Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/5BF797081CF411EBB5ADE642C4F9AE02.roa
File:                     5BF797081CF411EBB5ADE642C4F9AE02.roa (raw, json)
Hash identifier:          1c98NA9cHWOcz+QEe0M5ImtNh0IRowEb6OME0CEVJwU=
Subject key identifier:   39:30:B6:BF:74:78:75:0D:2C:E2:BE:DF:B1:04:E1:B2:BE:14:93:3C
Certificate issuer:       /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial:       07FE
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/5BF797081CF411EBB5ADE642C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:08:49 +0000
ROA not before:           Wed 10 Sep 2025 22:03:35 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     133066
IP address blocks:        103.241.156.0/22 maxlen: 22
                          103.241.156.0/24 maxlen: 24
                          103.241.157.0/24 maxlen: 24
                          103.241.158.0/24 maxlen: 24
                          103.241.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
                          rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2046 (0x7fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
        Validity
            Not Before: Sep 10 22:03:35 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a44871-f867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:fd:88:1f:b4:98:d3:50:71:ad:bd:ee:b1:
                    13:8b:0f:66:3c:b6:45:3e:3b:50:ee:e9:ad:ca:7c:
                    f9:fd:51:51:3b:bc:cc:d5:b4:02:77:19:2a:53:79:
                    27:fd:17:5b:56:64:1c:40:4b:ad:35:3f:e6:a3:c1:
                    1f:44:a8:ff:d9:5a:f1:36:89:29:56:9d:8c:dd:5f:
                    c0:0b:95:fd:04:34:d1:6a:19:aa:d7:b7:2d:4e:da:
                    09:64:d5:50:d9:56:3d:91:6f:17:62:82:99:01:63:
                    76:67:3a:af:ee:fa:bc:5c:4d:4c:7e:69:d4:14:4b:
                    8b:da:9e:53:87:f0:e7:16:2d:bf:8b:d7:9f:cd:62:
                    91:ff:f1:d3:40:0f:b7:9d:10:c4:75:f7:d7:b6:21:
                    98:fd:dc:58:b2:1f:4f:7f:3f:b5:7d:8c:7e:91:99:
                    04:d5:91:b1:23:ad:24:be:85:d5:66:0c:4e:78:ec:
                    eb:f3:80:4f:61:c7:2f:67:46:e9:47:b6:6c:e5:be:
                    41:fd:2c:bf:8c:40:c6:a6:4d:9c:c7:6e:e5:09:c3:
                    e3:12:87:94:0e:f0:4b:96:50:ab:0d:d1:fb:a5:c6:
                    fe:f7:50:41:cb:3e:bb:e2:9c:72:b7:28:db:8a:29:
                    fa:3a:be:03:b4:ea:c4:99:3e:e1:ea:e4:25:61:98:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:B6:BF:74:78:75:0D:2C:E2:BE:DF:B1:04:E1:B2:BE:14:93:3C
            X509v3 Authority Key Identifier:
                keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/5BF797081CF411EBB5ADE642C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:01:70:d4:50:1c:de:f3:ee:fc:d4:50:51:45:27:d2:39:0b:
         0a:e7:bf:5e:a6:ce:75:bd:7b:8d:dd:0a:ac:16:27:f4:a7:d3:
         e5:86:ce:d2:95:ec:47:d9:a2:17:70:c3:3d:81:b1:7b:18:80:
         78:3b:74:01:f1:f6:ce:e3:16:75:4f:9c:16:b1:8c:60:52:5c:
         b1:1a:05:00:9f:cc:45:83:6d:c1:41:a3:b4:29:30:af:fd:e0:
         d3:65:e1:60:ff:59:3d:7b:8c:69:af:b8:d4:55:d5:ad:31:f8:
         6f:f0:97:aa:f9:20:d9:bb:30:a0:c6:dc:6a:7f:d8:67:2a:eb:
         64:02:78:dd:0a:d3:c2:a1:7c:fb:95:21:68:f1:40:44:ab:09:
         91:a3:26:5d:26:92:2b:90:15:f8:b1:95:38:68:95:40:57:00:
         bd:a1:69:3a:94:e4:66:f6:ba:95:b0:fb:5d:c5:09:6b:8d:59:
         ff:81:21:b4:dc:d2:cb:97:6f:19:5d:7e:f9:7b:22:bd:9e:3f:
         65:e3:11:e4:f9:30:8f:9b:47:7e:14:b8:55:13:47:20:c4:b4:
         02:35:10:18:3f:e9:97:a2:2d:a5:72:f1:fc:66:f5:e8:48:62:
         d4:f3:08:b1:54:75:05:fe:3e:5e:d7:06:53:47:1a:57:7d:ca:
         b4:e4:7e:14
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC
RTNFRjVDNDgwHhcNMjUwOTEwMjIwMzM1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDg3MS1mODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3x79iB+0mNNQca297rETiw9mPLZFPjtQ7umtynz5/VFRO7zM1bQCdxkqU3kn
/RdbVmQcQEutNT/mo8EfRKj/2VrxNokpVp2M3V/AC5X9BDTRahmq17ctTtoJZNVQ
2VY9kW8XYoKZAWN2Zzqv7vq8XE1MfmnUFEuL2p5Th/DnFi2/i9efzWKR//HTQA+3
nRDEdffXtiGY/dxYsh9Pfz+1fYx+kZkE1ZGxI60kvoXVZgxOeOzr84BPYccvZ0bp
R7Zs5b5B/Sy/jEDGpk2cx27lCcPjEoeUDvBLllCrDdH7pcb+91BByz674pxytyjb
iin6Or4DtOrEmT7h6uQlYZgHUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDkwtr90
eHUNLOK+37EE4bK+FJM8MB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD
RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjJDOTQvODIyMkMyN0UxQ0YyMTFFQjg0MjA5NTQwQzRGOUFFMDIvNUJGNzk3MDgx
Q0Y0MTFFQkI1QURFNjQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ/GcMA0GCSqGSIb3DQEBCwUAA4IBAQBXAXDUUBze8+781FBRRSfS
OQsK579eps51vXuN3QqsFif0p9Plhs7SlexH2aIXcMM9gbF7GIB4O3QB8fbO4xZ1
T5wWsYxgUlyxGgUAn8xFg23BQaO0KTCv/eDTZeFg/1k9e4xpr7jUVdWtMfhv8Jeq
+SDZuzCgxtxqf9hnKutkAnjdCtPCoXz7lSFo8UBEqwmRoyZdJpIrkBX4sZU4aJVA
VwC9oWk6lORm9rqVsPtdxQlrjVn/gSG03NLLl28ZXX75eyK9nj9l4xHk+TCPm0d+
FLhVE0cgxLQCNRAYP+mXoi2lcvH8ZvXoSGLU8wixVHUF/j5e1wZTRxpXfcq05H4U
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:36 2026 by rpki-client