Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E7DDE5B8682811EB8D635520C4F9AE02.roa
File:                     E7DDE5B8682811EB8D635520C4F9AE02.roa (raw, json)
Hash identifier:          eubTEdYXQME1yNtm+Jalll4gYT5ERV4aThycd7GCdxs=
Subject key identifier:   5B:F9:E2:07:88:AD:D9:94:C4:B3:2F:9A:2E:FA:AE:12:10:1C:C7:70
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       352E
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E7DDE5B8682811EB8D635520C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:37:02 +0000
ROA not before:           Mon 04 Aug 2025 15:21:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     23930
IP address blocks:        103.19.16.0/24 maxlen: 24
                          103.103.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13614 (0x352e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Aug  4 15:21:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a440fe-2cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:75:6d:2d:a5:41:06:3d:f7:63:0b:91:d3:
                    95:ad:d7:94:79:d3:14:52:95:e4:30:0a:41:4d:b0:
                    b6:d0:99:d2:d8:e7:8f:4e:09:ce:e2:77:0c:98:ec:
                    01:f0:62:4f:e2:b1:07:4d:8d:2a:48:d2:9c:6d:f2:
                    3c:db:d9:95:cf:ae:5d:14:80:92:51:3c:45:b5:60:
                    27:4d:e5:91:14:a8:e3:c1:b0:a5:eb:c9:23:ad:3a:
                    df:83:4f:ee:a7:2e:da:75:c9:54:88:1d:84:bf:12:
                    5f:5d:d3:3e:a7:a1:f4:2c:63:fe:c4:83:f8:4f:b5:
                    b1:b2:51:d9:89:d7:74:c8:56:85:1a:cf:24:11:ed:
                    13:29:be:7e:26:38:f0:c2:37:82:30:64:30:7f:de:
                    bc:9b:ab:ca:5b:35:23:b5:ce:e3:29:10:11:a9:d8:
                    df:a7:e1:cc:75:81:09:f9:87:c5:57:4f:10:53:41:
                    31:52:09:f8:ee:91:14:20:5e:e4:17:0f:f1:89:dc:
                    9e:96:17:c2:f2:92:5d:a7:9e:f8:5d:c2:6a:6b:53:
                    3a:33:f0:90:53:78:71:e9:af:a0:68:6c:8c:98:54:
                    22:2b:c7:45:8a:65:d5:47:3f:7e:a5:70:99:74:00:
                    3b:5b:8a:84:27:6a:32:d9:02:0a:6c:98:0d:bd:70:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F9:E2:07:88:AD:D9:94:C4:B3:2F:9A:2E:FA:AE:12:10:1C:C7:70
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E7DDE5B8682811EB8D635520C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.16.0/24
                  103.103.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:64:18:6a:68:71:c0:5f:f4:03:0d:a9:27:60:2e:e8:b2:09:
         fb:59:5a:ba:63:8e:1b:e7:2e:b8:af:9a:eb:a7:5c:cd:bc:23:
         d0:b3:a1:50:10:be:13:3e:d4:1b:ff:d7:83:ed:6f:67:eb:de:
         a0:c5:4e:43:22:fe:50:4b:6e:94:a3:8f:d6:5b:56:ac:bb:72:
         48:c1:f2:f9:fa:fe:f6:b8:47:7e:4f:93:47:ae:e3:c3:46:ed:
         36:1e:a2:5d:f8:f4:c3:0d:64:05:31:d3:0a:db:3e:c3:5c:02:
         54:dc:32:24:5f:6d:5d:c0:39:49:72:18:f6:d3:f4:33:7c:cf:
         be:4e:2a:ef:ca:25:7f:f7:a9:e7:65:c4:91:3c:f0:97:e6:f2:
         1d:70:cd:87:9a:b4:ec:30:42:de:ea:72:ac:15:71:25:44:31:
         f7:26:93:69:9c:e1:d4:aa:62:13:6e:20:e8:59:c2:2b:37:2d:
         f9:ef:db:12:78:b6:31:f8:08:e7:82:47:b6:04:f5:f2:a1:36:
         af:fd:c0:57:bb:60:0b:ad:94:73:ec:00:e4:89:17:75:52:e1:
         67:bb:90:4f:fb:da:23:25:d7:ca:fe:df:de:d0:87:fd:cc:d1:
         93:2e:b9:15:04:65:f6:d2:4f:51:c4:ab:f5:1f:31:82:6b:34:
         fc:61:80:c0
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICNS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZEMjQxMTAvBgNVBAUTKDNFQzgzNDIwNEQ2QkFBRjk5MTQwQzAzQkQ3NjIxMTQ1
QzA3QkJBNjIwHhcNMjUwODA0MTUyMTAxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDBmZS0yY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAorl1bS2lQQY992MLkdOVrdeUedMUUpXkMApBTbC20JnS2OePTgnO4ncMmOwB
8GJP4rEHTY0qSNKcbfI829mVz65dFICSUTxFtWAnTeWRFKjjwbCl68kjrTrfg0/u
py7adclUiB2EvxJfXdM+p6H0LGP+xIP4T7WxslHZidd0yFaFGs8kEe0TKb5+Jjjw
wjeCMGQwf968m6vKWzUjtc7jKRARqdjfp+HMdYEJ+YfFV08QU0ExUgn47pEUIF7k
Fw/xidyelhfC8pJdp574XcJqa1M6M/CQU3hx6a+gaGyMmFQiK8dFimXVRz9+pXCZ
dAA7W4qEJ2oy2QIKbJgNvXD09QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFv54geI
rdmUxLMvmi76rhIQHMdwMB8GA1UdIwQYMBaAFD7INCBNa6r5kUDAO9diEUXAe7pi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQyNC81NTBFMjdGMjFE
QTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2bVJRTUE3MTJJUlJjQjd1
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BzZzBJRTFycXZtUlFNQTcxMklSUmNCN3VtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTZEMjQvNTUwRTI3RjIxREE0MTFFMjhDNTMzQjlBMDhCMDJDRDIvRTdEREU1Qjg2
ODI4MTFFQjhENjM1NTIwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZxMQAwQAZ2cAMA0GCSqGSIb3DQEBCwUAA4IBAQBFZBhqaHHAX/QD
DaknYC7osgn7WVq6Y44b5y64r5rrp1zNvCPQs6FQEL4TPtQb/9eD7W9n696gxU5D
Iv5QS26Uo4/WW1asu3JIwfL5+v72uEd+T5NHruPDRu02HqJd+PTDDWQFMdMK2z7D
XAJU3DIkX21dwDlJchj20/QzfM++TirvyiV/96nnZcSRPPCX5vIdcM2HmrTsMELe
6nKsFXElRDH3JpNpnOHUqmITbiDoWcIrNy3579sSeLYx+Ajngke2BPXyoTav/cBX
u2ALrZRz7ADkiRd1UuFnu5BP+9ojJdfK/t/e0If9zNGTLrkVBGX20k9RxKv1HzGC
azT8YYDA
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:46 2026 by rpki-client