Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/0ADA583C5DB911F0A54D4C6FC4F9AE02.roa
File:                     0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (raw, json)
Hash identifier:          cNRSSCBGXrEJtVY9a3ODwV8okDz9FeXvjg7YBI8iA68=
Subject key identifier:   4F:7A:13:D5:D8:05:17:90:6B:7A:E2:35:AC:60:DC:CA:D2:7C:07:E9
Certificate issuer:       /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Certificate serial:       024C
Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/0ADA583C5DB911F0A54D4C6FC4F9AE02.roa
Signing time:             Fri 27 Feb 2026 02:21:43 +0000
ROA not before:           Fri 27 Feb 2026 02:21:43 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138509
IP address blocks:        103.84.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
                          rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
        Validity
            Not Before: Feb 27 02:21:43 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a0ffb7-f746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:2f:0b:fe:59:cc:11:e6:41:5f:4b:f5:9c:
                    e0:67:b8:8d:2c:cb:0c:2d:1f:9e:39:42:92:3b:fa:
                    11:66:38:99:85:8d:6b:ac:a9:ce:68:b8:19:be:22:
                    19:71:b8:58:e3:6b:f0:21:71:11:7d:32:a7:4f:c6:
                    49:ae:26:34:9b:f9:1a:dd:87:c9:67:15:e4:46:60:
                    60:55:2d:59:a9:b9:5b:f0:36:28:16:d6:2c:1d:2a:
                    f6:15:c2:b7:55:de:18:ce:76:5a:e0:3d:6e:5d:f5:
                    50:60:e5:89:5d:ae:a0:4d:bb:cc:ef:77:78:1d:19:
                    09:05:54:bd:44:a1:35:4e:6f:91:eb:76:6e:84:df:
                    71:04:ef:84:ce:3d:55:88:2f:3f:74:cd:0f:69:14:
                    15:47:0c:c9:a0:93:81:4e:54:39:2e:22:c6:e2:f1:
                    53:66:c0:c1:ca:94:8e:8a:3e:98:27:df:b6:0d:fd:
                    d6:b3:4d:aa:aa:90:e7:fc:52:7e:6f:f1:5c:82:cb:
                    4e:2c:96:27:48:78:51:3a:5f:d7:de:a5:98:d3:44:
                    ab:ff:16:d9:ad:db:49:e7:1a:ac:ab:86:61:ac:11:
                    6a:9b:c5:7d:6c:88:1d:49:61:e7:b9:61:10:f3:4c:
                    bf:89:3b:b4:e6:a7:c6:0e:36:d4:2b:9d:64:27:0f:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:13:D5:D8:05:17:90:6B:7A:E2:35:AC:60:DC:CA:D2:7C:07:E9
            X509v3 Authority Key Identifier:
                keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/0ADA583C5DB911F0A54D4C6FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:19:a2:d1:03:16:68:b0:d7:e0:ca:8f:d8:78:c5:cb:e5:4f:
         79:ad:ba:86:6a:6d:92:c7:62:e0:8a:96:68:64:a1:18:35:b4:
         92:67:23:4b:6d:74:01:e9:ca:e7:d7:42:73:92:b8:73:a3:42:
         ce:46:4b:b9:74:30:30:71:b5:42:0b:4b:01:b6:34:e7:a6:ea:
         44:e0:37:36:0a:87:7a:e1:cd:a6:1b:b4:bb:5a:fc:de:c1:3c:
         97:96:63:44:07:44:e1:85:c7:8f:e4:11:e5:fe:eb:9e:78:1e:
         32:98:10:47:11:01:aa:82:24:ba:17:4a:f5:a6:f9:9d:4a:96:
         83:5c:7f:d5:c4:36:de:50:6c:cb:71:db:99:c8:4d:22:9a:05:
         48:9b:d2:5a:e7:c6:c8:46:e6:e5:7d:3b:30:c5:e5:f1:54:79:
         97:ee:37:48:91:69:a6:9d:5e:5e:9c:f2:fb:f8:7d:73:02:ee:
         a9:3b:ad:20:2e:a8:a2:7d:64:bf:ed:1e:02:20:ce:ab:53:62:
         e1:19:36:53:a7:14:fd:1f:93:80:d8:3e:b8:a4:6e:bb:f3:de:
         0a:80:83:5b:f2:e0:bf:53:90:8b:42:44:6b:9d:a9:ec:1c:51:
         64:fd:e5:77:73:ea:d3:5d:20:c2:32:3b:bb:4d:62:25:23:0f:
         a2:d6:54:3b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx
RUY3MDQwREIwHhcNMjYwMjI3MDIyMTQzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWEwZmZiNy1mNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv7svC/5ZzBHmQV9L9ZzgZ7iNLMsMLR+eOUKSO/oRZjiZhY1rrKnOaLgZviIZ
cbhY42vwIXERfTKnT8ZJriY0m/ka3YfJZxXkRmBgVS1Zqblb8DYoFtYsHSr2FcK3
Vd4YznZa4D1uXfVQYOWJXa6gTbvM73d4HRkJBVS9RKE1Tm+R63ZuhN9xBO+Ezj1V
iC8/dM0PaRQVRwzJoJOBTlQ5LiLG4vFTZsDBypSOij6YJ9+2Df3Ws02qqpDn/FJ+
b/FcgstOLJYnSHhROl/X3qWY00Sr/xbZrdtJ5xqsq4ZhrBFqm8V9bIgdSWHnuWEQ
80y/iTu05qfGDjbUK51kJw9gTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE96E9XY
BReQa3riNaxg3MrSfAfpMB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE
MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUIzMTAvM0VCRDE3QzJBRDEwMTFFRDg1NEEzRTFEQzRGOUFFMDIvMEFEQTU4M0M1
REI5MTFGMEE1NEQ0QzZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1Q7MA0GCSqGSIb3DQEBCwUAA4IBAQBiGaLRAxZosNfgyo/YeMXL
5U95rbqGam2Sx2LgipZoZKEYNbSSZyNLbXQB6crn10Jzkrhzo0LORku5dDAwcbVC
C0sBtjTnpupE4Dc2Cod64c2mG7S7WvzewTyXlmNEB0ThhceP5BHl/uueeB4ymBBH
EQGqgiS6F0r1pvmdSpaDXH/VxDbeUGzLcduZyE0imgVIm9Ja58bIRublfTswxeXx
VHmX7jdIkWmmnV5enPL7+H1zAu6pO60gLqiifWS/7R4CIM6rU2LhGTZTpxT9H5OA
2D64pG67894KgINb8uC/U5CLQkRrnansHFFk/eV3c+rTXSDCMju7TWIlIw+i1lQ7
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:27 2026 by rpki-client