Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa
File:                     BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (raw, json)
Hash identifier:          APhmcXAzZIhCLyKa4vEtY9uKqyvDEiwnjzZDypho3ks=
Subject key identifier:   7A:8D:CC:E5:78:D2:41:FD:0C:7B:5E:7D:8B:0C:8D:33:66:32:49:F9
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       026F
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa
Signing time:             Sat 29 Aug 2026 02:54:18 +0000
ROA not before:           Sat 29 Aug 2026 02:54:18 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139803
IP address blocks:        103.135.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Aug 29 02:54:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a9249da-c15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:12:dd:37:89:4e:c2:67:7b:2a:aa:85:53:
                    a8:d1:51:77:6e:0f:f1:ff:8c:14:17:50:dd:7c:5b:
                    7c:e1:18:31:ae:50:ae:0a:eb:31:e3:7a:00:07:1c:
                    64:4c:cb:fb:af:1e:e5:64:38:e7:e2:ec:f5:ab:c8:
                    b8:92:c8:14:dc:18:46:b5:f5:84:51:4e:99:cf:b7:
                    74:87:af:c3:31:29:21:8d:6c:bd:3c:6c:3e:a7:67:
                    b6:f8:81:11:d6:cf:c1:aa:b2:42:1e:ae:00:53:3a:
                    86:73:4a:f2:c5:52:34:25:5d:15:30:5c:12:54:8e:
                    06:90:53:d3:51:44:7f:f7:49:44:9e:08:cc:ce:8b:
                    c2:b2:27:2f:55:f5:34:b3:eb:b7:36:61:db:86:02:
                    2a:98:9e:8f:10:51:52:7b:85:f2:c2:ec:ea:8f:b2:
                    df:12:ad:c3:e2:60:53:75:a7:70:0a:d6:e2:b7:52:
                    2b:c0:0c:31:d8:23:0a:23:aa:6f:59:4a:3c:ac:71:
                    5a:be:b3:2f:ef:39:40:69:fb:7a:90:ac:f6:44:91:
                    26:73:11:e7:09:29:eb:a0:19:16:e6:df:de:a4:b4:
                    1e:0c:97:a4:24:9f:01:99:22:e7:e6:ea:45:4d:38:
                    d0:ec:c3:51:0d:5c:ed:3a:68:e4:0e:93:3e:dd:2a:
                    ad:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8D:CC:E5:78:D2:41:FD:0C:7B:5E:7D:8B:0C:8D:33:66:32:49:F9
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:cb:41:ad:74:10:e2:fa:13:ed:40:06:10:6e:74:e9:0a:
         94:d9:ec:41:65:ce:49:71:a2:05:dd:9e:e4:d9:e3:00:c3:a5:
         27:aa:d8:84:68:02:6c:45:e2:b6:56:24:90:78:19:a6:1f:5c:
         84:e3:23:af:28:68:4b:39:af:65:71:fe:c3:73:34:4e:65:93:
         04:45:16:68:1e:8a:c3:3a:9a:d9:4e:61:4b:7c:8b:ba:60:b9:
         ba:89:3b:45:5c:de:82:ad:c8:bc:c0:8c:cf:c8:8b:a3:6c:dc:
         72:fa:47:40:12:6e:a8:27:68:5d:8b:ac:cb:b4:05:86:ec:ad:
         9e:05:73:0e:4a:a4:c0:0f:7a:26:32:43:6c:c9:0c:c7:a2:d8:
         99:46:6c:a0:b2:29:5f:67:10:43:4a:b7:7f:dd:06:44:92:6f:
         b7:c8:3d:aa:53:01:3f:e2:bd:d3:c9:8b:d0:cb:41:21:42:b6:
         b6:fd:3c:ef:89:54:0f:3d:f5:f0:63:cf:a0:23:11:a9:df:41:
         a3:85:1c:d6:f2:86:59:48:67:c6:f9:12:59:ec:b6:92:2c:e4:
         e3:9f:38:ee:af:55:54:c3:cd:6c:47:f8:81:50:c0:fe:f7:4a:
         a7:fe:78:c9:75:51:01:65:19:23:87:74:cf:ad:f6:9c:49:f9:
         09:a6:97:ce
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz
RTk5MDM5QTMwHhcNMjYwODI5MDI1NDE4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTkyNDlkYS1jMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYUS3TeJTsJneyqqhVOo0VF3bg/x/4wUF1DdfFt84RgxrlCuCusx43oABxxk
TMv7rx7lZDjn4uz1q8i4ksgU3BhGtfWEUU6Zz7d0h6/DMSkhjWy9PGw+p2e2+IER
1s/BqrJCHq4AUzqGc0ryxVI0JV0VMFwSVI4GkFPTUUR/90lEngjMzovCsicvVfU0
s+u3NmHbhgIqmJ6PEFFSe4Xywuzqj7LfEq3D4mBTdadwCtbit1IrwAwx2CMKI6pv
WUo8rHFavrMv7zlAaft6kKz2RJEmcxHnCSnroBkW5t/epLQeDJekJJ8BmSLn5upF
TTjQ7MNRDVztOmjkDpM+3SqtZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHqNzOV4
0kH9DHtefYsMjTNmMkn5MB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx
QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU4QkYvQjM4OUNGMzg0MUE3MTFFRTkyRTVCMzc4QzRGOUFFMDIvQkQ4RUIxQThC
OUVBMTFFRjhBMjE4QzUyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4csMA0GCSqGSIb3DQEBCwUAA4IBAQA5j8tBrXQQ4voT7UAGEG50
6QqU2exBZc5JcaIF3Z7k2eMAw6UnqtiEaAJsReK2ViSQeBmmH1yE4yOvKGhLOa9l
cf7DczROZZMERRZoHorDOprZTmFLfIu6YLm6iTtFXN6Crci8wIzPyIujbNxy+kdA
Em6oJ2hdi6zLtAWG7K2eBXMOSqTAD3omMkNsyQzHotiZRmygsilfZxBDSrd/3QZE
km+3yD2qUwE/4r3TyYvQy0EhQra2/TzviVQPPfXwY8+gIxGp30GjhRzW8oZZSGfG
+RJZ7LaSLOTjnzjur1VUw81sR/iBUMD+90qn/njJdVEBZRkjh3TPrfacSfkJppfO
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:52:41 2026 by rpki-client