Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/938E408897E011EB8870DB29C4F9AE02.roa
File:                     938E408897E011EB8870DB29C4F9AE02.roa (raw, json)
Hash identifier:          QYBeeWDToObu5YeRRiPoZJxNZpiaZK2fKH61yIoBXno=
Subject key identifier:   5D:B9:08:A3:D4:49:CB:8E:D8:DD:97:95:A0:5B:C1:81:5D:79:99:55
Certificate issuer:       /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial:       0DFC
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/938E408897E011EB8870DB29C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:39:49 +0000
ROA not before:           Tue 20 Jan 2026 18:15:12 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133547
IP address blocks:        103.200.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
                          rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3580 (0xdfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
        Validity
            Not Before: Jan 20 18:15:12 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a479e5-593e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:c9:ee:cb:df:22:d7:5b:94:c2:0e:64:9a:
                    76:d8:3a:c7:58:48:76:6c:bb:d0:6a:b8:08:1e:81:
                    c8:7b:32:e5:60:81:dd:25:8b:68:07:eb:f9:fb:c8:
                    63:bc:bf:cc:1b:d1:02:5f:d1:fb:95:f3:4d:b2:be:
                    55:74:13:e0:a4:bd:0e:f2:ab:12:af:fc:61:af:8f:
                    46:a2:24:8d:9b:b3:76:48:fb:70:2f:c1:ba:e0:08:
                    de:d4:66:dc:59:b4:e3:6c:6d:4a:80:68:4c:9b:03:
                    cb:fc:06:15:60:c7:ee:96:5a:b1:70:24:07:fb:32:
                    7a:ab:78:6b:78:d0:21:e4:17:50:bf:64:3e:ad:d0:
                    70:8d:d6:a7:86:0d:54:cc:96:c3:c0:86:fc:9f:f8:
                    c5:f2:10:62:52:7c:9f:b0:96:60:ed:ca:05:15:f1:
                    69:7b:65:c1:f6:5e:d6:d2:2b:04:5e:cc:46:4b:31:
                    98:df:63:41:f8:7f:90:c7:8e:33:ef:d6:b0:9f:8b:
                    12:af:03:78:71:36:2b:da:f1:26:cd:90:29:27:87:
                    ed:ca:5e:8d:51:e2:7a:e2:72:7a:5b:9e:9f:4c:75:
                    02:5b:cd:cc:34:c0:7d:2c:84:a1:cb:85:93:39:1c:
                    d7:aa:1c:ab:c3:32:37:43:10:8f:6a:6b:42:40:d3:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B9:08:A3:D4:49:CB:8E:D8:DD:97:95:A0:5B:C1:81:5D:79:99:55
            X509v3 Authority Key Identifier:
                keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/938E408897E011EB8870DB29C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:5d:a6:08:c3:90:88:16:56:7e:6e:0c:c7:9f:60:47:59:1b:
         a0:01:fa:bf:03:db:42:c1:d4:54:d2:e6:9c:f6:52:8a:ca:50:
         b7:c9:08:37:94:f8:04:e7:4f:66:1b:dd:3d:36:6c:ef:e9:5f:
         92:2a:27:32:30:44:8b:1e:14:c1:c4:32:49:31:73:dd:1a:ff:
         3c:bb:50:7e:a5:79:ee:08:43:06:c8:01:a8:1c:24:e3:a2:4b:
         0d:c6:fe:83:a9:db:26:30:c0:42:b0:83:ee:1b:88:d1:d2:a6:
         a7:07:e5:54:d2:af:93:cb:c6:10:3e:88:5f:97:19:6c:e5:5e:
         2c:5f:cc:89:5b:0a:a9:db:38:55:e1:95:dd:c3:51:f6:70:d5:
         25:61:ea:ee:0a:5a:ee:5c:bf:c7:10:0d:ca:3f:3b:69:7d:a9:
         6e:f7:df:95:f6:df:a1:cc:4e:ea:25:ee:1d:1e:21:1c:0a:08:
         05:58:de:a0:4e:e8:9a:80:58:c9:1c:f0:3e:f7:5a:b2:d0:1e:
         cc:1a:7c:84:ba:1d:fa:f7:50:c7:60:3e:e0:e8:be:23:7e:f7:
         79:dc:dd:c9:4c:35:dd:e5:0a:3a:8a:c5:28:4c:d3:0c:46:ac:
         2a:84:48:2f:0d:e2:b3:90:4a:2a:6a:78:80:99:bc:a0:e6:b4:
         bd:0c:c7:d7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw
ODc0OEQwREYwHhcNMjYwMTIwMTgxNTEyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzllNS01OTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMjJ7svfItdblMIOZJp22DrHWEh2bLvQargIHoHIezLlYIHdJYtoB+v5+8hj
vL/MG9ECX9H7lfNNsr5VdBPgpL0O8qsSr/xhr49GoiSNm7N2SPtwL8G64Aje1Gbc
WbTjbG1KgGhMmwPL/AYVYMfullqxcCQH+zJ6q3hreNAh5BdQv2Q+rdBwjdanhg1U
zJbDwIb8n/jF8hBiUnyfsJZg7coFFfFpe2XB9l7W0isEXsxGSzGY32NB+H+Qx44z
79awn4sSrwN4cTYr2vEmzZApJ4ftyl6NUeJ64nJ6W56fTHUCW83MNMB9LIShy4WT
ORzXqhyrwzI3QxCPamtCQNOHywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF25CKPU
ScuO2N2XlaBbwYFdeZlVMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0
RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkRDNDQvMjlCNkJFREFFNEZDMTFFOUIxM0I0ODYwQzRGOUFFMDIvOTM4RTQwODg5
N0UwMTFFQjg4NzBEQjI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ8gnMA0GCSqGSIb3DQEBCwUAA4IBAQBmXaYIw5CIFlZ+bgzHn2BH
WRugAfq/A9tCwdRU0uac9lKKylC3yQg3lPgE509mG909Nmzv6V+SKicyMESLHhTB
xDJJMXPdGv88u1B+pXnuCEMGyAGoHCTjoksNxv6DqdsmMMBCsIPuG4jR0qanB+VU
0q+Ty8YQPohflxls5V4sX8yJWwqp2zhV4ZXdw1H2cNUlYeruClruXL/HEA3KPztp
falu99+V9t+hzE7qJe4dHiEcCggFWN6gTuiagFjJHPA+91qy0B7MGnyEuh3691DH
YD7g6L4jfvd53N3JTDXd5Qo6isUoTNMMRqwqhEgvDeKzkEoqaniAmbyg5rS9DMfX
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:27 2026 by rpki-client