Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa
File:                     706382C2B67811E8A2696333C4F9AE02.roa (raw, json)
Hash identifier:          5nBBVCtoHYCq4rwPHMRcZOxfv5m45SHxgbVpeR2AOJo=
Subject key identifier:   83:DD:76:A2:E9:5B:8E:0D:47:01:2B:11:6E:02:AE:BD:D4:AD:87:3A
Certificate issuer:       /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Certificate serial:       1380
Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:45:46 +0000
ROA not before:           Mon 22 Sep 2025 17:06:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138203
IP address blocks:        103.129.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
                          rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4992 (0x1380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
        Validity
            Not Before: Sep 22 17:06:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4430a-2731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:d2:89:04:ac:fe:ef:f2:94:89:56:59:a1:
                    66:04:db:ce:6a:fc:55:33:78:14:0b:f1:ae:26:81:
                    20:d0:33:ec:f3:23:64:67:9b:77:05:27:9a:85:e8:
                    70:9a:22:80:a5:f4:2e:d4:15:12:55:ea:a4:36:b9:
                    26:2c:0b:56:ba:76:b7:57:67:f9:2a:54:7d:6e:35:
                    b2:68:6e:66:7d:25:62:3d:45:41:dc:55:3b:db:83:
                    5d:30:c5:d2:1c:ab:73:8b:18:23:a5:1c:76:f3:e0:
                    80:f2:f2:28:2b:35:3c:07:28:8b:a2:e9:ad:c0:27:
                    a7:0b:98:f2:a7:20:d3:e7:ff:59:b1:77:22:3f:ba:
                    5d:6f:3b:37:c4:08:de:0c:8a:f0:93:1a:4f:cb:9d:
                    6a:31:e7:48:02:49:0a:74:c6:6e:c0:6f:9a:75:9e:
                    c3:18:73:3d:bd:cb:27:00:4e:c6:ce:89:0d:e7:36:
                    b5:bf:8f:f4:ff:f7:43:ec:6f:31:1c:a3:f9:f8:b2:
                    35:be:fb:bc:00:f0:67:9f:a9:9b:0f:83:db:0d:40:
                    37:72:9b:37:ee:17:89:ea:10:dc:dd:31:64:e2:db:
                    15:20:13:47:d5:35:b1:84:f7:83:01:05:3e:a9:85:
                    2d:4f:7b:ed:c1:8c:ab:d9:54:e4:1a:51:b3:e8:28:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DD:76:A2:E9:5B:8E:0D:47:01:2B:11:6E:02:AE:BD:D4:AD:87:3A
            X509v3 Authority Key Identifier:
                keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:c7:02:a7:61:01:a2:6b:66:a9:f2:84:68:15:d1:8e:24:
         81:dc:39:fb:d1:db:89:84:c6:1b:4c:84:2d:6c:99:28:b0:ec:
         57:90:1f:f7:da:5d:af:d8:b2:95:23:0d:c5:5a:72:25:4b:f0:
         de:f5:52:a3:f8:66:79:1e:97:ed:f7:e8:a4:c4:b4:5c:f7:7f:
         e2:30:93:ab:66:a5:8d:b2:c5:3d:4c:71:45:ad:6a:b8:2f:bc:
         f1:49:ff:5a:85:41:77:fd:1e:d6:65:1a:60:73:28:b7:d9:fd:
         d6:ab:b7:31:45:a1:dd:60:71:80:96:e0:f9:9d:3f:0d:c5:c4:
         a9:02:f8:b9:b7:e2:37:f9:b3:a9:aa:85:64:6a:a7:93:90:69:
         78:b1:ef:83:54:54:d4:62:26:20:9a:d8:9d:8c:97:57:fa:8d:
         5f:08:00:d1:9a:41:8b:18:6e:b5:52:15:37:68:cb:81:6a:41:
         a2:a0:ab:92:7d:3f:5e:14:d1:1a:e0:89:38:4f:c0:b1:68:69:
         e5:6f:24:3a:6e:7d:51:2c:1b:8c:68:8f:16:46:d7:8d:8b:ae:
         7c:22:1b:fc:8f:88:46:66:fd:af:51:81:70:30:4b:56:15:9e:
         3d:97:54:b0:81:e6:5e:0f:ab:89:4b:a2:16:c8:46:d9:6a:e5:
         92:c3:72:bd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICE4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC
QkJFNzQxQkMwHhcNMjUwOTIyMTcwNjIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDMwYS0yNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyCvSiQSs/u/ylIlWWaFmBNvOavxVM3gUC/GuJoEg0DPs8yNkZ5t3BSeahehw
miKApfQu1BUSVeqkNrkmLAtWuna3V2f5KlR9bjWyaG5mfSViPUVB3FU724NdMMXS
HKtzixgjpRx28+CA8vIoKzU8ByiLoumtwCenC5jypyDT5/9ZsXciP7pdbzs3xAje
DIrwkxpPy51qMedIAkkKdMZuwG+adZ7DGHM9vcsnAE7GzokN5za1v4/0//dD7G8x
HKP5+LI1vvu8APBnn6mbD4PbDUA3cps37heJ6hDc3TFk4tsVIBNH1TWxhPeDAQU+
qYUtT3vtwYyr2VTkGlGz6CgAowIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIPddqLp
W44NRwErEW4Crr3UrYc6MB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2
NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0ZDMjYvRkVBNTdFNjBCNjc3MTFFOEEwQTBEMzMyQzRGOUFFMDIvNzA2MzgyQzJC
Njc4MTFFOEEyNjk2MzMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4HPMA0GCSqGSIb3DQEBCwUAA4IBAQA+zccCp2EBomtmqfKEaBXR
jiSB3Dn70duJhMYbTIQtbJkosOxXkB/32l2v2LKVIw3FWnIlS/De9VKj+GZ5Hpft
9+ikxLRc93/iMJOrZqWNssU9THFFrWq4L7zxSf9ahUF3/R7WZRpgcyi32f3Wq7cx
RaHdYHGAluD5nT8NxcSpAvi5t+I3+bOpqoVkaqeTkGl4se+DVFTUYiYgmtidjJdX
+o1fCADRmkGLGG61UhU3aMuBakGioKuSfT9eFNEa4Ik4T8CxaGnlbyQ6bn1RLBuM
aI8WRteNi658Ihv8j4hGZv2vUYFwMEtWFZ49l1SwgeZeD6uJS6IWyEbZauWSw3K9
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:02 2026 by rpki-client