Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/813A255423A611F09025FC11C4F9AE02.roa
File:                     813A255423A611F09025FC11C4F9AE02.roa (raw, json)
Hash identifier:          RaOIdSyJbLBmHHTBAcqvM2xNuH84JM4tWrC9RYmAhrM=
Subject key identifier:   9D:31:C8:01:22:2C:C0:20:01:A9:10:CA:48:FC:DF:17:83:3D:45:A2
Certificate issuer:       /CN=A914AF32/serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Certificate serial:       141D
Authority key identifier: 84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/813A255423A611F09025FC11C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:35:41 +0000
ROA not before:           Thu 16 Oct 2025 17:55:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138042
IP address blocks:        103.120.144.0/22 maxlen: 24
                          2403:5940::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
                          rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5149 (0x141d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AF32, serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
        Validity
            Not Before: Oct 16 17:55:18 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a44ebd-8436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e3:7f:45:16:a5:62:b5:cf:ce:43:1e:8f:12:
                    e8:af:69:f1:27:92:d2:b9:13:ac:b8:b4:40:98:2b:
                    e4:16:3d:0d:58:52:a6:fd:97:bf:58:d3:9a:10:8e:
                    c3:f6:c0:79:eb:ea:0f:91:95:d1:5a:83:d1:36:03:
                    8d:3f:a8:fe:4c:9b:33:30:b9:fe:4e:83:46:4f:dc:
                    ff:83:ab:86:5c:a1:9b:40:b7:dc:0e:ad:d1:a3:a4:
                    52:6d:6c:d2:ac:41:af:77:4c:c6:7b:76:c3:a3:fc:
                    4c:97:06:51:d1:c0:2b:ff:cf:cf:9f:33:ab:0f:76:
                    d3:f3:c1:c2:54:51:a1:83:33:cf:6c:eb:84:b7:ca:
                    b6:56:0e:0c:26:a9:2c:bd:29:52:d0:6c:1e:60:b8:
                    86:1c:b3:8b:4d:86:95:ea:bb:b9:cf:7f:02:e4:84:
                    5b:e4:c8:f6:4e:a2:cc:63:b7:5f:36:39:60:a7:c0:
                    ac:7b:71:ea:39:4d:e9:25:04:e8:62:96:57:fd:b1:
                    6c:b9:82:a4:0d:ea:b3:12:62:79:5b:74:b8:21:83:
                    ae:56:47:61:76:2a:bd:a5:1f:8a:c3:35:e2:5c:f0:
                    53:6c:26:8d:23:68:f5:36:77:4a:43:63:a7:98:17:
                    01:7c:bd:ef:6a:7b:e2:db:4d:26:aa:fe:68:20:a1:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:31:C8:01:22:2C:C0:20:01:A9:10:CA:48:FC:DF:17:83:3D:45:A2
            X509v3 Authority Key Identifier:
                keyid:84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/813A255423A611F09025FC11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.144.0/22
                IPv6:
                  2403:5940::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:c4:4c:f7:a1:25:93:c3:a5:0f:a3:d0:c0:fa:69:ba:dc:d9:
         a2:dc:84:26:d2:1b:01:d8:78:28:7c:33:88:66:ef:84:3c:2a:
         5e:4d:e1:a9:3c:90:11:90:90:ca:3a:93:a7:dd:5b:fd:86:46:
         88:a3:cc:f8:71:90:17:f7:a7:f9:54:5b:bc:7c:d6:df:4c:54:
         9a:c0:4c:2b:bf:dd:a5:f5:dc:77:1d:70:6d:25:a9:ae:8b:12:
         8a:3a:cc:d7:aa:69:7d:61:62:04:d7:27:aa:39:27:89:ee:fe:
         33:b1:da:40:d6:4c:ac:d8:7d:76:26:ed:4b:24:4b:58:8c:4c:
         91:c2:40:12:74:0b:8d:e6:2e:38:85:84:6e:9f:25:1f:59:a9:
         c5:0c:9a:f2:36:93:16:ee:0c:a1:21:7e:8a:c7:80:f4:9d:1a:
         01:b8:90:d7:02:47:61:de:c5:98:70:e5:90:54:b7:88:9b:54:
         a6:2e:9f:3e:10:1d:c9:46:7b:bb:d4:9a:7d:81:7b:d6:8e:e1:
         fd:65:8c:30:f6:a5:ae:00:2c:f3:55:19:86:98:5d:61:78:c6:
         51:c3:68:86:36:f3:27:54:4e:e6:a2:9b:13:ae:de:65:b3:0f:
         2e:3f:0c:7d:3b:d2:9d:17:79:31:6a:b0:63:23:3e:39:fe:8d:
         d0:b3:5c:54
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICFB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEFGMzIxMTAvBgNVBAUTKDg0NzA3MzFCODk5QThERUVCMjlGRUE1MUI5MERDMTU4
REJEQTJBRjAwHhcNMjUxMDE2MTc1NTE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGViZC04NDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2+N/RRalYrXPzkMejxLor2nxJ5LSuROsuLRAmCvkFj0NWFKm/Ze/WNOaEI7D
9sB56+oPkZXRWoPRNgONP6j+TJszMLn+ToNGT9z/g6uGXKGbQLfcDq3Ro6RSbWzS
rEGvd0zGe3bDo/xMlwZR0cAr/8/PnzOrD3bT88HCVFGhgzPPbOuEt8q2Vg4MJqks
vSlS0GweYLiGHLOLTYaV6ru5z38C5IRb5Mj2TqLMY7dfNjlgp8Cse3HqOU3pJQTo
YpZX/bFsuYKkDeqzEmJ5W3S4IYOuVkdhdiq9pR+KwzXiXPBTbCaNI2j1NndKQ2On
mBcBfL3vanvi200mqv5oIKGAHwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJ0xyAEi
LMAgAakQykj83xeDPUWiMB8GA1UdIwQYMBaAFIRwcxuJmo3usp/qUbkNwVjb2irw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUYzMi85REVDMDc0MDlF
NTAxMUU4OTgwM0Q4MjZDNEY5QUUwMi9oSEJ6RzRtYWplNnluLXBSdVEzQldOdmFL
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hIQnpHNG1hamU2eW4tcFJ1UTNCV052YUt2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEFGMzIvOURFQzA3NDA5RTUwMTFFODk4MDNEODI2QzRGOUFFMDIvODEzQTI1NTQy
M0E2MTFGMDkwMjVGQzExQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ3iQMA0EAgACMAcDBQAkA1lAMA0GCSqGSIb3DQEBCwUAA4IBAQB1
xEz3oSWTw6UPo9DA+mm63Nmi3IQm0hsB2HgofDOIZu+EPCpeTeGpPJARkJDKOpOn
3Vv9hkaIo8z4cZAX96f5VFu8fNbfTFSawEwrv92l9dx3HXBtJamuixKKOszXqml9
YWIE1yeqOSeJ7v4zsdpA1kys2H12Ju1LJEtYjEyRwkASdAuN5i44hYRunyUfWanF
DJryNpMW7gyhIX6Kx4D0nRoBuJDXAkdh3sWYcOWQVLeIm1SmLp8+EB3JRnu71Jp9
gXvWjuH9ZYww9qWuACzzVRmGmF1heMZRw2iGNvMnVE7mopsTrt5lsw8uPwx9O9Kd
F3kxarBjIz45/o3Qs1xU
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:18 2026 by rpki-client