Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa
File:                     D08850D2B71411ED98AFCC20C4F9AE02.roa (raw, json)
Hash identifier:          H6AHYpW4fxedkWOJ1b74wcntzRDeX2FCiN5ESsGwoSA=
Subject key identifier:   32:D1:9E:CB:0E:48:EB:C3:D9:D1:30:BA:45:34:4D:3A:59:93:53:27
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       26DF
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:40:16 +0000
ROA not before:           Wed 31 Dec 2025 18:14:42 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     24242424
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9951 (0x26df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Dec 31 18:14:42 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a48810-7fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:53:2d:f2:4c:db:25:99:62:be:5b:d1:84:
                    9e:0a:ba:84:5e:13:72:a7:02:53:5f:79:dd:74:4e:
                    b5:70:93:69:02:34:ae:e7:96:0c:b7:23:b8:3d:7f:
                    c2:6a:c4:f7:c8:08:29:23:95:43:08:3e:fa:ad:16:
                    17:73:c7:4d:ab:4f:da:7b:b9:41:f4:38:04:65:95:
                    5f:9e:f8:4a:85:a5:c3:45:11:89:63:4a:23:ec:56:
                    df:82:29:53:eb:a9:ff:d0:f0:95:c1:a3:e6:a2:0a:
                    3c:07:38:3a:e5:c4:0c:2b:c1:ac:e8:c0:97:34:bf:
                    87:76:ab:d1:d2:b5:8d:fe:3b:5a:ea:ca:46:0b:c9:
                    f9:41:42:85:b9:c1:3f:2b:cd:ef:35:2c:e2:05:69:
                    e5:29:91:0d:6b:a5:45:38:09:8f:2f:91:9c:58:5c:
                    d8:0d:62:63:0d:3a:ce:ef:a6:bf:12:bf:b3:96:65:
                    bf:8b:b4:38:cd:9d:44:8f:ab:63:1a:0b:ce:96:df:
                    c6:4a:b0:93:b5:6d:e8:25:98:0b:80:5a:0f:bf:d6:
                    9b:f7:cd:b8:74:d9:fe:12:db:6f:cb:2f:a6:2e:ba:
                    6c:b4:af:83:eb:f4:70:34:c1:76:dd:a4:41:cf:44:
                    fc:ae:3e:e7:a3:32:71:85:2b:7f:43:9d:3e:97:fc:
                    07:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D1:9E:CB:0E:48:EB:C3:D9:D1:30:BA:45:34:4D:3A:59:93:53:27
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:5f:ad:34:61:f0:07:2d:e3:57:8f:c3:70:06:27:b2:f9:4b:
         9c:0f:18:48:18:43:b4:8f:44:64:fe:f5:78:76:c7:e6:c7:fb:
         88:21:59:97:4c:d5:5a:a4:e6:20:c5:49:a6:96:a9:99:9b:ed:
         1a:3d:6e:c2:24:fa:a5:6c:ba:51:89:e0:ba:64:d6:e8:3a:45:
         29:2d:d5:c8:0f:74:0a:82:80:16:f9:ea:5e:eb:62:55:03:52:
         d0:ae:73:cf:2c:db:eb:a3:8d:a5:24:af:fa:76:0e:e1:7a:a7:
         d3:6a:e5:46:e2:b0:9f:c9:9c:dd:92:2e:53:e9:3b:b5:1b:4a:
         e2:15:b3:ca:f7:b9:37:b3:f0:93:51:12:26:c9:28:18:18:33:
         5b:4b:44:40:b8:55:5b:ce:bc:4f:50:ed:61:71:ab:92:1e:f7:
         ff:d5:4b:6a:1a:fe:d5:6f:9c:a3:1b:53:e2:d4:0b:49:d4:7d:
         38:78:04:10:b5:cc:a9:cb:00:a3:fb:13:c3:4f:12:3e:ed:ae:
         eb:8f:01:80:64:44:d8:27:dc:0e:9d:36:4b:d0:b2:64:dc:0b:
         48:69:f1:c4:5d:49:7d:4e:64:d2:56:0a:9a:cd:44:6b:39:a4:
         b0:e5:38:5f:9c:84:27:7c:0c:32:f8:f0:ec:24:e8:2b:0f:01:
         89:70:f6:15
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw
RDNEOEE2RDAwHhcNMjUxMjMxMTgxNDQyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODgxMC03ZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDJTLfJM2yWZYr5b0YSeCrqEXhNypwJTX3nddE61cJNpAjSu55YMtyO4PX/C
asT3yAgpI5VDCD76rRYXc8dNq0/ae7lB9DgEZZVfnvhKhaXDRRGJY0oj7FbfgilT
66n/0PCVwaPmogo8Bzg65cQMK8Gs6MCXNL+HdqvR0rWN/jta6spGC8n5QUKFucE/
K83vNSziBWnlKZENa6VFOAmPL5GcWFzYDWJjDTrO76a/Er+zlmW/i7Q4zZ1Ej6tj
GgvOlt/GSrCTtW3oJZgLgFoPv9ab9824dNn+Ettvyy+mLrpstK+D6/RwNMF23aRB
z0T8rj7nozJxhSt/Q50+l/wHCwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDLRnssO
SOvD2dEwukU0TTpZk1MnMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC
N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvRDA4ODUwRDJC
NzE0MTFFRDk4QUZDQzIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4rSMA0GCSqGSIb3DQEBCwUAA4IBAQAnX600YfAHLeNXj8NwBiey
+UucDxhIGEO0j0Rk/vV4dsfmx/uIIVmXTNVapOYgxUmmlqmZm+0aPW7CJPqlbLpR
ieC6ZNboOkUpLdXID3QKgoAW+epe62JVA1LQrnPPLNvro42lJK/6dg7heqfTauVG
4rCfyZzdki5T6Tu1G0riFbPK97k3s/CTURImySgYGDNbS0RAuFVbzrxPUO1hcauS
Hvf/1UtqGv7Vb5yjG1Pi1AtJ1H04eAQQtcypywCj+xPDTxI+7a7rjwGAZETYJ9wO
nTZL0LJk3AtIafHEXUl9TmTSVgqazURrOaSw5ThfnIQnfAwy+PDsJOgrDwGJcPYV
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:26 2026 by rpki-client