Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa
File:                     0EF0E842839E11EEA1892A12C4F9AE02.roa (raw, json)
Hash identifier:          2fkGW1bkGlUA5bGgALjxvNXrPUAl1hO1HVzydoUaRto=
Subject key identifier:   F6:16:0D:65:03:A5:C3:9D:C9:E7:4B:B2:E9:F5:51:EB:3F:82:2F:22
Certificate issuer:       /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial:       0D86
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa
Signing time:             Thu 16 Apr 2026 18:22:37 +0000
ROA not before:           Thu 16 Apr 2026 18:22:37 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135341
IP address blocks:        103.134.126.0/24 maxlen: 24
                          103.134.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
                          rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3462 (0xd86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
        Validity
            Not Before: Apr 16 18:22:37 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69e128ed-a18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:d2:72:31:46:db:4b:7f:42:33:52:b7:b5:
                    4b:b6:b5:b0:fa:66:0f:ae:60:a3:a7:01:74:80:5e:
                    ef:82:ac:53:d2:d9:11:b2:bd:17:93:e3:a5:4d:ae:
                    4c:78:ef:74:8d:74:9d:67:1b:63:b4:1d:16:a5:ae:
                    a9:14:9b:83:5a:e1:08:cc:a9:04:8b:d4:a3:b4:29:
                    37:0c:f5:ee:a5:04:e7:bc:dc:ad:33:83:7c:21:d4:
                    1f:b7:61:34:50:fa:50:ea:4a:dd:06:4f:f1:22:b7:
                    fc:82:50:d3:59:8e:6b:33:ad:1b:21:e0:11:32:1c:
                    cc:b9:44:ee:ca:0c:73:7a:b4:3f:57:37:83:2d:f5:
                    5b:04:03:a2:57:59:ab:9e:22:7e:d8:c9:5e:55:0d:
                    76:fb:0b:f3:1e:b7:f8:0f:25:7a:f1:bc:37:81:1f:
                    8c:c5:ca:cb:b7:7c:69:ed:c4:20:d2:a1:2f:0f:36:
                    3e:56:7c:c3:8d:73:ab:6e:43:72:02:90:80:ff:c1:
                    63:e1:08:7f:d1:17:b9:0a:4a:32:17:1b:93:83:04:
                    77:e7:78:c8:7d:f9:ea:90:2a:ae:c7:e5:90:db:93:
                    36:a8:9c:7a:f5:50:98:76:bb:fa:18:98:d8:71:09:
                    b6:98:67:02:bc:9d:c3:57:e6:cc:88:38:fc:d7:48:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:16:0D:65:03:A5:C3:9D:C9:E7:4B:B2:E9:F5:51:EB:3F:82:2F:22
            X509v3 Authority Key Identifier:
                keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:b4:c2:29:3e:00:53:61:7e:96:75:e7:64:ad:f4:a6:7b:d4:
         45:e1:58:5b:8f:8c:0d:1e:c6:3b:cc:6f:74:d9:ca:a9:4b:38:
         fa:1b:87:ab:51:72:b9:4d:bd:60:26:5b:84:77:df:45:08:a7:
         cc:64:e5:73:e9:e8:07:df:06:f5:59:66:dc:b0:10:0b:a4:02:
         d1:f5:47:96:1a:cd:b0:b4:f8:35:de:9e:2c:ae:cd:3e:94:62:
         2c:a6:de:0c:3d:52:98:7a:99:f4:2e:69:be:e7:9b:19:4c:ca:
         6b:2a:21:16:6c:89:4a:58:c7:71:b2:6f:7a:ac:fb:d8:7c:ea:
         cc:92:ce:cc:7c:58:5b:f7:01:27:a1:ff:84:0d:93:cd:f5:c4:
         f8:52:a4:8f:b2:21:67:05:bd:17:07:26:60:6b:57:53:07:88:
         47:58:8f:28:0c:ac:cf:78:ce:5f:0b:8c:fe:41:fd:35:e7:3f:
         3e:e4:24:11:e2:38:84:65:11:6e:cb:4e:a9:97:94:30:73:4e:
         3e:e6:26:8c:96:4a:c3:26:50:54:30:19:89:6f:db:97:64:5c:
         c3:02:fd:ce:4b:91:78:2b:8a:c1:a8:7a:57:a7:e3:0d:7e:c3:
         c2:85:8a:59:8b:4a:6e:fb:78:cf:fa:e4:c1:9a:0b:9d:f3:71:
         ea:6f:d9:75
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1
RUY0ODkwODgwHhcNMjYwNDE2MTgyMjM3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWUxMjhlZC1hMThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtFbScjFG20t/QjNSt7VLtrWw+mYPrmCjpwF0gF7vgqxT0tkRsr0Xk+OlTa5M
eO90jXSdZxtjtB0Wpa6pFJuDWuEIzKkEi9SjtCk3DPXupQTnvNytM4N8IdQft2E0
UPpQ6krdBk/xIrf8glDTWY5rM60bIeARMhzMuUTuygxzerQ/VzeDLfVbBAOiV1mr
niJ+2MleVQ12+wvzHrf4DyV68bw3gR+MxcrLt3xp7cQg0qEvDzY+VnzDjXOrbkNy
ApCA/8Fj4Qh/0Re5CkoyFxuTgwR353jIffnqkCqux+WQ25M2qJx69VCYdrv6GJjY
cQm2mGcCvJ3DV+bMiDj810hE5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPYWDWUD
pcOdyedLsun1Ues/gi8iMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2
NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjQyQTAvQ0E3RDExNjJGNjc2MTFFOTkwQkFBMjIyQzRGOUFFMDIvMEVGMEU4NDI4
MzlFMTFFRUExODkyQTEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4Z+MA0GCSqGSIb3DQEBCwUAA4IBAQAktMIpPgBTYX6WdedkrfSm
e9RF4Vhbj4wNHsY7zG902cqpSzj6G4erUXK5Tb1gJluEd99FCKfMZOVz6egH3wb1
WWbcsBALpALR9UeWGs2wtPg13p4srs0+lGIspt4MPVKYepn0Lmm+55sZTMprKiEW
bIlKWMdxsm96rPvYfOrMks7MfFhb9wEnof+EDZPN9cT4UqSPsiFnBb0XByZga1dT
B4hHWI8oDKzPeM5fC4z+Qf015z8+5CQR4jiEZRFuy06pl5Qwc04+5iaMlkrDJlBU
MBmJb9uXZFzDAv3OS5F4K4rBqHpXp+MNfsPChYpZi0pu+3jP+uTBmgud83Hqb9l1
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:38 2026 by rpki-client