Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/59136C26FFB911F09F6B6297696F56BC.roa
File:                     59136C26FFB911F09F6B6297696F56BC.roa (raw, json)
Hash identifier:          EyLL/BGOQAGGEgblkUBcmKFPwNqXfxTW10K2iPnlz68=
Subject key identifier:   EB:D8:AA:BC:4B:00:7E:0D:08:96:F3:1D:E2:40:F1:F5:45:59:69:05
Certificate issuer:       /CN=A9114382/serialNumber=76887469D6410BE468077587847EEAA080B42272
Certificate serial:       CC
Authority key identifier: 76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/59136C26FFB911F09F6B6297696F56BC.roa
Signing time:             Sun 01 Mar 2026 17:31:52 +0000
ROA not before:           Sun 01 Feb 2026 21:59:58 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     56265
IP address blocks:        103.3.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl
                          rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114382, serialNumber=76887469D6410BE468077587847EEAA080B42272
        Validity
            Not Before: Feb  1 21:59:58 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47808-eedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:26:27:e7:00:2e:6e:73:f8:7e:c7:b0:ab:
                    ec:a2:c7:b2:cc:ab:15:36:62:21:3e:19:ef:ad:7a:
                    e4:25:98:23:80:00:8d:7d:46:ba:a8:1d:69:e5:13:
                    48:ea:64:66:4c:42:d1:b4:9c:69:0b:43:1d:64:91:
                    89:df:2d:6d:ef:27:99:94:09:fc:0b:6a:cb:91:2d:
                    c1:6c:62:6b:56:8e:9d:b7:a9:ac:40:fd:c0:61:9b:
                    cb:40:e2:5c:73:b0:fa:db:c7:46:86:f7:8b:a5:e6:
                    55:1f:32:33:7d:bb:80:18:5c:ef:bb:75:e0:e8:6b:
                    a6:2d:c1:f8:b1:b9:ca:52:f0:28:eb:a3:88:5f:27:
                    83:24:41:03:5a:b6:2f:bf:93:1c:da:7f:aa:84:71:
                    6a:e5:f5:09:3c:cc:7a:29:bd:ed:6d:14:6a:12:c7:
                    80:b8:c6:28:c6:42:88:9c:8d:d1:2e:0f:a5:12:00:
                    75:b2:69:eb:26:65:1b:93:2f:0f:57:30:5b:f3:de:
                    2a:b9:f1:d2:71:83:c6:d4:b7:e6:fd:bc:b3:c0:9b:
                    4c:5c:4e:09:7a:5e:53:10:a0:15:0b:aa:3c:a9:7b:
                    e5:4f:65:3f:38:46:f9:0c:a7:7d:eb:ac:67:76:0d:
                    c2:1a:55:8d:49:fe:50:85:ea:64:e0:e9:c8:7b:b7:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D8:AA:BC:4B:00:7E:0D:08:96:F3:1D:E2:40:F1:F5:45:59:69:05
            X509v3 Authority Key Identifier:
                keyid:76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/59136C26FFB911F09F6B6297696F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:b5:32:e1:1b:b3:b9:87:70:32:c9:4d:62:8f:10:80:3b:
         e4:e8:6a:2b:6c:ac:b9:a5:d6:bd:4d:f1:a4:7c:68:7b:bd:23:
         e5:72:fa:e9:91:0b:a0:e4:b3:fe:c6:b8:4f:2c:95:20:26:14:
         41:04:dc:74:84:cf:32:f5:5d:a9:cf:a2:e7:33:50:48:47:4f:
         d9:e7:86:28:d4:12:c0:02:9e:dc:b3:ad:92:ac:6a:b1:04:29:
         af:7b:96:2a:4e:72:1d:5b:56:65:ef:22:1b:86:da:4b:f1:bd:
         73:2a:66:4b:23:21:b3:ec:65:4b:02:ec:bc:29:10:44:74:de:
         5f:e4:cd:ba:66:90:81:56:2c:8f:b7:cb:aa:d3:e6:00:c3:3c:
         21:b2:c8:a2:49:33:bb:71:24:48:a2:d3:a4:e7:f3:23:c9:ac:
         d8:8b:28:a9:76:01:9d:66:36:4f:71:8f:0d:8c:e7:f0:1a:f2:
         a7:7b:37:7b:53:35:b0:38:2e:ae:7f:76:5c:7a:b5:e0:65:21:
         1c:a7:de:6b:b8:3b:1f:09:56:1d:ad:80:df:df:dc:e8:ad:84:
         b5:97:ff:8c:cb:77:1f:12:e9:10:99:42:df:0d:60:80:66:05:
         46:ba:7c:c4:9d:5f:39:14:45:27:04:2e:cc:94:ca:c4:5e:4a:
         e3:98:59:cf
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQzODIxMTAvBgNVBAUTKDc2ODg3NDY5RDY0MTBCRTQ2ODA3NzU4Nzg0N0VFQUEw
ODBCNDIyNzIwHhcNMjYwMjAxMjE1OTU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzgwOC1lZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuygmJ+cALm5z+H7HsKvsoseyzKsVNmIhPhnvrXrkJZgjgACNfUa6qB1p5RNI
6mRmTELRtJxpC0MdZJGJ3y1t7yeZlAn8C2rLkS3BbGJrVo6dt6msQP3AYZvLQOJc
c7D628dGhveLpeZVHzIzfbuAGFzvu3Xg6GumLcH4sbnKUvAo66OIXyeDJEEDWrYv
v5Mc2n+qhHFq5fUJPMx6Kb3tbRRqEseAuMYoxkKInI3RLg+lEgB1smnrJmUbky8P
VzBb894qufHScYPG1Lfm/byzwJtMXE4Jel5TEKAVC6o8qXvlT2U/OEb5DKd966xn
dg3CGlWNSf5Qhepk4OnIe7dU7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOvYqrxL
AH4NCJbzHeJA8fVFWWkFMB8GA1UdIwQYMBaAFHaIdGnWQQvkaAd1h4R+6qCAtCJy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDM4Mi80NEI1RkExQzBB
QzAxMUYwQjU4RjgyNDdDNEY5QUUwMi9kb2gwYWRaQkMtUm9CM1dIaEg3cW9JQzBJ
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RvaDBhZFpCQy1Sb0IzV0hoSDdxb0lDMEluSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTQzODIvNDRCNUZBMUMwQUMwMTFGMEI1OEY4MjQ3QzRGOUFFMDIvNTkxMzZDMjZG
RkI5MTFGMDlGNkI2Mjk3Njk2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwPsMA0GCSqGSIb3DQEBCwUAA4IBAQAnb7Uy4RuzuYdwMslNYo8Q
gDvk6GorbKy5pda9TfGkfGh7vSPlcvrpkQug5LP+xrhPLJUgJhRBBNx0hM8y9V2p
z6LnM1BIR0/Z54Yo1BLAAp7cs62SrGqxBCmve5YqTnIdW1Zl7yIbhtpL8b1zKmZL
IyGz7GVLAuy8KRBEdN5f5M26ZpCBViyPt8uq0+YAwzwhssiiSTO7cSRIotOk5/Mj
yazYiyipdgGdZjZPcY8NjOfwGvKnezd7UzWwOC6uf3ZcerXgZSEcp95ruDsfCVYd
rYDf39zorYS1l/+My3cfEukQmULfDWCAZgVGunzEnV85FEUnBC7MlMrEXkrjmFnP
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:09:43 2026 by rpki-client