Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D7F4292A53BE11EF819E6347C4F9AE02.roa
File:                     D7F4292A53BE11EF819E6347C4F9AE02.roa (raw, json)
Hash identifier:          Ue/t1PP419JlxBz1cKkLY7GRQHiNwZY7sf9eJ0m5LyI=
Subject key identifier:   55:05:6B:51:4B:7D:F9:BD:47:94:61:4C:8C:64:A9:12:A1:D0:18:24
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       35FE
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D7F4292A53BE11EF819E6347C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:56:17 +0000
ROA not before:           Mon 02 Feb 2026 15:11:27 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135381
IP address blocks:        203.130.151.0/24 maxlen: 24
                          203.156.30.0/24 maxlen: 24
                          203.156.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13822 (0x35fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Feb  2 15:11:27 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48bd1-d6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:75:45:79:27:63:70:f1:c9:f4:fe:b5:f8:
                    96:4a:d8:96:27:e2:f0:9f:38:90:33:cd:6f:89:e9:
                    a7:b6:52:4f:1e:6a:1c:00:be:41:1f:e9:c0:c9:8c:
                    cc:0b:f9:79:87:ed:9b:8a:00:01:3e:c2:a2:52:fa:
                    18:bd:b6:93:88:e4:c8:f9:0b:61:34:07:dd:8c:a3:
                    89:b1:63:f1:be:74:b1:ec:ea:0f:b4:f0:ad:cf:b7:
                    79:af:49:b4:f9:2f:0a:32:e9:db:f8:73:2f:ad:2d:
                    19:66:8f:b4:8a:41:e9:03:77:a2:e8:ff:c1:b4:3d:
                    19:b7:ea:de:66:78:fe:a4:55:63:25:d7:b4:3b:b5:
                    6a:1a:7a:35:fc:eb:f6:00:d1:de:17:e0:bc:74:fa:
                    03:1e:55:a0:54:9e:ad:15:cf:ae:c4:63:52:10:6a:
                    a0:58:2f:a7:8a:b0:ed:e7:f5:61:6d:3d:68:97:0e:
                    f2:51:8b:4c:52:56:76:cf:82:de:74:09:cb:0f:78:
                    74:a0:52:51:90:75:08:2d:61:56:56:12:26:c7:d7:
                    3b:09:ae:2e:a0:a9:66:7a:bd:12:3b:45:7f:8b:df:
                    98:a5:f5:9d:40:e2:c8:d7:4e:1d:61:23:f5:6e:bb:
                    ba:60:b7:e9:1c:27:3f:17:f5:c7:7d:66:3b:c1:13:
                    aa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:05:6B:51:4B:7D:F9:BD:47:94:61:4C:8C:64:A9:12:A1:D0:18:24
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D7F4292A53BE11EF819E6347C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.130.151.0/24
                  203.156.30.0/24
                  203.156.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:0f:af:f4:ae:e5:54:fe:e2:41:72:06:ea:4a:e8:a3:95:b8:
         bf:49:98:4b:d0:11:f5:46:43:1b:2b:30:5f:63:8f:16:e8:42:
         d8:fa:1b:22:22:96:ec:92:07:61:67:f7:80:a7:b8:36:5b:60:
         56:8e:db:d9:44:89:56:73:cd:da:13:37:98:c7:6d:2b:72:b9:
         7c:03:e5:77:0c:27:81:76:91:bc:0f:38:96:da:e2:fd:11:7d:
         0a:fa:dc:f7:3f:f2:35:2f:57:43:60:88:90:e0:15:66:98:7d:
         36:ab:b9:0e:db:2c:00:fa:5a:f8:22:da:81:2c:d1:69:a9:04:
         3e:02:91:62:57:a7:79:11:e7:aa:ce:3b:44:ae:4c:9b:c2:6c:
         13:49:4f:10:75:70:d0:50:b2:62:b5:48:a5:6f:15:f2:f0:68:
         ae:be:96:ea:51:d0:e1:9e:89:3c:21:82:15:72:b0:2c:16:7a:
         02:17:b1:61:a1:fc:28:89:f8:6d:43:4e:a5:0e:4b:ae:43:99:
         fe:8c:f8:32:73:98:62:cc:64:f3:f1:91:8b:c2:4f:65:94:ee:
         18:86:c1:14:71:10:f9:f1:38:29:4e:f9:ce:83:55:10:cd:c2:
         69:17:87:96:8f:14:2d:46:2b:c2:99:5f:7a:7c:72:33:cf:c8:
         79:53:3f:fb
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICNf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5
QzhGNjU5MEQwHhcNMjYwMjAyMTUxMTI3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGJkMS1kNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvo11RXknY3DxyfT+tfiWStiWJ+LwnziQM81viemntlJPHmocAL5BH+nAyYzM
C/l5h+2bigABPsKiUvoYvbaTiOTI+QthNAfdjKOJsWPxvnSx7OoPtPCtz7d5r0m0
+S8KMunb+HMvrS0ZZo+0ikHpA3ei6P/BtD0Zt+reZnj+pFVjJde0O7VqGno1/Ov2
ANHeF+C8dPoDHlWgVJ6tFc+uxGNSEGqgWC+nirDt5/VhbT1olw7yUYtMUlZ2z4Le
dAnLD3h0oFJRkHUILWFWVhImx9c7Ca4uoKlmer0SO0V/i9+YpfWdQOLI104dYSP1
bru6YLfpHCc/F/XHfWY7wROq1QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFUFa1FL
ffm9R5RhTIxkqRKh0BgkMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE
OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvRDdGNDI5MkE1
M0JFMTFFRjgxOUU2MzQ3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAy4KXAwQAy5weAwQAy5xpMA0GCSqGSIb3DQEBCwUAA4IBAQCdD6/0
ruVU/uJBcgbqSuijlbi/SZhL0BH1RkMbKzBfY48W6ELY+hsiIpbskgdhZ/eAp7g2
W2BWjtvZRIlWc83aEzeYx20rcrl8A+V3DCeBdpG8DziW2uL9EX0K+tz3P/I1L1dD
YIiQ4BVmmH02q7kO2ywA+lr4ItqBLNFpqQQ+ApFiV6d5EeeqzjtErkybwmwTSU8Q
dXDQULJitUilbxXy8GiuvpbqUdDhnok8IYIVcrAsFnoCF7FhofwoifhtQ06lDkuu
Q5n+jPgyc5hizGTz8ZGLwk9llO4YhsEUcRD58TgpTvnOg1UQzcJpF4eWjxQtRivC
mV96fHIzz8h5Uz/7
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:47 2026 by rpki-client