Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/A2BE54D2228B11F09A2FAA12C4F9AE02.roa
File:                     A2BE54D2228B11F09A2FAA12C4F9AE02.roa (raw, json)
Hash identifier:          /2Z80LXBeUbBKZ/WW3vinBmiiVL6JICT+hojjGMo/tU=
Subject key identifier:   29:D9:A4:8A:32:E3:E6:02:CF:A4:95:5C:BB:46:BA:BA:A6:60:8A:32
Certificate issuer:       /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial:       191D
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/A2BE54D2228B11F09A2FAA12C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:43:06 +0000
ROA not before:           Sat 26 Apr 2025 10:45:57 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     147302
IP address blocks:        103.83.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
                          rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6429 (0x191d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
        Validity
            Not Before: Apr 26 10:45:57 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a44269-22bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:a4:ac:d8:b7:ef:cc:0f:b5:f6:ae:59:68:
                    65:ac:be:7d:2a:5b:fd:16:ab:bc:37:d6:86:0f:e4:
                    0e:82:c6:3f:b6:5f:f6:bb:cd:d5:2b:7f:fa:04:04:
                    7d:0e:51:1e:15:59:10:ba:44:6d:f6:55:19:35:42:
                    a8:73:ee:fb:b8:d6:21:88:7d:47:04:02:2d:a2:8e:
                    b8:53:c4:c2:88:c3:0d:11:8e:2e:03:b5:f8:05:26:
                    c0:a4:34:49:4d:22:b5:b7:10:30:90:95:54:f4:45:
                    57:43:a4:41:38:2d:62:d5:bf:a3:5d:20:f9:52:12:
                    4f:67:0c:14:b8:00:1d:a7:69:b2:23:bf:61:9a:45:
                    5a:c4:da:84:b6:b0:e9:f1:dd:75:a1:f8:16:f5:d2:
                    d1:45:cc:0e:32:36:76:36:4f:ff:77:ab:03:34:71:
                    f9:4e:53:23:05:d8:a4:e7:26:b6:8b:a9:e2:c6:67:
                    38:a7:bb:10:34:dd:7c:1d:1f:9a:23:5a:b6:dc:3e:
                    59:ad:63:9c:59:cf:b5:18:82:fe:2e:f7:6a:d7:65:
                    ca:45:55:d9:40:a9:69:a6:3f:02:c2:c7:4a:88:97:
                    77:e4:23:02:41:bc:e3:d3:81:61:3b:7f:89:41:46:
                    5e:17:bb:ee:fe:c3:89:35:e1:0f:31:49:cb:66:73:
                    78:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:A4:8A:32:E3:E6:02:CF:A4:95:5C:BB:46:BA:BA:A6:60:8A:32
            X509v3 Authority Key Identifier:
                keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/A2BE54D2228B11F09A2FAA12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:15:9d:d4:c2:af:2f:ab:a9:81:7c:1e:e4:6f:a0:40:5d:48:
         3c:af:58:42:2e:c3:bb:13:bd:db:6e:e3:eb:fc:96:03:4d:3c:
         d6:c0:50:ae:d2:72:4c:27:05:8e:b0:c9:17:dc:25:81:b8:29:
         72:ff:07:dc:cc:99:51:f9:db:43:91:ef:03:95:3d:11:cd:7d:
         81:05:34:80:e1:dc:88:08:32:05:e1:c3:4e:1d:34:a3:9f:29:
         39:0e:73:79:c1:3a:ab:a1:3c:e3:4b:f1:02:27:02:39:cd:fa:
         50:e3:10:2c:18:45:23:fd:63:8f:85:7e:d1:66:e2:0a:2e:3b:
         4f:62:bb:58:c8:f3:d9:71:20:39:23:c4:e8:b1:eb:c6:04:76:
         38:eb:57:8d:98:a7:e5:46:1f:f6:49:6f:31:51:4d:8b:09:a1:
         44:e1:0d:2f:da:3b:37:c6:e7:ac:7f:e4:18:d8:ef:ba:0e:50:
         80:ac:a4:83:e8:4e:c1:2d:2e:2b:c7:27:ad:cb:8b:b6:d3:ee:
         40:ad:48:73:0c:94:1a:2d:d1:e4:ee:55:6b:2e:b3:74:97:36:
         0f:b6:ab:73:49:e4:be:2e:bf:29:7e:67:0f:0f:b4:eb:40:bb:
         84:4a:25:c9:30:0b:f9:43:47:8e:5d:a0:be:20:65:67:a2:00:
         b1:04:2b:3d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM5NTMxMTAvBgNVBAUTKDFFNjc4QzZBMjE3RDcxNUIzMEQ5Q0IyMkQ1Rjg4NEQx
N0M1Njk5QjYwHhcNMjUwNDI2MTA0NTU3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDI2OS0yMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoROkrNi378wPtfauWWhlrL59Klv9Fqu8N9aGD+QOgsY/tl/2u83VK3/6BAR9
DlEeFVkQukRt9lUZNUKoc+77uNYhiH1HBAItoo64U8TCiMMNEY4uA7X4BSbApDRJ
TSK1txAwkJVU9EVXQ6RBOC1i1b+jXSD5UhJPZwwUuAAdp2myI79hmkVaxNqEtrDp
8d11ofgW9dLRRcwOMjZ2Nk//d6sDNHH5TlMjBdik5ya2i6nixmc4p7sQNN18HR+a
I1q23D5ZrWOcWc+1GIL+Lvdq12XKRVXZQKlppj8CwsdKiJd35CMCQbzj04FhO3+J
QUZeF7vu/sOJNeEPMUnLZnN4dwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCnZpIoy
4+YCz6SVXLtGurqmYIoyMB8GA1UdIwQYMBaAFB5njGohfXFbMNnLItX4hNF8Vpm2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzk1My8xMjJEOEQyOEE0
OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNWc3cyY3NpMWZpRTBYeFdt
YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0htZU1haUY5Y1ZzdzJjc2kxZmlFMFh4V21iWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzM5NTMvMTIyRDhEMjhBNDk2MTFFN0E5MjZFRDREQzRGOUFFMDIvQTJCRTU0RDIy
MjhCMTFGMDlBMkZBQTEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1NZMA0GCSqGSIb3DQEBCwUAA4IBAQBlFZ3Uwq8vq6mBfB7kb6BA
XUg8r1hCLsO7E73bbuPr/JYDTTzWwFCu0nJMJwWOsMkX3CWBuCly/wfczJlR+dtD
ke8DlT0RzX2BBTSA4dyICDIF4cNOHTSjnyk5DnN5wTqroTzjS/ECJwI5zfpQ4xAs
GEUj/WOPhX7RZuIKLjtPYrtYyPPZcSA5I8TosevGBHY461eNmKflRh/2SW8xUU2L
CaFE4Q0v2js3xuesf+QY2O+6DlCArKSD6E7BLS4rxyety4u20+5ArUhzDJQaLdHk
7lVrLrN0lzYPtqtzSeS+Lr8pfmcPD7TrQLuESiXJMAv5Q0eOXaC+IGVnogCxBCs9
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:43 2026 by rpki-client