Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/2BACE2284D6B11EF9595843FC4F9AE02.roa
File:                     2BACE2284D6B11EF9595843FC4F9AE02.roa (raw, json)
Hash identifier:          4Y3b7k2nPTigUaGbPaUVrcioubstHM/tbJbvPVaNua0=
Subject key identifier:   36:BF:6F:FA:7A:A5:D5:64:00:46:24:A7:1B:A8:C8:5A:99:78:86:99
Certificate issuer:       /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial:       0BC5
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/2BACE2284D6B11EF9595843FC4F9AE02.roa
Signing time:             Mon 24 Aug 2026 19:38:47 +0000
ROA not before:           Mon 24 Aug 2026 19:38:47 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140949
IP address blocks:        103.120.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
                          rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3013 (0xbc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
        Validity
            Not Before: Aug 24 19:38:47 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8c9dc7-a50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:ab:33:8f:bf:c6:df:a4:92:d1:28:38:b9:
                    82:be:89:58:b9:ee:e6:1e:fc:c2:49:38:05:e0:02:
                    a6:52:69:80:87:95:89:b9:74:33:8f:f9:9f:d1:49:
                    d7:f8:82:20:57:0f:3f:bb:25:6a:33:9d:d2:59:ef:
                    c6:29:e6:1b:ca:b6:70:f9:ab:4d:23:00:f0:1b:f9:
                    ee:4d:a7:e2:89:50:20:c1:b1:07:78:0f:a2:e8:3d:
                    5d:dd:5d:7e:a6:56:32:db:b7:8c:ce:15:59:8b:4d:
                    9b:ae:f5:45:56:bb:47:77:a2:a4:89:7a:80:4b:8a:
                    06:02:6f:e6:a8:f0:06:9e:2b:f3:09:ab:84:10:0b:
                    c5:f4:10:a6:d0:3d:da:04:c2:a3:71:63:31:8a:7a:
                    c1:7d:a0:f4:fb:a8:94:5d:39:ae:dd:9e:d0:ba:a9:
                    93:fe:65:1b:8f:c0:aa:12:b1:9e:78:2c:76:7b:79:
                    dd:e8:e3:43:7b:f8:06:97:14:f8:54:4c:ad:74:f1:
                    56:63:9d:92:ee:82:82:7b:e6:73:fc:a7:04:b4:77:
                    9d:d1:99:49:01:79:1c:56:e1:84:91:21:1d:d8:25:
                    b7:7d:a9:74:89:d5:70:9a:10:0c:65:33:cf:65:8d:
                    2f:7b:15:b0:0c:0f:d2:04:75:47:18:de:f8:8c:63:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BF:6F:FA:7A:A5:D5:64:00:46:24:A7:1B:A8:C8:5A:99:78:86:99
            X509v3 Authority Key Identifier:
                keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/2BACE2284D6B11EF9595843FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:b6:4b:0c:28:26:48:9f:d8:6b:e4:9e:6e:e4:3b:8f:ea:5b:
         3a:4e:a2:e1:a8:2c:48:55:5f:60:6b:7c:9f:2c:f1:04:d7:6f:
         a4:b6:ad:a5:86:fa:c6:4d:f4:18:23:c9:68:b0:af:70:6c:c1:
         81:8f:9c:0b:2c:11:fb:6d:1a:76:20:e4:93:12:86:32:9e:57:
         9c:57:e8:20:59:36:01:90:75:19:79:3f:a9:02:7f:03:dc:39:
         a6:59:5d:71:14:0b:12:d5:04:55:3f:27:0f:76:87:3f:e8:13:
         0c:6b:c1:d0:dc:8b:7e:9e:f8:84:cc:65:e9:a5:37:b9:f1:6a:
         96:84:53:a3:9c:47:3c:67:cd:74:e5:65:6a:53:2d:15:43:2f:
         a8:29:5b:28:58:c9:da:8d:f2:64:e7:a7:53:4c:6c:93:16:5f:
         14:85:b9:f1:a7:71:f6:f7:c4:49:f0:00:ee:0a:3d:33:40:29:
         ac:4f:34:a4:d8:71:9e:91:99:eb:12:3b:61:24:46:46:d2:85:
         71:2b:ec:12:fe:08:b7:55:ef:db:0d:bf:8b:df:c5:c3:9f:ce:
         a9:c2:e7:e6:cb:d0:63:b4:23:66:c1:83:dd:d3:cb:f6:ba:f5:
         5e:02:57:bb:de:be:79:a4:f4:10:99:54:29:97:43:df:d6:b5:
         ab:22:d8:d9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz
OTBGQjEzMzEwHhcNMjYwODI0MTkzODQ3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThjOWRjNy1hNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtW+rM4+/xt+kktEoOLmCvolYue7mHvzCSTgF4AKmUmmAh5WJuXQzj/mf0UnX
+IIgVw8/uyVqM53SWe/GKeYbyrZw+atNIwDwG/nuTafiiVAgwbEHeA+i6D1d3V1+
plYy27eMzhVZi02brvVFVrtHd6KkiXqAS4oGAm/mqPAGnivzCauEEAvF9BCm0D3a
BMKjcWMxinrBfaD0+6iUXTmu3Z7QuqmT/mUbj8CqErGeeCx2e3nd6ONDe/gGlxT4
VEytdPFWY52S7oKCe+Zz/KcEtHed0ZlJAXkcVuGEkSEd2CW3fal0idVwmhAMZTPP
ZY0vexWwDA/SBHVHGN74jGMYEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDa/b/p6
pdVkAEYkpxuoyFqZeIaZMB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2
QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc4RDUvNjAxMzIxNjA1NkM4MTFFQUI2NjU3QTQwQzRGOUFFMDIvMkJBQ0UyMjg0
RDZCMTFFRjk1OTU4NDNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3gvMA0GCSqGSIb3DQEBCwUAA4IBAQC1tksMKCZIn9hr5J5u5DuP
6ls6TqLhqCxIVV9ga3yfLPEE12+ktq2lhvrGTfQYI8losK9wbMGBj5wLLBH7bRp2
IOSTEoYynlecV+ggWTYBkHUZeT+pAn8D3DmmWV1xFAsS1QRVPycPdoc/6BMMa8HQ
3It+nviEzGXppTe58WqWhFOjnEc8Z8105WVqUy0VQy+oKVsoWMnajfJk56dTTGyT
Fl8Uhbnxp3H298RJ8ADuCj0zQCmsTzSk2HGekZnrEjthJEZG0oVxK+wS/gi3Ve/b
Db+L38XDn86pwufmy9BjtCNmwYPd08v2uvVeAle73r55pPQQmVQpl0Pf1rWrItjZ
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:06:08 2026 by rpki-client