Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa
File:                     347B37060B7011F0BED04B49C4F9AE02.roa (raw, json)
Hash identifier:          9Wk4FNrZEDZZAfXx+eZDumVcxFSCuGEokaIHbaq0ja8=
Subject key identifier:   CD:57:2D:67:BB:78:6A:E8:E5:25:CE:A2:11:40:14:43:CF:4E:62:C8
Certificate issuer:       /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Certificate serial:       C5
Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:17:10 +0000
ROA not before:           Mon 26 Jan 2026 03:48:58 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     138653
IP address blocks:        103.135.231.0/24 maxlen: 24
                          2001:df5:440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
                          rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
        Validity
            Not Before: Jan 26 03:48:58 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a43c56-3a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:7a:10:19:6d:00:99:1a:d3:af:bc:dd:31:
                    8b:d5:8e:11:fb:4b:64:7b:40:8c:1d:74:10:99:dd:
                    da:8c:38:36:58:b2:08:0b:e5:73:a0:76:7c:ec:f7:
                    18:83:da:72:2b:19:ae:85:7f:29:df:f9:7f:20:3b:
                    ea:bd:60:1b:ea:3b:96:65:a5:d9:87:6f:86:6b:b5:
                    f9:73:dc:5f:10:50:ed:d2:fa:bc:c6:18:42:5d:fb:
                    4f:7d:8a:df:d8:0c:a4:dc:f2:9b:b1:de:ce:e1:71:
                    dd:e0:79:46:34:f4:2f:6f:7b:02:c8:68:73:71:e7:
                    60:26:75:00:cf:cc:b3:dd:b5:08:71:e5:04:d4:09:
                    41:17:d2:2c:e2:c2:84:8c:95:fd:5e:09:89:e2:df:
                    c3:63:f5:12:de:9e:cb:1d:6b:5d:14:43:1d:10:93:
                    12:c9:af:9a:5b:93:fb:9e:94:3b:06:e5:50:76:7e:
                    67:ec:55:bd:d3:49:04:8d:ae:81:89:6f:2e:e4:ad:
                    f5:df:b4:1d:14:e6:6b:06:88:33:93:28:69:a9:49:
                    c8:13:1b:72:2e:ec:30:12:f5:64:84:2d:ed:d5:2d:
                    9b:f2:3e:98:99:ba:d7:ea:70:b5:96:60:7f:05:59:
                    54:a9:47:45:c5:e3:7a:ca:a9:f9:60:3b:84:39:0a:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:57:2D:67:BB:78:6A:E8:E5:25:CE:A2:11:40:14:43:CF:4E:62:C8
            X509v3 Authority Key Identifier:
                keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.231.0/24
                IPv6:
                  2001:df5:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:6e:dd:d2:13:fd:de:da:93:ee:1f:d9:9e:68:f2:b6:bf:63:
         ce:6f:3c:ca:bf:92:1c:ea:1d:36:47:67:27:a0:06:02:bd:3f:
         df:db:a2:2b:d0:ae:16:28:5a:ad:67:e8:33:65:bd:67:ad:ec:
         aa:ff:57:cd:94:dc:b1:a7:59:c4:c9:b1:f3:7d:31:bc:57:af:
         a6:22:32:36:3d:d4:59:c3:90:7f:0f:24:14:26:c3:2f:af:07:
         40:3d:5f:57:08:1e:82:9c:56:d6:27:d9:a0:80:34:f7:08:06:
         61:04:c7:0f:8d:46:e2:9a:5a:51:5e:2c:54:1a:67:0e:08:67:
         9d:e7:73:3f:b0:47:68:03:b1:85:95:7d:d6:61:e2:c9:85:ec:
         30:2a:c2:f5:44:2e:0b:d7:ea:f3:b8:1e:7f:49:1f:0a:4d:cf:
         a7:05:7e:4f:f3:72:41:02:88:21:82:13:76:6a:6c:71:6f:f0:
         27:24:c1:9e:a6:04:e6:c7:a4:9c:33:31:f1:43:c7:8c:61:08:
         b2:2c:c8:0e:13:3f:ed:89:e4:e1:31:a0:89:ce:6f:22:6c:e7:
         48:0c:fe:fa:cf:02:02:46:ea:5c:7e:34:62:b1:a6:be:45:40:
         18:6b:db:fa:db:46:8a:17:e6:19:96:3b:37:de:d2:dc:17:36:
         88:bf:88:b5
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA0OUYxMTAvBgNVBAUTKDhBQjk0NTgyQjAyRUFBODNBMjg1RjFDOTFGQzg1OUEw
RTJDMTEzNTMwHhcNMjYwMTI2MDM0ODU4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2M1Ni0zYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Vd6EBltAJka06+83TGL1Y4R+0tke0CMHXQQmd3ajDg2WLIIC+VzoHZ87PcY
g9pyKxmuhX8p3/l/IDvqvWAb6juWZaXZh2+Ga7X5c9xfEFDt0vq8xhhCXftPfYrf
2Ayk3PKbsd7O4XHd4HlGNPQvb3sCyGhzcedgJnUAz8yz3bUIceUE1AlBF9Is4sKE
jJX9XgmJ4t/DY/US3p7LHWtdFEMdEJMSya+aW5P7npQ7BuVQdn5n7FW900kEja6B
iW8u5K3137QdFOZrBogzkyhpqUnIExtyLuwwEvVkhC3t1S2b8j6YmbrX6nC1lmB/
BVlUqUdFxeN6yqn5YDuEOQqErQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFM1XLWe7
eGro5SXOohFAFEPPTmLIMB8GA1UdIwQYMBaAFIq5RYKwLqqDooXxyR/IWaDiwRNT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDQ5Ri9DMDc0QzUxQ0Y4
RTUxMUVGQkVBNTIyNzFDNEY5QUUwMi9pcmxGZ3JBdXFvT2loZkhKSDhoWm9PTEJF
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lybEZnckF1cW9PaWhmSEpIOGhab09MQkUxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA0OUYvQzA3NEM1MUNGOEU1MTFFRkJFQTUyMjcxQzRGOUFFMDIvMzQ3QjM3MDYw
QjcwMTFGMEJFRDA0QjQ5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ4fnMA8EAgACMAkDBwAgAQ31BEAwDQYJKoZIhvcNAQELBQADggEB
AKBu3dIT/d7ak+4f2Z5o8ra/Y85vPMq/khzqHTZHZyegBgK9P9/boivQrhYoWq1n
6DNlvWet7Kr/V82U3LGnWcTJsfN9MbxXr6YiMjY91FnDkH8PJBQmwy+vB0A9X1cI
HoKcVtYn2aCANPcIBmEExw+NRuKaWlFeLFQaZw4IZ53ncz+wR2gDsYWVfdZh4smF
7DAqwvVELgvX6vO4Hn9JHwpNz6cFfk/zckECiCGCE3ZqbHFv8CckwZ6mBObHpJwz
MfFDx4xhCLIsyA4TP+2J5OExoInObyJs50gM/vrPAgJG6lx+NGKxpr5FQBhr2/rb
RooX5hmWOzfe0twXNoi/iLU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:37 2026 by rpki-client