Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/5D7ACB26B90811F0ADC46B62C4F9AE02.roa
File:                     5D7ACB26B90811F0ADC46B62C4F9AE02.roa (raw, json)
Hash identifier:          4Afz0RP57yzwWRjbdV6j33r3wX6GOFsx3kHHTaSiTLI=
Subject key identifier:   B5:35:06:86:3F:19:9E:AB:F8:F7:80:94:DD:66:22:6A:4A:6B:62:98
Certificate issuer:       /CN=A913714B/serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Certificate serial:       3F
Authority key identifier: 2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/5D7ACB26B90811F0ADC46B62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:07:11 +0000
ROA not before:           Mon 03 Nov 2025 22:56:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135289
IP address blocks:        103.212.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
                          rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913714B, serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
        Validity
            Not Before: Nov  3 22:56:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3d78e-8c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:2f:1f:48:d0:44:43:53:92:6c:fd:08:4e:
                    f7:b5:60:34:07:4e:a3:2a:92:e3:84:f5:1f:cd:21:
                    3c:fe:f2:97:48:1c:ba:e2:2f:cd:e0:ca:09:bf:f8:
                    4a:ba:f0:3f:fb:20:f4:5d:f5:a8:26:be:9d:6e:76:
                    77:ba:35:45:a9:fc:5c:c6:e6:ca:7d:15:48:31:cb:
                    d0:c5:ad:0d:bf:7f:d3:2c:70:7a:c6:4f:ad:e2:7f:
                    c4:42:e9:cd:ad:9c:09:ba:c4:78:b9:3a:a8:64:d3:
                    a2:b3:73:2b:3d:80:6a:a8:22:6d:56:a1:13:40:ca:
                    64:ba:59:18:d0:60:34:e2:62:07:2f:0b:8c:88:5d:
                    f8:e6:d3:c6:41:bc:5a:e8:30:32:23:97:34:40:6a:
                    e5:b9:36:d7:90:25:79:48:f8:bc:15:ef:27:3c:12:
                    94:a4:50:a7:c4:86:ed:75:ad:d5:6c:c9:db:a3:ed:
                    d0:1a:2a:45:11:4d:99:5a:82:53:83:e7:f3:fb:fc:
                    78:05:2a:d2:9a:af:7c:bb:38:96:07:99:41:ea:a2:
                    33:f0:85:4a:e4:69:10:2e:46:d9:23:52:72:07:b6:
                    f8:12:8c:27:52:58:4c:5b:92:16:bd:f9:bc:8a:31:
                    fb:ab:92:81:e0:e1:d1:41:c1:e6:32:de:e6:52:2f:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:35:06:86:3F:19:9E:AB:F8:F7:80:94:DD:66:22:6A:4A:6B:62:98
            X509v3 Authority Key Identifier:
                keyid:2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/5D7ACB26B90811F0ADC46B62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:e8:1b:6b:21:39:47:9f:0b:c2:64:68:54:3b:7f:f0:c0:
         49:ad:7e:e6:bb:12:6a:f5:1f:95:c4:ca:2b:ca:26:3b:0a:6e:
         ac:19:76:63:ac:c8:7c:0e:c5:14:11:36:54:ef:0d:68:81:2e:
         e1:07:db:ae:9e:0b:49:cc:5e:3d:f3:b9:55:82:e0:e0:8d:8f:
         ad:67:b6:ab:11:5f:58:4b:7c:c4:80:98:d5:32:41:9e:42:0c:
         7f:a9:a3:d9:41:a7:c4:eb:41:b7:87:eb:d4:d7:db:ef:80:1c:
         2a:a6:26:55:38:43:0a:f5:fe:84:c3:fe:26:23:f1:36:74:bd:
         8a:3c:37:32:2c:63:fe:ae:a9:c5:57:76:c8:46:56:ab:3a:41:
         11:02:51:2d:bc:05:d5:be:22:1d:c7:73:0e:ca:b3:e7:fb:f4:
         14:ef:35:2a:74:a9:b1:5e:37:06:1d:81:f9:83:67:f3:1f:74:
         40:aa:9e:44:91:0b:b7:e6:5e:89:75:d8:5f:80:ba:c0:7e:ed:
         d8:69:f7:dd:d5:77:56:b8:ad:cb:bb:a6:d0:60:6b:ec:09:22:
         65:4b:f4:59:f7:07:ed:9d:6e:6d:53:de:5a:81:19:04:d0:fb:
         90:b9:7c:10:f8:57:fb:3a:fa:90:e9:32:f5:55:72:4f:93:0c:
         a1:5e:dc:38
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NzE0QjExMC8GA1UEBRMoMkVENjk2QzIzRDMzNDVFNzRCMEQ3MzRFMjRCNzEwQUE3
OEFBRTVGQTAeFw0yNTExMDMyMjU2NDNaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNzhlLThjNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7jy8fSNBEQ1OSbP0ITve1YDQHTqMqkuOE9R/NITz+8pdIHLriL83gygm/+Eq6
8D/7IPRd9agmvp1udne6NUWp/FzG5sp9FUgxy9DFrQ2/f9MscHrGT63if8RC6c2t
nAm6xHi5Oqhk06Kzcys9gGqoIm1WoRNAymS6WRjQYDTiYgcvC4yIXfjm08ZBvFro
MDIjlzRAauW5NteQJXlI+LwV7yc8EpSkUKfEhu11rdVsyduj7dAaKkURTZlaglOD
5/P7/HgFKtKar3y7OJYHmUHqojPwhUrkaRAuRtkjUnIHtvgSjCdSWExbkha9+byK
MfurkoHg4dFBweYy3uZSL5kZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUtTUGhj8Z
nqv494CU3WYiakprYpgwHwYDVR0jBBgwFoAULtaWwj0zRedLDXNOJLcQqniq5fow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTRCLzFBQkM3NUYwQjkw
ODExRjA4NzkwRjU2MUM0RjlBRTAyL0x0YVd3ajB6UmVkTERYTk9KTGNRcW5pcTVm
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTHRhV3dqMHpSZWRMRFhOT0pMY1FxbmlxNWZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzE0Qi8xQUJDNzVGMEI5MDgxMUYwODc5MEY1NjFDNEY5QUUwMi81RDdBQ0IyNkI5
MDgxMUYwQURDNDZCNjJDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABn1HowDQYJKoZIhvcNAQELBQADggEBAHq46BtrITlHnwvCZGhUO3/w
wEmtfua7Emr1H5XEyivKJjsKbqwZdmOsyHwOxRQRNlTvDWiBLuEH266eC0nMXj3z
uVWC4OCNj61ntqsRX1hLfMSAmNUyQZ5CDH+po9lBp8TrQbeH69TX2++AHCqmJlU4
Qwr1/oTD/iYj8TZ0vYo8NzIsY/6uqcVXdshGVqs6QRECUS28BdW+Ih3Hcw7Ks+f7
9BTvNSp0qbFeNwYdgfmDZ/MfdECqnkSRC7fmXol12F+AusB+7dhp993Vd1a4rcu7
ptBga+wJImVL9Fn3B+2dbm1T3lqBGQTQ+5C5fBD4V/s6+pDpMvVVck+TDKFe3Dg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:44 2026 by rpki-client