNVBAUTKEZCNTFFOEJCOTlBNDJEN0Q3RkM0QzU3MDQxOUJGNzRD
ODZEM0FGREMwHhcNMjYwODAyMjI0MzUyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZmYzgyOC1iYmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjZXMFrtSUbjv7kqgo/velbQoxAPyPKnDvbBX7C3C7AHnYCh4Wztqg6czOcNE
brXwfRhdhLUGMp83XRiS7WWqxDocJsunHCTwf4vlKc4mnj6mWeL9JZjdOfSNWUtI
3zYZps+aWTB01nQIBlKOlDoQ/4F4talaMr0yU+vwOvq+ocBNGTfmHRwJCrMo2sPV
yu0BkFgNm6GFuoJ5j/blm+LvihbJoaEot50HXI8oenlBv8PAdUyitmHWmB5yGbkR
QMCF1dfc4Ub/HVxiyYkUPLH3tVxbu/HLfaQD7u43R265uqVZfRwD5TfXDVEONhbP
eJE0wTtUBrS4ca4l6Cu/FUZaqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBdHbMkY
GVotzkXQXvGliipVPGPMMB8GA1UdIwQYMBaAFPtR6LuZpC19f8TFcEGb90yG06/c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjczOS8wOEY3RkUwNEEw
QTYxMUVCQTVBNkMzNTFDNEY5QUUwMi8tMUhvdTVta0xYMV94TVZ3UVp2M1RJYlRy
OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy0xSG91NW1rTFgxX3hNVndRWnYzVEliVHI5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTI3MzkvMDhGN0ZFMDRBMEE2MTFFQkE1QTZDMzUxQzRGOUFFMDIvQTI4MzVFOTBB
MEIyMTFFQkE4N0ZGMjNFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5jEMA0GCSqGSIb3DQEBCwUAA4IBAQCjWt7auabcXGIX9tdGSvDx
Ysq4KCJUjU33mw13sN/L0PBDWuktuqKzLCDKo0QOuBWF6iVyiyTjbsdq7oXSxI/5
UjNgNWMzThogBP2TWZj/HkUhRDGkSRyUa6HpXU9lOzHYzl7SD7ysxNHpLl0vnkpA
7oXSDUaZQgU0Ox27BkVKXx8btRlj8BGbo5i+wsilTcGRgUX84OtreCq4HE0Z7aXz
fSKAtzbGT2x6eYhmQEBiEVyOAnjXkMgFzt4yPrUwdxi6MiTOk3uub35SYHOlJxD3
JaKJGeQmEAT3L38IItWIj4oOOyxy0YDZLiuf4KhF7uErLZrWXvWXnds8+yz70TC4
-----END CERTIFICATE-----
Generated at Tue Sep 29 09:24:14 2026 by rpki-client