Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
File:                     8D3981D8E27F11EEA6719536C4F9AE02.roa (raw, json)
Hash identifier:          EH6q56ISDCHDpLM+gTINYlfYJSkWlD4ZZojPS20s3Yw=
Subject key identifier:   2B:E0:8E:86:D9:5C:6E:2A:7B:CA:DA:D5:50:23:D6:8F:69:74:2C:E8
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D9D
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:41:40 +0000
ROA not before:           Fri 30 Jan 2026 16:14:24 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.81.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7581 (0x1d9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Jan 30 16:14:24 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46c44-495e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:35:8a:b2:3e:04:4a:ef:d9:fa:db:8b:5a:
                    9b:ac:64:5a:4f:b7:4e:c6:6c:d4:1a:d0:b8:85:14:
                    19:32:ec:b4:1e:a4:c1:b2:0f:ef:1a:5e:a2:0d:70:
                    3f:b4:b3:51:24:dd:56:53:65:e7:63:83:21:fd:9e:
                    e0:94:54:85:5a:81:e9:74:2f:7f:a5:2b:9a:ce:59:
                    a0:4a:09:e2:74:fc:82:b3:07:7e:95:69:c2:af:23:
                    22:40:8c:dc:32:81:12:ac:a1:3f:76:88:d6:97:ea:
                    bf:a2:06:ed:6c:ec:b3:0a:02:35:f1:04:74:d6:26:
                    74:45:8a:d3:69:da:99:7f:69:9c:72:20:70:2c:26:
                    60:48:01:03:c1:31:e8:a1:de:b6:c1:71:2c:b3:08:
                    08:10:01:4a:58:7d:e8:77:af:68:db:b2:e8:dd:87:
                    2e:89:62:ac:fd:ed:b2:e6:2c:af:b4:3f:aa:9e:37:
                    b4:ed:45:b1:d6:e8:4e:5b:d0:33:c1:1f:b7:58:fd:
                    14:40:09:47:67:95:64:b8:d9:33:1c:05:c4:32:11:
                    86:b7:e6:b3:5a:d2:85:42:79:f4:e7:19:2c:60:8d:
                    d1:7b:8a:99:53:50:f3:e8:6d:53:55:6a:d8:16:25:
                    56:df:46:28:c3:a7:7d:d7:f1:0a:78:70:98:64:96:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E0:8E:86:D9:5C:6E:2A:7B:CA:DA:D5:50:23:D6:8F:69:74:2C:E8
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:67:a2:51:8e:f7:57:e5:3c:2c:31:4c:b4:d0:a0:9c:7f:1e:
         14:19:c2:2b:40:34:00:2a:f4:12:47:a0:f6:d8:b4:4a:7a:bc:
         c5:f1:b0:21:e9:66:5a:4c:0b:e9:dc:90:10:87:52:20:f9:4d:
         07:87:9c:83:8e:f0:0c:d0:65:6d:e0:0a:4d:dc:12:a5:29:36:
         b8:20:ce:be:4f:bc:de:d1:5d:01:31:5e:9a:34:21:f7:24:7b:
         8d:69:0b:98:4f:2b:ac:35:55:74:6f:d8:0d:2e:05:29:8c:78:
         92:45:84:e4:c8:3b:bf:47:ef:9e:b9:4b:79:40:f5:bc:e5:b5:
         22:c1:61:48:60:46:74:7e:49:fa:1f:2f:70:db:3e:d2:86:d7:
         8b:64:e2:c4:e3:7e:53:ad:23:be:53:e6:5d:e3:b6:8a:28:cc:
         1e:4e:ff:46:ab:a6:17:4e:90:bb:15:06:44:7b:a6:5d:bf:55:
         0d:37:26:f1:0b:7a:ae:db:0b:94:19:e3:08:a8:7a:b5:1b:8b:
         e3:48:6f:fe:e6:00:43:94:bc:b9:c6:76:29:9c:de:70:f7:fe:
         f2:cd:ee:81:ce:78:e4:ab:59:87:0c:ab:e6:20:be:2c:b0:a4:
         66:ad:de:bc:96:43:f9:63:af:eb:13:be:1c:92:28:bb:ac:10:
         02:83:49:a1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICHZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURBNEExMTAvBgNVBAUTKDc4OTIwNjRERDQ1Qjk3RUQwOTQ3MUVCMDU0NTFFQUMw
OThDOUNCM0QwHhcNMjYwMTMwMTYxNDI0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmM0NC00OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqwo1irI+BErv2frbi1qbrGRaT7dOxmzUGtC4hRQZMuy0HqTBsg/vGl6iDXA/
tLNRJN1WU2XnY4Mh/Z7glFSFWoHpdC9/pSuazlmgSgnidPyCswd+lWnCryMiQIzc
MoESrKE/dojWl+q/ogbtbOyzCgI18QR01iZ0RYrTadqZf2mcciBwLCZgSAEDwTHo
od62wXEsswgIEAFKWH3od69o27Lo3YcuiWKs/e2y5iyvtD+qnje07UWx1uhOW9Az
wR+3WP0UQAlHZ5VkuNkzHAXEMhGGt+azWtKFQnn05xksYI3Re4qZU1Dz6G1TVWrY
FiVW30Yow6d91/EKeHCYZJaVCwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCvgjobZ
XG4qe8ra1VAj1o9pdCzoMB8GA1UdIwQYMBaAFHiSBk3UW5ftCUcesFRR6sCYycs9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE0QS83MjU3RjkzMkJD
QjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwtMEpSeDZ3VkZIcXdKakp5
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VKSUdUZFJibC0wSlJ4NndWRkhxd0pqSnl6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MURBNEEvNzI1N0Y5MzJCQ0IwMTFFNjk5OEU4MjU2QzRGOUFFMDIvOEQzOTgxRDhF
MjdGMTFFRUE2NzE5NTM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1E0MA0GCSqGSIb3DQEBCwUAA4IBAQCrZ6JRjvdX5TwsMUy00KCc
fx4UGcIrQDQAKvQSR6D22LRKerzF8bAh6WZaTAvp3JAQh1Ig+U0Hh5yDjvAM0GVt
4ApN3BKlKTa4IM6+T7ze0V0BMV6aNCH3JHuNaQuYTyusNVV0b9gNLgUpjHiSRYTk
yDu/R++euUt5QPW85bUiwWFIYEZ0fkn6Hy9w2z7ShteLZOLE435TrSO+U+Zd47aK
KMweTv9Gq6YXTpC7FQZEe6Zdv1UNNybxC3qu2wuUGeMIqHq1G4vjSG/+5gBDlLy5
xnYpnN5w9/7yze6Bznjkq1mHDKvmIL4ssKRmrd68lkP5Y6/rE74ckii7rBACg0mh
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:02 2026 by rpki-client