Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa
File:                     2F5D72E695EC11F0BF295042C4F9AE02.roa (raw, json)
Hash identifier:          /+ba2nQszpmA32xw8Q2bNwCocgAiAxht6R/PF25M/+Q=
Subject key identifier:   01:B9:7E:3A:8B:EA:05:13:3E:C0:47:77:3A:C5:DB:7B:47:A4:1A:E5
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       0210
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:44:06 +0000
ROA not before:           Sat 20 Sep 2025 06:36:49 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     215607
IP address blocks:        103.135.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Sep 20 06:36:49 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47ae6-7bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:9a:52:0c:8b:15:ad:64:9e:13:c6:28:47:
                    63:4b:07:55:d4:3e:39:44:93:cd:44:dc:48:95:79:
                    4c:13:68:95:4d:3c:2a:e8:c3:1a:ea:45:20:18:22:
                    d9:1e:ae:6a:d3:3e:8f:3b:77:4b:66:d2:cf:9f:7e:
                    38:ce:3f:66:6a:11:30:5b:1c:a8:64:b3:bb:15:34:
                    b3:de:2c:bc:3b:aa:a1:b0:59:a1:aa:bc:71:43:98:
                    4d:18:7a:bb:3e:66:7c:9f:45:d9:a8:54:c2:9d:94:
                    4d:3f:9a:77:b5:e0:34:ba:eb:35:2c:50:d1:39:16:
                    bc:34:0a:ae:5c:f6:5b:b9:39:e7:bd:b6:fd:17:f3:
                    5d:17:48:64:f1:9e:87:b0:5e:d3:68:cd:a8:83:66:
                    ae:33:28:12:b7:34:4d:65:8e:77:1b:92:44:c3:8c:
                    b6:38:18:41:ab:bc:69:60:df:90:31:a8:ba:6b:e3:
                    fa:d5:0a:fd:6d:c9:d1:77:5c:1b:7d:66:fc:84:0e:
                    33:72:a1:f3:0c:a4:32:9d:a6:a3:d2:dd:f0:8b:33:
                    11:60:08:d5:c7:dc:29:dd:ed:98:5b:2c:98:9c:58:
                    05:bd:40:4a:6d:35:a6:51:4e:5b:fc:9e:9f:d3:a7:
                    26:00:61:6c:51:cd:3a:e2:ab:21:07:78:af:3f:02:
                    5e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B9:7E:3A:8B:EA:05:13:3E:C0:47:77:3A:C5:DB:7B:47:A4:1A:E5
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:73:21:b2:53:4d:20:55:4a:b0:99:d4:92:33:1d:16:9e:8a:
         46:c7:61:a6:aa:75:e4:ad:40:b7:50:3d:52:41:32:2b:5a:ed:
         45:13:19:e7:ed:2a:d9:58:24:14:40:42:59:f1:26:c6:0b:bb:
         bb:76:74:a4:a3:a3:aa:d3:68:67:60:ca:6a:53:b0:63:cb:2b:
         81:12:76:ad:50:1f:dd:03:bb:fc:0d:19:9b:df:6d:1b:a6:99:
         9a:aa:c5:fb:22:86:98:13:41:5e:aa:66:5e:55:cc:27:20:39:
         24:7a:3f:56:df:5f:59:7c:c9:a0:04:bd:67:5c:d6:67:09:ca:
         a0:ed:a3:d3:00:17:4c:97:fa:e8:b3:63:e0:1f:74:c0:ca:2c:
         6f:28:3e:c5:7c:b6:1a:b3:32:1e:89:ef:90:1c:d6:1b:d6:ba:
         18:e9:d4:8a:2f:d3:ae:fd:b7:f6:b4:4e:6d:6b:c4:fe:a1:af:
         8d:79:23:68:a9:5a:78:08:06:9c:78:88:31:bc:c7:41:0d:79:
         c4:05:d6:76:a1:6e:c5:05:3b:9a:59:e7:b2:6e:5f:44:e3:df:
         13:f6:ea:3c:24:a6:30:69:1a:db:c3:68:c0:73:37:f8:8d:0a:
         35:05:9e:72:50:f3:5b:a6:a8:27:ff:17:34:2d:fb:2c:54:cb:
         11:9b:fe:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz
RTk5MDM5QTMwHhcNMjUwOTIwMDYzNjQ5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2FlNi03YmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQqaUgyLFa1knhPGKEdjSwdV1D45RJPNRNxIlXlME2iVTTwq6MMa6kUgGCLZ
Hq5q0z6PO3dLZtLPn344zj9mahEwWxyoZLO7FTSz3iy8O6qhsFmhqrxxQ5hNGHq7
PmZ8n0XZqFTCnZRNP5p3teA0uus1LFDRORa8NAquXPZbuTnnvbb9F/NdF0hk8Z6H
sF7TaM2og2auMygStzRNZY53G5JEw4y2OBhBq7xpYN+QMai6a+P61Qr9bcnRd1wb
fWb8hA4zcqHzDKQynaaj0t3wizMRYAjVx9wp3e2YWyyYnFgFvUBKbTWmUU5b/J6f
06cmAGFsUc064qshB3ivPwJesQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAG5fjqL
6gUTPsBHdzrF23tHpBrlMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx
QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU4QkYvQjM4OUNGMzg0MUE3MTFFRTkyRTVCMzc4QzRGOUFFMDIvMkY1RDcyRTY5
NUVDMTFGMEJGMjk1MDQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4ctMA0GCSqGSIb3DQEBCwUAA4IBAQC3cyGyU00gVUqwmdSSMx0W
nopGx2GmqnXkrUC3UD1SQTIrWu1FExnn7SrZWCQUQEJZ8SbGC7u7dnSko6Oq02hn
YMpqU7BjyyuBEnatUB/dA7v8DRmb320bppmaqsX7IoaYE0FeqmZeVcwnIDkkej9W
319ZfMmgBL1nXNZnCcqg7aPTABdMl/ros2PgH3TAyixvKD7FfLYaszIeie+QHNYb
1roY6dSKL9Ou/bf2tE5ta8T+oa+NeSNoqVp4CAaceIgxvMdBDXnEBdZ2oW7FBTua
Weeybl9E498T9uo8JKYwaRrbw2jAczf4jQo1BZ5yUPNbpqgn/xc0LfssVMsRm/74
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:11 2026 by rpki-client