Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/E911B9C2AD6211EABEDF046AC4F9AE02.roa
File:                     E911B9C2AD6211EABEDF046AC4F9AE02.roa (raw, json)
Hash identifier:          wKTczL/SKndLhhYyPn73Aydpnf8Wv9hKJgZOX9jZjmY=
Subject key identifier:   D6:5E:0D:02:C2:FF:72:40:56:44:F8:9B:28:93:B8:BC:06:94:98:2C
Certificate issuer:       /CN=A914F5BA/serialNumber=51CA0CBA847F9899C9CF5A57A9BE615CFB3A5A50
Certificate serial:       097A
Authority key identifier: 51:CA:0C:BA:84:7F:98:99:C9:CF:5A:57:A9:BE:61:5C:FB:3A:5A:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcoMuoR_mJnJz1pXqb5hXPs6WlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/E911B9C2AD6211EABEDF046AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:33:09 +0000
ROA not before:           Mon 26 May 2025 20:37:09 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137811
IP address blocks:        103.114.88.0/22 maxlen: 22
                          103.114.88.0/24 maxlen: 24
                          103.114.89.0/24 maxlen: 24
                          103.114.90.0/24 maxlen: 24
                          103.114.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.crl
                          rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcoMuoR_mJnJz1pXqb5hXPs6WlA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2426 (0x97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F5BA, serialNumber=51CA0CBA847F9899C9CF5A57A9BE615CFB3A5A50
        Validity
            Not Before: May 26 20:37:09 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a407d5-d3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:34:7e:25:43:ad:79:d7:52:0b:45:b6:37:
                    95:67:ff:2b:ac:0e:31:78:93:95:0e:d9:ac:9a:27:
                    76:bc:6a:6d:4b:78:7b:9d:65:9b:ae:59:07:1d:dc:
                    09:e6:26:5c:84:6b:4f:94:e5:f9:1a:71:f3:95:fc:
                    90:35:92:22:f4:cc:a9:d2:cb:8b:3c:ad:f7:d4:eb:
                    9c:80:66:a7:76:b6:54:bc:26:01:4d:b3:52:dd:67:
                    41:78:69:14:1d:9f:b2:15:bf:b3:fb:53:58:c8:11:
                    b4:d0:90:8c:6a:c3:57:b1:55:a4:0a:39:8a:24:ae:
                    4b:ac:e7:60:99:57:a2:5c:3a:bd:2b:af:11:bd:e8:
                    02:27:cc:76:45:4f:88:99:04:c4:c0:72:92:a5:4c:
                    11:7f:1e:fb:97:46:83:55:a8:34:f5:2f:56:f5:82:
                    cd:0b:1c:27:63:4d:cf:59:63:8b:75:ee:7c:79:e2:
                    b4:53:04:59:0d:73:c9:88:37:3f:72:41:a4:40:6e:
                    d7:9d:c0:db:1e:2c:97:35:ab:81:7a:31:2b:48:b2:
                    7f:24:2f:f4:0b:6e:75:51:df:ce:01:ca:a8:fb:fe:
                    cd:70:86:18:66:6d:ab:0e:ee:00:19:45:de:d2:54:
                    4f:fc:ff:f4:50:6e:55:e1:91:31:59:59:89:bd:68:
                    9e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5E:0D:02:C2:FF:72:40:56:44:F8:9B:28:93:B8:BC:06:94:98:2C
            X509v3 Authority Key Identifier:
                keyid:51:CA:0C:BA:84:7F:98:99:C9:CF:5A:57:A9:BE:61:5C:FB:3A:5A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcoMuoR_mJnJz1pXqb5hXPs6WlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/E911B9C2AD6211EABEDF046AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:09:fe:ef:3e:b8:cd:33:01:8c:e0:bc:47:5e:1d:da:91:fc:
         95:8c:18:75:f8:d0:e7:b3:23:ad:a7:19:7e:af:0e:fc:5b:b9:
         ab:d8:ae:86:da:0e:7b:6e:ab:54:4d:e6:a1:ca:c6:00:e9:bc:
         3b:a7:4e:d2:c3:08:8d:9f:d6:ff:a4:ac:f6:ef:86:6d:ef:ee:
         e4:eb:9e:a2:6c:a9:49:09:fd:32:4c:fe:27:81:5d:d5:e3:ae:
         ce:cc:6a:f1:00:83:bb:e0:38:da:11:3f:6c:e3:ce:9f:37:47:
         9b:78:58:59:46:fd:97:99:46:15:75:34:26:a8:9b:2f:2e:02:
         7e:6e:52:82:9e:80:12:ba:52:1e:04:2a:fe:91:7b:cc:e8:01:
         b3:85:49:12:d9:0f:3c:d4:46:fd:4c:8e:33:74:f1:c8:de:1c:
         aa:a1:ee:0d:82:5a:f1:2b:dc:a7:66:9f:56:a1:27:6e:aa:ac:
         48:be:32:66:23:ff:78:0d:a7:0b:42:c2:51:12:81:fa:09:b9:
         20:00:71:52:f5:7a:db:91:fb:83:78:57:70:1c:8a:c2:1a:ed:
         00:f8:de:04:25:35:e5:61:b8:d7:4e:76:41:90:7c:d8:d1:ba:
         87:08:b5:d5:33:78:62:a2:d8:7f:5c:97:87:ef:08:73:d9:ce:
         60:e9:ce:6d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY1QkExMTAvBgNVBAUTKDUxQ0EwQ0JBODQ3Rjk4OTlDOUNGNUE1N0E5QkU2MTVD
RkIzQTVBNTAwHhcNMjUwNTI2MjAzNzA5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDdkNS1kM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzFc0fiVDrXnXUgtFtjeVZ/8rrA4xeJOVDtmsmid2vGptS3h7nWWbrlkHHdwJ
5iZchGtPlOX5GnHzlfyQNZIi9Myp0suLPK331OucgGandrZUvCYBTbNS3WdBeGkU
HZ+yFb+z+1NYyBG00JCMasNXsVWkCjmKJK5LrOdgmVeiXDq9K68RvegCJ8x2RU+I
mQTEwHKSpUwRfx77l0aDVag09S9W9YLNCxwnY03PWWOLde58eeK0UwRZDXPJiDc/
ckGkQG7XncDbHiyXNauBejErSLJ/JC/0C251Ud/OAcqo+/7NcIYYZm2rDu4AGUXe
0lRP/P/0UG5V4ZExWVmJvWiegwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNZeDQLC
/3JAVkT4myiTuLwGlJgsMB8GA1UdIwQYMBaAFFHKDLqEf5iZyc9aV6m+YVz7OlpQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjVCQS9FRTIyRDAxMEFE
NjAxMUVBOEYxQThENjNDNEY5QUUwMi9VY29NdW9SX21Kbkp6MXBYcWI1aFhQczZX
bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Vjb011b1JfbUpuSnoxcFhxYjVoWFBzNldsQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEY1QkEvRUUyMkQwMTBBRDYwMTFFQThGMUE4RDYzQzRGOUFFMDIvRTkxMUI5QzJB
RDYyMTFFQUJFREYwNDZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3JYMA0GCSqGSIb3DQEBCwUAA4IBAQCICf7vPrjNMwGM4LxHXh3a
kfyVjBh1+NDnsyOtpxl+rw78W7mr2K6G2g57bqtUTeahysYA6bw7p07SwwiNn9b/
pKz274Zt7+7k656ibKlJCf0yTP4ngV3V467OzGrxAIO74DjaET9s486fN0ebeFhZ
Rv2XmUYVdTQmqJsvLgJ+blKCnoASulIeBCr+kXvM6AGzhUkS2Q881Eb9TI4zdPHI
3hyqoe4NglrxK9ynZp9WoSduqqxIvjJmI/94DacLQsJREoH6CbkgAHFS9XrbkfuD
eFdwHIrCGu0A+N4EJTXlYbjXTnZBkHzY0bqHCLXVM3hioth/XJeH7whz2c5g6c5t
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:59 2026 by rpki-client