Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/5B639C667CEB11EDA3D10364C4F9AE02.roa
File:                     5B639C667CEB11EDA3D10364C4F9AE02.roa (raw, json)
Hash identifier:          jOpgFFCS/1CmFmMq11LzMDo5QLDmdjyDxLZ4T6TyavY=
Subject key identifier:   2B:B9:26:7D:D9:46:D3:E4:AD:57:EE:FC:E3:02:18:39:3D:E4:BA:41
Certificate issuer:       /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial:       0433
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/5B639C667CEB11EDA3D10364C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:03:09 +0000
ROA not before:           Sun 01 Mar 2026 01:22:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136970
IP address blocks:        103.146.158.0/23 maxlen: 23
                          103.146.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
                          rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075 (0x433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
        Validity
            Not Before: Mar  1 01:22:24 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4552d-6982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:93:f5:68:df:43:ad:6c:17:f8:54:8a:6d:43:
                    ec:a5:24:8c:fa:4f:fa:3d:4c:b2:a9:7d:40:b1:16:
                    22:09:3e:24:d6:44:a6:97:69:41:fd:e7:59:71:0a:
                    25:d3:b5:a0:e7:e6:28:ca:7a:e5:fc:b6:0c:be:f3:
                    78:20:42:da:10:a8:3b:f2:8e:c8:b2:47:75:be:95:
                    77:a3:5a:62:aa:f8:01:c4:fe:80:24:01:ec:80:ba:
                    01:6f:a7:84:51:5a:cb:50:47:f1:4b:b7:01:03:e4:
                    23:82:7f:df:83:c0:e9:24:8d:28:fd:d0:a2:9f:15:
                    d0:57:73:92:0f:4c:da:b6:52:ca:66:5b:81:d5:ef:
                    58:0d:8a:91:ed:3c:18:d2:0b:f3:6c:ac:68:3c:b9:
                    41:a3:0c:6e:57:60:33:01:88:7b:af:56:f4:86:ac:
                    73:4f:00:e0:eb:c7:16:99:b2:d5:48:99:6e:af:cf:
                    1f:38:aa:8e:3b:0e:56:99:fd:fb:df:3c:ec:08:00:
                    9f:ba:46:69:34:69:50:de:37:d5:35:86:17:90:b8:
                    66:60:81:7c:b5:11:a0:86:56:20:a1:bf:91:36:a9:
                    e7:08:00:a1:e8:e4:a2:a7:9c:a1:2d:69:a5:44:93:
                    10:5d:99:6e:9d:fd:32:d9:03:a1:49:07:09:f2:75:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B9:26:7D:D9:46:D3:E4:AD:57:EE:FC:E3:02:18:39:3D:E4:BA:41
            X509v3 Authority Key Identifier:
                keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/5B639C667CEB11EDA3D10364C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:84:04:dd:b1:ef:ca:e1:fd:48:be:a7:40:0c:7a:8b:41:48:
         dd:12:ee:57:80:43:6d:d6:40:50:cb:aa:e7:f8:4d:23:f2:dc:
         a8:f7:69:4e:1d:df:24:95:42:f8:74:65:22:ca:d4:6c:49:f1:
         4c:ad:dc:c6:fe:4b:98:a5:db:4b:9f:62:b9:9e:a0:02:da:95:
         48:b6:38:db:4c:0b:68:9d:0b:63:ab:e6:01:2f:1c:8c:f4:89:
         d8:18:f0:18:c6:52:2c:50:3d:b9:d8:1e:a0:f2:e6:65:b4:0b:
         e1:e1:61:8f:91:34:5b:24:2d:a2:24:80:2d:ee:2c:f5:08:3e:
         fe:73:ec:43:de:55:f8:54:38:76:6a:88:7c:35:ac:8c:cd:70:
         e7:67:7e:d0:1f:2e:df:90:e6:29:6a:8a:ae:85:aa:94:9a:79:
         d6:35:48:10:76:0b:85:57:f2:3e:32:df:97:e1:3b:97:fb:22:
         c8:cd:01:6f:ff:e6:be:00:8d:d3:d8:7d:72:d5:cb:de:b4:6f:
         67:1f:14:67:aa:cc:f2:c2:b2:11:58:3b:53:dd:f1:5d:da:88:
         94:93:e2:b3:60:79:65:fe:a0:f8:23:b6:c6:ad:c9:8b:f6:ef:
         c1:0e:51:5a:9d:41:d3:32:d1:6e:aa:f6:4d:dc:90:7a:fc:85:
         53:02:f0:7d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0
OUM1N0Y1MTUwHhcNMjYwMzAxMDEyMjI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTUyZC02OTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApZP1aN9DrWwX+FSKbUPspSSM+k/6PUyyqX1AsRYiCT4k1kSml2lB/edZcQol
07Wg5+Yoynrl/LYMvvN4IELaEKg78o7Iskd1vpV3o1piqvgBxP6AJAHsgLoBb6eE
UVrLUEfxS7cBA+Qjgn/fg8DpJI0o/dCinxXQV3OSD0zatlLKZluB1e9YDYqR7TwY
0gvzbKxoPLlBowxuV2AzAYh7r1b0hqxzTwDg68cWmbLVSJlur88fOKqOOw5Wmf37
3zzsCACfukZpNGlQ3jfVNYYXkLhmYIF8tRGghlYgob+RNqnnCACh6OSip5yhLWml
RJMQXZlunf0y2QOhSQcJ8nUWJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCu5Jn3Z
RtPkrVfu/OMCGDk95LpBMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE
RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjg1OUEvQkFDQUI3RUM5REZFMTFFQ0I4N0Y1MTQ3QzRGOUFFMDIvNUI2MzlDNjY3
Q0VCMTFFREEzRDEwMzY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5KeMA0GCSqGSIb3DQEBCwUAA4IBAQA/hATdse/K4f1IvqdADHqL
QUjdEu5XgENt1kBQy6rn+E0j8tyo92lOHd8klUL4dGUiytRsSfFMrdzG/kuYpdtL
n2K5nqAC2pVItjjbTAtonQtjq+YBLxyM9InYGPAYxlIsUD252B6g8uZltAvh4WGP
kTRbJC2iJIAt7iz1CD7+c+xD3lX4VDh2aoh8NayMzXDnZ37QHy7fkOYpaoquhaqU
mnnWNUgQdguFV/I+Mt+X4TuX+yLIzQFv/+a+AI3T2H1y1cvetG9nHxRnqszywrIR
WDtT3fFd2oiUk+KzYHll/qD4I7bGrcmL9u/BDlFanUHTMtFuqvZN3JB6/IVTAvB9
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:27 2026 by rpki-client