Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/C1313974CD3611F0AF85B537C4F9AE02.roa
File:                     C1313974CD3611F0AF85B537C4F9AE02.roa (raw, json)
Hash identifier:          f/A+LWguMXATEHJn4eJ0wJBZMEAJgXqjwqrEzSCq8pw=
Subject key identifier:   B6:7B:50:8E:97:3F:6D:D0:E3:E0:CB:DD:33:4F:F6:16:C0:31:CA:D1
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       10B7
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/C1313974CD3611F0AF85B537C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:21:15 +0000
ROA not before:           Sat 29 Nov 2025 15:19:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134153
IP address blocks:        103.138.26.0/24 maxlen: 24
                          103.138.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4279 (0x10b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Nov 29 15:19:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4758b-44f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:2b:4d:e0:1d:a7:a6:15:12:33:4f:93:e4:
                    bc:aa:6d:f9:bf:d0:e7:ab:bd:2c:bc:ce:77:6a:3f:
                    18:4d:c3:6f:bf:54:d9:41:95:13:37:02:b3:d7:84:
                    e1:8c:d6:2d:a3:25:45:a5:66:61:95:44:99:bf:62:
                    bb:d8:68:b3:d6:81:21:0c:11:9e:4e:c6:f2:3d:d4:
                    1a:e8:b9:78:f2:e3:f3:f7:a2:8e:c7:af:7a:9c:45:
                    cb:58:0b:e1:49:4e:59:c5:b9:31:51:49:9a:e4:e3:
                    0c:bc:22:89:87:00:74:76:fc:bd:1a:46:3e:51:43:
                    b2:b3:82:18:da:81:5b:45:7b:9d:94:c9:1e:5e:5b:
                    18:fe:7c:7f:f1:c7:84:e5:e9:3f:2f:8d:f1:c5:a5:
                    0b:84:d2:7a:7b:c6:99:7f:b0:8f:71:58:01:f2:e0:
                    a5:2e:f7:76:c1:06:27:2c:5d:9e:ce:84:03:5d:a8:
                    5f:35:a8:74:84:b2:ee:b2:ad:51:6c:27:71:f4:bb:
                    0f:45:b2:57:54:b7:a0:81:f3:f5:49:73:e1:46:f9:
                    3f:88:bb:68:e3:44:a3:92:c4:4f:85:4e:2c:57:c2:
                    e7:e7:15:f8:48:bd:da:25:76:e3:18:5f:8c:0a:51:
                    f7:0b:5b:69:f3:39:b8:6b:8d:42:f8:bf:10:fd:e0:
                    e4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7B:50:8E:97:3F:6D:D0:E3:E0:CB:DD:33:4F:F6:16:C0:31:CA:D1
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/C1313974CD3611F0AF85B537C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:f0:39:43:47:75:e6:e8:0a:69:c8:6d:c0:8f:0d:a3:09:6a:
         f7:68:b8:c2:f3:1b:c6:58:f8:20:70:98:b8:95:e8:47:1d:76:
         11:09:12:db:70:ac:2f:81:01:8e:b7:57:11:7b:71:a7:b5:8a:
         2a:11:8c:be:71:43:84:8f:5d:06:a5:87:36:a3:d2:66:a7:a6:
         99:fe:25:70:98:e9:a2:b3:d6:eb:af:fc:b3:3a:4b:7f:ef:c0:
         7b:dc:b5:26:f3:cf:13:30:79:51:64:d0:1e:7e:ed:2b:7b:4e:
         e9:d3:87:12:b6:50:df:07:a9:8e:de:94:da:2a:5d:b7:f8:3c:
         74:19:70:75:52:e5:18:cd:8d:30:f6:3d:ce:69:6e:6c:f2:9e:
         df:3f:c0:ab:a1:73:19:5d:ca:3f:31:e7:0f:ce:35:1e:b4:f8:
         6f:f3:a6:7d:63:d0:e9:c5:99:31:38:64:f7:e9:5d:b1:4e:37:
         6f:e3:d5:86:ba:85:64:86:4c:dc:36:2a:56:7d:bf:aa:26:f7:
         31:b9:75:68:70:bc:4d:08:1f:a9:09:cf:df:82:51:af:28:38:
         b7:54:87:75:a8:a0:b5:e2:e4:ea:55:75:4c:66:79:c2:11:e4:
         c3:c7:72:f1:62:b7:6f:f1:da:64:8f:de:12:cc:ac:77:ea:dd:
         f0:f9:84:77
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICELcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB
NjBDQjlBMzIwHhcNMjUxMTI5MTUxOTEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzU4Yi00NGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHArTeAdp6YVEjNPk+S8qm35v9Dnq70svM53aj8YTcNvv1TZQZUTNwKz14Th
jNYtoyVFpWZhlUSZv2K72Giz1oEhDBGeTsbyPdQa6Ll48uPz96KOx696nEXLWAvh
SU5ZxbkxUUma5OMMvCKJhwB0dvy9GkY+UUOys4IY2oFbRXudlMkeXlsY/nx/8ceE
5ek/L43xxaULhNJ6e8aZf7CPcVgB8uClLvd2wQYnLF2ezoQDXahfNah0hLLusq1R
bCdx9LsPRbJXVLeggfP1SXPhRvk/iLto40SjksRPhU4sV8Ln5xX4SL3aJXbjGF+M
ClH3C1tp8zm4a41C+L8Q/eDknwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLZ7UI6X
P23Q4+DL3TNP9hbAMcrRMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD
RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0M0MzIvMkRDQUJBNjg1Q0YyMTFFOTg0OTM5MjI0QzRGOUFFMDIvQzEzMTM5NzRD
RDM2MTFGMEFGODVCNTM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4oaMA0GCSqGSIb3DQEBCwUAA4IBAQCM8DlDR3Xm6AppyG3Ajw2j
CWr3aLjC8xvGWPggcJi4lehHHXYRCRLbcKwvgQGOt1cRe3GntYoqEYy+cUOEj10G
pYc2o9Jmp6aZ/iVwmOmis9brr/yzOkt/78B73LUm888TMHlRZNAefu0re07p04cS
tlDfB6mO3pTaKl23+Dx0GXB1UuUYzY0w9j3OaW5s8p7fP8CroXMZXco/MecPzjUe
tPhv86Z9Y9DpxZkxOGT36V2xTjdv49WGuoVkhkzcNipWfb+qJvcxuXVocLxNCB+p
Cc/fglGvKDi3VId1qKC14uTqVXVMZnnCEeTDx3LxYrdv8dpkj94SzKx36t3w+YR3
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:33 2026 by rpki-client