Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/16E91232932D11EABE8CE524C4F9AE02.roa
File:                     16E91232932D11EABE8CE524C4F9AE02.roa (raw, json)
Hash identifier:          uUv3koHO3ssGSsOTnRRShRwcxpKXBrZ/oXg1Bs3XDrM=
Subject key identifier:   40:E0:DD:2E:55:93:E3:E4:69:C0:3A:00:88:08:49:75:41:C8:99:20
Certificate issuer:       /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951
Certificate serial:       0A05
Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/16E91232932D11EABE8CE524C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:48:51 +0000
ROA not before:           Thu 08 Jan 2026 20:16:26 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138419
IP address blocks:        103.125.32.0/24 maxlen: 24
                          103.125.33.0/24 maxlen: 24
                          103.125.34.0/24 maxlen: 24
                          103.125.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl
                          rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565 (0xa05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951
        Validity
            Not Before: Jan  8 20:16:26 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a451d3-8837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:df:93:97:40:46:a1:4f:99:9c:12:ab:2a:
                    c2:f7:1e:dd:57:9d:2e:f5:00:84:96:36:35:e9:48:
                    bf:1b:7f:8b:bd:56:92:09:93:d4:7f:6a:2c:db:e7:
                    c2:e2:32:99:6d:cd:b3:38:06:6b:ab:91:34:60:4c:
                    65:70:6c:96:30:f9:d7:72:d7:c7:a2:17:ea:6d:03:
                    8c:0f:92:f8:6d:5f:81:56:df:18:8f:50:8a:8b:07:
                    56:85:c6:0e:84:9a:aa:66:e5:50:2f:f4:f7:2d:c2:
                    01:d0:8e:69:e2:ca:0b:d2:d0:94:6c:19:35:6a:93:
                    4c:ed:21:20:c0:51:54:50:5d:4d:83:6b:fc:94:68:
                    1f:d8:46:04:e3:12:be:97:10:fc:2f:1d:77:cd:0a:
                    1f:71:2d:c0:47:1b:e9:1f:ac:6a:da:bc:e8:89:bf:
                    c1:d8:de:17:6d:58:19:34:7e:e5:29:35:32:ab:f2:
                    68:96:e4:2c:16:cb:cc:45:0c:b0:47:20:b8:d5:20:
                    b9:e1:04:85:ba:00:e2:65:3f:ca:da:eb:1b:e7:9c:
                    4e:86:58:b5:da:07:db:e3:04:48:93:51:1b:91:7d:
                    51:de:e5:37:32:05:69:e9:1e:eb:d5:ff:ed:83:01:
                    93:fa:de:1f:06:8b:6a:bc:ea:95:9a:2f:da:94:55:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E0:DD:2E:55:93:E3:E4:69:C0:3A:00:88:08:49:75:41:C8:99:20
            X509v3 Authority Key Identifier:
                keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/16E91232932D11EABE8CE524C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:0a:37:bf:22:86:ac:2a:81:0f:98:e5:55:2d:73:54:d9:99:
         6e:49:98:67:15:59:73:5b:b8:49:9d:9f:4d:53:e8:0a:ae:19:
         9c:d6:17:d9:0c:3d:0c:b4:53:90:09:22:6e:75:3c:3e:36:71:
         1c:74:ae:a5:78:4d:df:ad:0d:e8:00:1b:3d:6e:ba:75:bc:28:
         1f:ea:aa:02:76:6f:9c:5b:e6:45:76:c9:3a:2d:a7:e3:b6:2f:
         62:a5:27:3a:41:92:09:16:ff:cb:28:f3:61:3e:67:89:0d:01:
         00:3c:e4:e5:19:7f:d3:f6:d6:7f:65:bd:4d:0e:76:01:96:07:
         4c:ad:57:02:0a:b7:08:39:ad:89:69:ea:08:91:94:8c:2c:0b:
         1c:5d:ca:6e:98:f3:51:5d:2c:5c:74:4a:e8:7a:13:1a:bd:3d:
         83:de:5f:e5:07:1c:fe:1f:88:34:03:e9:f1:1f:dc:0d:f8:d6:
         fb:42:62:b0:78:41:10:58:7b:2e:d0:67:01:08:d0:1a:ce:b7:
         12:6e:98:ff:d2:5d:74:33:f8:9f:9b:29:15:4c:ac:e1:64:b3:
         60:eb:0c:ba:6a:58:d3:6c:61:22:a1:00:ba:18:ac:a1:87:67:
         7c:19:4d:23:94:b8:e1:ea:be:bd:66:29:61:95:ac:5f:8b:1a:
         d8:d4:29:9d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC
NjZEM0Y5NTEwHhcNMjYwMTA4MjAxNjI2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTFkMy04ODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxsffk5dARqFPmZwSqyrC9x7dV50u9QCEljY16Ui/G3+LvVaSCZPUf2os2+fC
4jKZbc2zOAZrq5E0YExlcGyWMPnXctfHohfqbQOMD5L4bV+BVt8Yj1CKiwdWhcYO
hJqqZuVQL/T3LcIB0I5p4soL0tCUbBk1apNM7SEgwFFUUF1Ng2v8lGgf2EYE4xK+
lxD8Lx13zQofcS3ARxvpH6xq2rzoib/B2N4XbVgZNH7lKTUyq/JoluQsFsvMRQyw
RyC41SC54QSFugDiZT/K2usb55xOhli12gfb4wRIk1EbkX1R3uU3MgVp6R7r1f/t
gwGT+t4fBotqvOqVmi/alFVoXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEDg3S5V
k+PkacA6AIgISXVByJkgMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz
MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMxNEMvMkEzNjExMEM5MzJCMTFFQUJBNTY4QjFFQzRGOUFFMDIvMTZFOTEyMzI5
MzJEMTFFQUJFOENFNTI0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ30gMA0GCSqGSIb3DQEBCwUAA4IBAQBXCje/IoasKoEPmOVVLXNU
2ZluSZhnFVlzW7hJnZ9NU+gKrhmc1hfZDD0MtFOQCSJudTw+NnEcdK6leE3frQ3o
ABs9brp1vCgf6qoCdm+cW+ZFdsk6Lafjti9ipSc6QZIJFv/LKPNhPmeJDQEAPOTl
GX/T9tZ/Zb1NDnYBlgdMrVcCCrcIOa2JaeoIkZSMLAscXcpumPNRXSxcdEroehMa
vT2D3l/lBxz+H4g0A+nxH9wN+Nb7QmKweEEQWHsu0GcBCNAazrcSbpj/0l10M/if
mykVTKzhZLNg6wy6aljTbGEioQC6GKyhh2d8GU0jlLjh6r69ZilhlaxfixrY1Cmd
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:16 2026 by rpki-client