Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D791DEB48DEE11EEB451D416C4F9AE02.roa
File:                     D791DEB48DEE11EEB451D416C4F9AE02.roa (raw, json)
Hash identifier:          zhGf6vgm0C3GTje/jua3UnPl3jt39EY1BOnME5mb/HE=
Subject key identifier:   A8:43:E6:B7:4A:A8:CA:7B:C1:6B:62:78:59:1B:4D:0A:EF:A5:04:A4
Certificate issuer:       /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial:       042E
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D791DEB48DEE11EEB451D416C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:03:29 +0000
ROA not before:           Fri 05 Sep 2025 01:06:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     55410
IP address blocks:        103.121.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
                          rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
        Validity
            Not Before: Sep  5 01:06:59 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45541-d3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:3b:86:47:07:58:80:2f:fd:cc:d8:e4:ac:
                    90:13:c2:7d:9a:66:61:ec:a6:4f:78:99:f5:57:12:
                    d0:da:66:82:b5:4c:0b:c2:32:f1:4f:fc:1f:a5:ef:
                    bc:74:fb:c7:78:3c:26:6f:4e:87:63:59:80:18:52:
                    28:c9:cb:85:97:8d:d6:c1:fa:e7:9f:c0:94:54:2f:
                    b6:e6:b2:15:aa:2d:37:f2:ea:5a:12:2a:9f:f5:5f:
                    0d:0e:95:1f:63:bc:74:db:cb:23:48:08:ea:73:7b:
                    47:72:0c:8d:89:90:c0:d6:4b:ae:ea:4f:5c:d4:54:
                    e7:c9:1f:72:df:8a:6a:3d:42:4f:33:fd:44:37:92:
                    ca:f4:f0:db:a0:ea:a2:a2:8b:c5:48:00:3f:fe:10:
                    b6:58:2a:0c:2c:be:79:b3:a4:f4:be:63:1a:b0:7a:
                    e3:f1:53:f7:0c:22:2f:a8:f8:e2:3a:8e:13:5a:eb:
                    0f:ac:31:45:de:e5:dd:7b:74:e4:7d:f1:69:6a:37:
                    46:14:99:df:31:45:34:ad:85:f9:c0:79:7f:08:f4:
                    40:f9:c4:77:df:16:c8:52:8b:bf:e0:58:f9:79:1b:
                    a0:70:ba:b8:59:74:93:2a:ce:ac:68:15:30:23:c8:
                    05:d0:d7:05:40:c2:71:f5:32:d9:d3:4c:0b:ad:be:
                    43:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:43:E6:B7:4A:A8:CA:7B:C1:6B:62:78:59:1B:4D:0A:EF:A5:04:A4
            X509v3 Authority Key Identifier:
                keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D791DEB48DEE11EEB451D416C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:d5:eb:5d:40:e2:14:93:64:fc:80:a8:cb:42:68:69:8a:c4:
         d5:77:58:14:f4:8f:4f:59:01:d7:13:05:a5:82:90:72:6e:03:
         3d:25:83:b0:9c:7c:28:17:f2:da:e9:b8:75:f5:08:2d:b9:c5:
         b2:bb:86:10:2a:9d:c4:10:85:52:40:13:2a:93:e3:dd:a9:6b:
         26:e6:a8:37:e0:b7:12:e3:44:8d:31:ae:58:81:85:8a:33:44:
         05:a5:9b:49:79:aa:aa:d5:81:19:ea:ba:c6:cf:28:bb:27:1e:
         99:fe:85:24:ba:3a:ad:8e:b8:7a:3b:79:60:fd:6f:bb:e3:de:
         d0:79:d1:7a:7b:dd:a0:11:51:a7:f7:85:39:00:8e:00:4d:04:
         87:a5:45:63:20:96:50:fb:38:d0:f7:ab:65:07:8e:73:b6:46:
         5c:4e:0d:07:41:3f:a9:d6:38:04:0f:e8:12:0f:4a:55:db:8f:
         03:d6:15:f6:dd:62:d3:b9:ad:5f:29:c2:10:74:3e:5a:32:c2:
         ba:4b:6a:4a:c8:97:13:66:95:97:48:d6:9e:35:9b:d7:44:a9:
         70:eb:50:1f:61:2b:d4:84:1f:2a:dc:79:03:65:d0:96:a9:ed:
         4d:a1:12:b4:50:08:ab:a2:ba:82:c7:3d:bb:04:e7:65:76:a9:
         f6:d4:63:5e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxNEIxMTAvBgNVBAUTKDRGREU5NDkwRkYyRkYzRTlCRjkzQjQ5OEQ3NEYzMUY3
NUVBOUZDRkYwHhcNMjUwOTA1MDEwNjU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTU0MS1kM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApiI7hkcHWIAv/czY5KyQE8J9mmZh7KZPeJn1VxLQ2maCtUwLwjLxT/wfpe+8
dPvHeDwmb06HY1mAGFIoycuFl43Wwfrnn8CUVC+25rIVqi038upaEiqf9V8NDpUf
Y7x028sjSAjqc3tHcgyNiZDA1kuu6k9c1FTnyR9y34pqPUJPM/1EN5LK9PDboOqi
oovFSAA//hC2WCoMLL55s6T0vmMasHrj8VP3DCIvqPjiOo4TWusPrDFF3uXde3Tk
ffFpajdGFJnfMUU0rYX5wHl/CPRA+cR33xbIUou/4Fj5eRugcLq4WXSTKs6saBUw
I8gF0NcFQMJx9TLZ00wLrb5DvQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKhD5rdK
qMp7wWtieFkbTQrvpQSkMB8GA1UdIwQYMBaAFE/elJD/L/Ppv5O0mNdPMfdeqfz/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDE0Qi9EQzFFNzIxNEE0
RTYxMUVDOUVGNDMxNERDNEY5QUUwMi9UOTZVa1A4djgtbV9rN1NZMTA4eDkxNnBf
UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q5NlVrUDh2OC1tX2s3U1kxMDh4OTE2cF9QOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkQxNEIvREMxRTcyMTRBNEU2MTFFQzlFRjQzMTREQzRGOUFFMDIvRDc5MURFQjQ4
REVFMTFFRUI0NTFENDE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3nAMA0GCSqGSIb3DQEBCwUAA4IBAQB71etdQOIUk2T8gKjLQmhp
isTVd1gU9I9PWQHXEwWlgpBybgM9JYOwnHwoF/La6bh19QgtucWyu4YQKp3EEIVS
QBMqk+PdqWsm5qg34LcS40SNMa5YgYWKM0QFpZtJeaqq1YEZ6rrGzyi7Jx6Z/oUk
ujqtjrh6O3lg/W+7497QedF6e92gEVGn94U5AI4ATQSHpUVjIJZQ+zjQ96tlB45z
tkZcTg0HQT+p1jgED+gSD0pV248D1hX23WLTua1fKcIQdD5aMsK6S2pKyJcTZpWX
SNaeNZvXRKlw61AfYSvUhB8q3HkDZdCWqe1NoRK0UAirorqCxz27BOdldqn21GNe
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:14 2026 by rpki-client