Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa
File:                     A152FA389E2211E99CA85B6CC4F9AE02.roa (raw, json)
Hash identifier:          PSdpJXiw2qJwGRhfmH3Cf/3/r3CVZrL1qpooaEqdMDs=
Subject key identifier:   25:34:29:16:76:D9:BD:66:9E:40:3D:7F:AD:B0:8B:39:B9:C0:AD:3A
Certificate issuer:       /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744
Certificate serial:       0F0A
Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:49:06 +0000
ROA not before:           Fri 22 Aug 2025 17:56:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139267
IP address blocks:        103.140.164.0/23 maxlen: 24
                          2404:ffc0::/32 maxlen: 32
                          2404:ffc0::/48 maxlen: 48
                          2404:ffc0:1::/48 maxlen: 48
                          2404:ffc0:2::/48 maxlen: 48
                          2404:ffc0:3::/48 maxlen: 48
                          2404:ffc0:4::/48 maxlen: 48
                          2404:ffc0:5::/48 maxlen: 48
                          2404:ffc0:6::/48 maxlen: 48
                          2404:ffc0:7::/48 maxlen: 48
                          2404:ffc0:8::/48 maxlen: 48
                          2404:ffc0:9::/48 maxlen: 48
                          2404:ffc0:a::/48 maxlen: 48
                          2404:ffc0:b::/48 maxlen: 48
                          2404:ffc0:c::/48 maxlen: 48
                          2404:ffc0:d::/48 maxlen: 48
                          2404:ffc0:e::/48 maxlen: 48
                          2404:ffc0:f::/48 maxlen: 48
                          2404:ffc0:10::/48 maxlen: 48
                          2404:ffc0:11::/48 maxlen: 48
                          2404:ffc0:12::/48 maxlen: 48
                          2404:ffc0:13::/48 maxlen: 48
                          2404:ffc0:14::/48 maxlen: 48
                          2404:ffc0:15::/48 maxlen: 48
                          2404:ffc0:16::/48 maxlen: 48
                          2404:ffc0:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl
                          rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3850 (0xf0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EAE6, serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744
        Validity
            Not Before: Aug 22 17:56:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a443d2-2c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:2b:5f:f7:79:41:c2:08:ce:e6:82:1f:79:
                    69:d1:36:ce:dd:27:a0:1b:3e:94:48:6e:fa:6c:bd:
                    a2:4a:43:3e:df:69:ae:61:f3:5b:2f:ab:f7:a8:32:
                    e2:aa:13:d2:23:d5:d3:1e:91:0c:e9:0f:80:c2:e1:
                    6c:e6:0e:74:ad:a2:a5:83:40:3e:15:a5:8e:21:b2:
                    81:a2:78:58:9d:e4:1a:38:82:30:ac:57:90:6e:dd:
                    c3:c9:2e:5d:dd:1c:96:ea:7e:53:35:62:20:aa:d7:
                    c5:db:54:23:a6:e5:20:86:d7:be:37:8d:f0:ea:f2:
                    4e:29:c8:39:4e:18:01:07:a3:a8:51:a1:f0:92:df:
                    83:b4:73:27:34:8e:4a:35:61:81:e8:2d:a4:5c:8b:
                    14:ba:ed:c0:74:ad:8c:8c:40:40:53:2d:7c:7b:32:
                    20:84:bf:2a:45:b9:e1:e0:a7:cd:02:30:b0:ef:7d:
                    d5:19:34:fc:4f:52:c8:9d:fb:05:6b:2c:27:df:8c:
                    e9:37:e8:f5:aa:d4:4a:df:a0:44:8a:04:17:ef:57:
                    d2:62:d4:0f:6a:2c:6f:38:bd:34:a4:80:61:3f:85:
                    ef:84:7c:19:db:40:b0:15:16:3c:b5:12:85:10:1b:
                    5b:29:01:bb:14:84:07:ca:e2:6b:77:5a:32:db:0c:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:34:29:16:76:D9:BD:66:9E:40:3D:7F:AD:B0:8B:39:B9:C0:AD:3A
            X509v3 Authority Key Identifier:
                keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.164.0/23
                IPv6:
                  2404:ffc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:ae:0c:16:3a:87:c3:6a:1c:52:3e:d5:b0:0d:84:39:e2:cf:
         9f:73:c9:f8:23:7f:fb:99:18:ac:0b:f0:e6:38:82:ae:55:1d:
         db:76:b9:31:2c:51:89:4e:11:38:c0:32:50:5d:23:c6:58:1c:
         92:98:8a:c1:d6:c7:1b:f1:df:16:ff:0c:4d:5f:e5:13:d0:8c:
         1a:41:24:ed:0c:45:09:59:48:fa:a0:47:40:9f:3e:d2:07:c3:
         c2:40:17:34:19:44:eb:b3:fc:3b:64:fd:19:98:ae:72:8f:3c:
         3c:da:01:b7:f0:70:3a:f0:26:60:6b:bb:41:6a:49:36:52:79:
         ae:7d:c4:6a:f5:89:c0:b7:c6:88:7d:95:82:80:76:26:3f:99:
         fe:73:07:e5:61:0a:f2:1a:4c:33:11:e3:af:59:be:f4:57:c0:
         00:54:35:99:d1:48:46:13:ab:cd:6d:c5:39:2c:4f:a5:c9:7b:
         31:27:53:2f:98:8b:bf:19:17:6b:74:02:8a:fb:20:7f:71:19:
         1d:04:95:be:16:c6:0a:3e:2b:b0:e2:51:ab:4f:c4:8a:7d:35:
         0b:9d:9a:ff:b5:01:5c:0c:34:21:da:45:1a:0a:56:a3:86:cd:
         94:c3:6d:8c:ab:9d:d6:26:7f:40:d9:37:07:84:18:59:fd:af:
         00:1a:f4:e0
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VBRTYxMTAvBgNVBAUTKDNEMzRGMUVBNTlFREIwODZGMTczMzRENTk5RTkzMTBE
NzFGRTA3NDQwHhcNMjUwODIyMTc1NjQwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDNkMi0yYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtPArX/d5QcIIzuaCH3lp0TbO3SegGz6USG76bL2iSkM+32muYfNbL6v3qDLi
qhPSI9XTHpEM6Q+AwuFs5g50raKlg0A+FaWOIbKBonhYneQaOIIwrFeQbt3DyS5d
3RyW6n5TNWIgqtfF21QjpuUghte+N43w6vJOKcg5ThgBB6OoUaHwkt+DtHMnNI5K
NWGB6C2kXIsUuu3AdK2MjEBAUy18ezIghL8qRbnh4KfNAjCw733VGTT8T1LInfsF
aywn34zpN+j1qtRK36BEigQX71fSYtQPaixvOL00pIBhP4XvhHwZ20CwFRY8tRKF
EBtbKQG7FIQHyuJrd1oy2wwI1QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCU0KRZ2
2b1mnkA9f62wizm5wK06MB8GA1UdIwQYMBaAFD008epZ7bCG8XM01ZnpMQ1x/gdE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUFFNi83QkMyOTMyNjlC
RjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJYnhjelRWbWVreERYSC1C
MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BUVHg2bG50c0lieGN6VFZtZWt4RFhILUIwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0VBRTYvN0JDMjkzMjY5QkY5MTFFOUFBNkQ4NDUzQzRGOUFFMDIvQTE1MkZBMzg5
RTIyMTFFOTlDQTg1QjZDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ4ykMA0EAgACMAcDBQAkBP/AMA0GCSqGSIb3DQEBCwUAA4IBAQAO
rgwWOofDahxSPtWwDYQ54s+fc8n4I3/7mRisC/DmOIKuVR3bdrkxLFGJThE4wDJQ
XSPGWBySmIrB1scb8d8W/wxNX+UT0IwaQSTtDEUJWUj6oEdAnz7SB8PCQBc0GUTr
s/w7ZP0ZmK5yjzw82gG38HA68CZga7tBakk2UnmufcRq9YnAt8aIfZWCgHYmP5n+
cwflYQryGkwzEeOvWb70V8AAVDWZ0UhGE6vNbcU5LE+lyXsxJ1MvmIu/GRdrdAKK
+yB/cRkdBJW+FsYKPiuw4lGrT8SKfTULnZr/tQFcDDQh2kUaClajhs2Uw22Mq53W
Jn9A2TcHhBhZ/a8AGvTg
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:35 2026 by rpki-client