Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/213F506AEF8A11F08E686F05616F56BC.roa
File:                     213F506AEF8A11F08E686F05616F56BC.roa (raw, json)
Hash identifier:          +0TIbXgSWfY4Rfh4n/KWV5MfMbBrpgMrwoEbGLQfWss=
Subject key identifier:   00:DE:BC:C2:14:FB:8C:F5:1C:9B:B9:13:6E:E8:E5:11:68:10:87:02
Certificate issuer:       /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial:       2336
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/213F506AEF8A11F08E686F05616F56BC.roa
Signing time:             Sun 01 Mar 2026 18:43:34 +0000
ROA not before:           Mon 12 Jan 2026 07:45:10 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134128
IP address blocks:        103.54.148.0/23 maxlen: 23
                          103.54.148.0/24 maxlen: 24
                          103.54.149.0/24 maxlen: 24
                          2402:3b80::/32 maxlen: 32
                          2402:3b80::/48 maxlen: 48
                          2402:3b80:1::/48 maxlen: 48
                          2402:3b80:2::/48 maxlen: 48
                          2402:3b80:3::/48 maxlen: 48
                          2402:3b80:4::/48 maxlen: 48
                          2402:3b80:5::/48 maxlen: 48
                          2402:3b80:6::/48 maxlen: 48
                          2402:3b80:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
                          rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9014 (0x2336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
        Validity
            Not Before: Jan 12 07:45:10 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a488d6-b05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:6f:df:07:f9:d5:15:bb:48:4c:a4:7a:39:
                    ee:ec:e4:e8:04:7e:18:e0:64:12:d4:dc:33:f5:e6:
                    2e:5c:37:27:da:b3:5c:95:83:3a:49:ad:44:05:6d:
                    12:52:65:ae:e5:b8:4c:81:b5:90:a0:8e:a6:48:13:
                    ce:31:bc:a6:db:fc:99:55:4f:3b:33:0b:fc:7e:8b:
                    d1:4b:ce:b9:c3:1b:27:0e:30:3e:5f:f7:b0:07:5c:
                    e8:44:5f:93:5d:b9:31:b4:c8:8d:49:3d:b0:02:c4:
                    dc:a3:6c:ec:ee:5d:9b:b8:33:08:f8:95:d5:91:cb:
                    ac:13:b2:59:98:c3:05:a9:66:4b:ca:a3:6e:82:26:
                    9d:75:d7:46:cc:cc:11:39:cb:6a:18:2a:30:43:c7:
                    ad:5d:99:1d:c8:62:ab:14:57:cf:5c:52:dd:0e:a7:
                    c9:7e:96:77:51:ff:6a:96:1c:96:73:7f:aa:e6:bf:
                    7e:7a:df:26:2a:50:18:51:53:7e:f1:07:06:c9:29:
                    81:0b:b4:89:48:ad:8e:4b:62:e4:fd:06:23:dc:aa:
                    3e:ff:c4:40:7d:85:90:e2:aa:c0:60:d2:3a:86:ab:
                    29:24:7e:06:12:c1:fb:3c:18:5a:bd:7e:04:59:06:
                    f6:9a:c1:4c:1d:aa:4f:e1:31:24:d9:da:8d:90:c3:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DE:BC:C2:14:FB:8C:F5:1C:9B:B9:13:6E:E8:E5:11:68:10:87:02
            X509v3 Authority Key Identifier:
                keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/213F506AEF8A11F08E686F05616F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.148.0/23
                IPv6:
                  2402:3b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:10:13:c2:e7:d1:4f:65:03:3f:8f:f2:70:8f:e0:72:a3:05:
         d7:4c:fb:f6:28:33:8a:a3:25:05:24:30:04:3e:38:c5:ba:b4:
         e3:78:55:ed:5c:0f:ea:e8:66:97:01:55:7e:d1:f9:1f:f3:c8:
         87:64:dc:49:50:21:b0:0c:8c:f3:bb:43:60:d1:6b:6b:3b:60:
         5c:71:91:f3:8c:d1:08:37:1a:23:b7:51:b2:c5:ae:2e:7c:69:
         37:8d:f9:d3:f1:28:66:3e:e3:82:9a:54:19:48:3f:fa:e0:1e:
         06:d6:b0:b3:64:71:6b:bc:64:1a:e3:1b:ac:88:d1:a5:35:58:
         a8:20:a0:c2:d6:42:e5:39:d8:f1:1f:47:5c:ae:b2:9e:60:6c:
         e0:87:94:1f:a9:ea:76:a9:30:0e:52:da:14:57:e0:41:3d:2b:
         14:56:ff:23:a4:92:0d:2f:68:70:2b:c0:a0:ff:0d:62:93:80:
         2b:55:0b:f2:c6:84:7e:20:94:47:d2:a7:05:3e:67:3a:ba:c1:
         cf:f8:88:50:e6:b3:2d:ac:4f:bd:83:79:11:ea:01:2a:87:04:
         ca:2a:aa:e4:a6:8c:aa:95:f6:9b:ad:4e:c6:b4:53:b5:60:71:
         3d:d7:a4:a9:41:b0:d7:63:bd:2b:e4:db:58:d3:6c:8f:39:da:
         65:f8:11:60
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICIzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2
OEY2OTg1M0IwHhcNMjYwMTEyMDc0NTEwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODhkNi1iMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA34Jv3wf51RW7SEykejnu7OToBH4Y4GQS1Nwz9eYuXDcn2rNclYM6Sa1EBW0S
UmWu5bhMgbWQoI6mSBPOMbym2/yZVU87Mwv8fovRS865wxsnDjA+X/ewB1zoRF+T
XbkxtMiNST2wAsTco2zs7l2buDMI+JXVkcusE7JZmMMFqWZLyqNugiaddddGzMwR
OctqGCowQ8etXZkdyGKrFFfPXFLdDqfJfpZ3Uf9qlhyWc3+q5r9+et8mKlAYUVN+
8QcGySmBC7SJSK2OS2Lk/QYj3Ko+/8RAfYWQ4qrAYNI6hqspJH4GEsH7PBhavX4E
WQb2msFMHapP4TEk2dqNkMPpHwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFADevMIU
+4z1HJu5E27o5RFoEIcCMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy
RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvMjEzRjUwNkFF
RjhBMTFGMDhFNjg2RjA1NjE2RjU2QkMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZzaUMA0EAgACMAcDBQAkAjuAMA0GCSqGSIb3DQEBCwUAA4IBAQAT
EBPC59FPZQM/j/Jwj+ByowXXTPv2KDOKoyUFJDAEPjjFurTjeFXtXA/q6GaXAVV+
0fkf88iHZNxJUCGwDIzzu0Ng0WtrO2BccZHzjNEINxojt1Gyxa4ufGk3jfnT8Shm
PuOCmlQZSD/64B4G1rCzZHFrvGQa4xusiNGlNVioIKDC1kLlOdjxH0dcrrKeYGzg
h5Qfqep2qTAOUtoUV+BBPSsUVv8jpJINL2hwK8Cg/w1ik4ArVQvyxoR+IJRH0qcF
Pmc6usHP+IhQ5rMtrE+9g3kR6gEqhwTKKqrkpoyqlfabrU7GtFO1YHE916SpQbDX
Y70r5NtY02yPOdpl+BFg
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:13:41 2026 by rpki-client