Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/BF3B175867E811E9ABCD3663C4F9AE02.roa
File:                     BF3B175867E811E9ABCD3663C4F9AE02.roa (raw, json)
Hash identifier:          kBAtymQhxoNCBoiRuR3BDkILywMhfNnTjLn1N+4UVlQ=
Subject key identifier:   20:73:61:44:2F:B1:D3:97:DE:A0:14:ED:FF:7F:8E:71:F4:B4:5E:A6
Certificate issuer:       /CN=A912BE49/serialNumber=4F1782E99564C28A36EEDC19F973D1D9274781FE
Certificate serial:       1B86
Authority key identifier: 4F:17:82:E9:95:64:C2:8A:36:EE:DC:19:F9:73:D1:D9:27:47:81:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/BF3B175867E811E9ABCD3663C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:30:01 +0000
ROA not before:           Fri 06 Jun 2025 16:36:06 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136503
IP address blocks:        103.90.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl
                          rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7046 (0x1b86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE49, serialNumber=4F1782E99564C28A36EEDC19F973D1D9274781FE
        Validity
            Not Before: Jun  6 16:36:06 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42339-e95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:cf:b6:65:a5:0f:65:d0:69:ca:bf:df:3a:
                    9e:92:8f:31:fd:84:c8:b4:a9:33:ac:03:37:fd:18:
                    20:a3:4f:f7:38:77:58:4c:71:7e:84:83:41:a0:68:
                    93:fa:88:67:31:34:b7:3f:a4:81:21:a2:c7:ba:5e:
                    f1:3e:3e:a6:33:87:b9:fd:bd:16:b6:0b:53:d6:af:
                    fd:7c:16:2b:aa:83:04:4c:7f:5a:71:b4:3b:1f:15:
                    80:38:51:61:b8:fe:2b:68:cd:83:fc:71:c6:fd:ca:
                    af:74:0a:1b:43:7e:51:05:07:90:55:46:01:b6:a9:
                    ec:5f:01:0c:36:bb:45:e0:e2:10:88:ef:40:64:e5:
                    e6:e1:3d:b5:9b:f7:18:da:f9:67:5a:bb:15:2d:b1:
                    9f:60:a9:3c:e4:a0:a8:a1:a3:c9:26:4a:78:fc:1b:
                    a6:9c:1b:9a:8b:d1:01:4c:0e:c3:8f:81:ed:b2:f4:
                    17:16:4d:5f:5d:be:2e:20:28:97:73:98:ab:97:c3:
                    92:d5:d0:ed:e1:83:a2:36:cb:1c:8e:a1:25:c3:0d:
                    70:8a:ae:8d:e6:93:ec:5d:39:8b:ba:e4:0c:5c:bd:
                    42:f7:ee:6b:09:75:48:51:06:9d:63:2b:3e:c7:6e:
                    d3:8c:df:b2:01:ad:74:2e:db:88:de:2d:be:30:d9:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:73:61:44:2F:B1:D3:97:DE:A0:14:ED:FF:7F:8E:71:F4:B4:5E:A6
            X509v3 Authority Key Identifier:
                keyid:4F:17:82:E9:95:64:C2:8A:36:EE:DC:19:F9:73:D1:D9:27:47:81:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/BF3B175867E811E9ABCD3663C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:29:41:b2:90:2d:0c:2d:73:a8:12:17:f9:b0:73:1b:2b:1b:
         a5:8f:f3:e5:94:2d:be:2a:82:c2:5c:64:34:ff:bc:20:7a:89:
         ea:9f:d1:c2:c5:a4:34:b7:0c:f0:21:69:25:10:e0:a2:7b:78:
         70:28:28:95:0a:c2:cc:54:fa:43:99:6b:3c:b2:e4:77:2e:6e:
         40:7a:b2:d6:13:65:8f:b4:1c:20:4b:6b:d3:c8:65:53:8f:68:
         3e:9c:10:95:8f:92:d2:bf:d4:d0:04:bd:74:ca:95:72:0f:7d:
         18:ae:33:0e:f3:ec:f2:ec:95:3b:0e:a4:2a:de:da:88:e7:8d:
         43:cd:7b:ee:1f:ed:31:a7:4c:34:ed:d3:e9:32:60:29:00:f6:
         fb:b0:7a:a5:82:94:38:f8:ab:67:82:25:05:5c:c4:75:06:72:
         1f:f6:3b:2e:7d:d4:f3:f5:6f:07:ac:41:a6:d6:a2:ab:89:44:
         d1:20:9a:a3:2c:16:bf:9d:e2:ed:c3:82:b6:c4:c2:43:1c:f3:
         84:8d:ec:f5:8e:4e:c7:81:e6:9b:39:7a:64:c4:ee:33:a0:bf:
         eb:9b:78:df:e8:7e:1f:41:22:93:ac:be:72:61:98:90:dd:cf:
         44:f5:3f:e0:14:98:64:57:b4:e7:f8:f4:48:54:b1:a7:84:80:
         54:2f:e2:1f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICG4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJFNDkxMTAvBgNVBAUTKDRGMTc4MkU5OTU2NEMyOEEzNkVFREMxOUY5NzNEMUQ5
Mjc0NzgxRkUwHhcNMjUwNjA2MTYzNjA2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjMzOS1lOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm4zPtmWlD2XQacq/3zqeko8x/YTItKkzrAM3/Rggo0/3OHdYTHF+hINBoGiT
+ohnMTS3P6SBIaLHul7xPj6mM4e5/b0WtgtT1q/9fBYrqoMETH9acbQ7HxWAOFFh
uP4raM2D/HHG/cqvdAobQ35RBQeQVUYBtqnsXwEMNrtF4OIQiO9AZOXm4T21m/cY
2vlnWrsVLbGfYKk85KCooaPJJkp4/BumnBuai9EBTA7Dj4HtsvQXFk1fXb4uICiX
c5irl8OS1dDt4YOiNsscjqElww1wiq6N5pPsXTmLuuQMXL1C9+5rCXVIUQadYys+
x27TjN+yAa10LtuI3i2+MNn9kQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCBzYUQv
sdOX3qAU7f9/jnH0tF6mMB8GA1UdIwQYMBaAFE8XgumVZMKKNu7cGflz0dknR4H+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0OS9DM0M4QjlGQTI4
Q0IxMUU3OUJFNDMwMzZDNEY5QUUwMi9UeGVDNlpWa3dvbzI3dHdaLVhQUjJTZEhn
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R4ZUM2WlZrd29vMjd0d1otWFBSMlNkSGdmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkJFNDkvQzNDOEI5RkEyOENCMTFFNzlCRTQzMDM2QzRGOUFFMDIvQkYzQjE3NTg2
N0U4MTFFOUFCQ0QzNjYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1rKMA0GCSqGSIb3DQEBCwUAA4IBAQCFKUGykC0MLXOoEhf5sHMb
Kxulj/PllC2+KoLCXGQ0/7wgeonqn9HCxaQ0twzwIWklEOCie3hwKCiVCsLMVPpD
mWs8suR3Lm5AerLWE2WPtBwgS2vTyGVTj2g+nBCVj5LSv9TQBL10ypVyD30YrjMO
8+zy7JU7DqQq3tqI541DzXvuH+0xp0w07dPpMmApAPb7sHqlgpQ4+KtngiUFXMR1
BnIf9jsufdTz9W8HrEGm1qKriUTRIJqjLBa/neLtw4K2xMJDHPOEjez1jk7Hgeab
OXpkxO4zoL/rm3jf6H4fQSKTrL5yYZiQ3c9E9T/gFJhkV7Tn+PRIVLGnhIBUL+If
-----END CERTIFICATE-----
Generated at Tue Mar 3 07:15:46 2026 by rpki-client