Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/FD678F40214E11F095B05918C4F9AE02.roa
File:                     FD678F40214E11F095B05918C4F9AE02.roa (raw, json)
Hash identifier:          dwCv7pQVK29BHwFaFsuGflmejhNgA5PpUoP3YGaDUCo=
Subject key identifier:   47:93:9E:B4:15:D8:CD:62:88:90:14:4D:AC:C9:8E:29:58:AE:BA:8E
Certificate issuer:       /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial:       022A
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/FD678F40214E11F095B05918C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:30:11 +0000
ROA not before:           Sat 17 May 2025 03:41:52 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153563
IP address blocks:        103.140.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
                          rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
        Validity
            Not Before: May 17 03:41:52 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3eb03-4fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e7:e4:a7:90:b2:35:26:70:89:4e:65:9f:e4:
                    fe:fd:01:5b:41:52:47:ab:04:21:ed:67:53:30:3b:
                    40:82:f1:50:55:cd:09:8a:49:aa:bc:b5:88:42:a4:
                    af:47:b8:03:5a:c2:44:1e:18:81:e0:15:84:a2:db:
                    63:e9:ba:90:4c:f8:40:b4:f3:7e:1b:9b:d8:1c:d4:
                    b0:34:2d:46:0d:10:f7:af:8d:ab:d2:e0:2d:51:54:
                    24:8f:83:33:14:27:0d:b3:f4:e6:99:de:94:7d:f4:
                    3e:d2:10:e7:40:a0:8d:4b:dd:d1:ff:21:e5:31:2f:
                    4f:ad:6c:4b:04:8d:4c:d8:e1:50:ae:bf:7a:c0:f9:
                    83:f4:38:bc:96:9c:03:82:29:15:68:18:40:5a:6b:
                    d0:64:ee:7e:d0:cb:c1:54:d7:77:a0:a9:4b:66:f1:
                    be:43:9d:b4:c4:c6:09:fb:cd:0e:9b:91:32:0b:1c:
                    db:42:9a:92:19:40:2b:bc:21:cd:81:ca:31:48:32:
                    be:b6:7e:f7:11:64:d0:46:4e:16:20:f1:62:2e:71:
                    63:5e:7c:d5:04:de:ca:76:59:cf:4d:ad:e0:36:c4:
                    88:b4:07:22:25:51:a9:68:62:b9:55:ef:2d:c8:e3:
                    b7:16:1d:24:3f:7a:ce:a3:94:5c:73:6f:ce:d5:ac:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:93:9E:B4:15:D8:CD:62:88:90:14:4D:AC:C9:8E:29:58:AE:BA:8E
            X509v3 Authority Key Identifier:
                keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/FD678F40214E11F095B05918C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:61:17:cb:58:fd:03:b3:3e:40:eb:7c:64:5b:64:50:81:cf:
         bb:e5:ca:60:6b:5b:7b:e9:40:64:77:30:c8:98:95:8b:29:4c:
         88:3d:60:3f:22:bc:57:74:c5:e9:05:ef:ef:ff:8e:06:96:c4:
         c1:39:c0:1e:d4:e5:9d:df:26:55:c4:b9:34:e8:2e:2d:ee:43:
         5c:54:69:14:c9:2b:ab:fd:94:44:68:46:9b:b4:8b:8d:b8:be:
         9b:f9:e4:fc:3c:ab:94:38:b1:fd:e7:97:65:28:3c:12:5b:05:
         79:21:c4:6e:79:ed:8c:df:d3:da:5a:5d:8a:e6:c9:e0:e6:08:
         8f:be:f8:21:8b:fe:16:3f:43:0f:00:91:e9:58:9e:4c:4c:6f:
         b9:7f:e8:b9:05:aa:ce:2d:e6:87:92:90:fb:f4:ae:cb:4a:26:
         df:56:62:61:ae:30:2b:be:a0:be:f9:b7:50:8c:fd:0f:2d:f9:
         80:5d:fe:50:99:dc:ae:30:c4:b8:c1:1f:46:92:39:fe:d6:c9:
         c3:c9:ed:ab:79:42:10:d2:22:32:88:08:1b:ec:db:20:85:d2:
         c0:76:14:2e:3d:d5:ad:7e:31:93:54:35:5f:4d:2c:5e:f0:a2:
         c1:1a:d0:4c:f0:d0:dd:b5:39:f7:63:92:a1:1d:a8:ee:27:94:
         e6:e4:4a:33
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5
MERGMzI0OEEwHhcNMjUwNTE3MDM0MTUyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWIwMy00ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxefkp5CyNSZwiU5ln+T+/QFbQVJHqwQh7WdTMDtAgvFQVc0JikmqvLWIQqSv
R7gDWsJEHhiB4BWEottj6bqQTPhAtPN+G5vYHNSwNC1GDRD3r42r0uAtUVQkj4Mz
FCcNs/Tmmd6UffQ+0hDnQKCNS93R/yHlMS9PrWxLBI1M2OFQrr96wPmD9Di8lpwD
gikVaBhAWmvQZO5+0MvBVNd3oKlLZvG+Q520xMYJ+80Om5EyCxzbQpqSGUArvCHN
gcoxSDK+tn73EWTQRk4WIPFiLnFjXnzVBN7KdlnPTa3gNsSItAciJVGpaGK5Ve8t
yOO3Fh0kP3rOo5Rcc2/O1azluQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEeTnrQV
2M1iiJAUTazJjilYrrqOMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB
RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjcyRTMvQzZCNTAxM0NFQUU5MTFFRDg3NUEyRDUxQzRGOUFFMDIvRkQ2NzhGNDAy
MTRFMTFGMDk1QjA1OTE4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4zDMA0GCSqGSIb3DQEBCwUAA4IBAQCbYRfLWP0Dsz5A63xkW2RQ
gc+75cpga1t76UBkdzDImJWLKUyIPWA/IrxXdMXpBe/v/44GlsTBOcAe1OWd3yZV
xLk06C4t7kNcVGkUySur/ZREaEabtIuNuL6b+eT8PKuUOLH955dlKDwSWwV5IcRu
ee2M39PaWl2K5sng5giPvvghi/4WP0MPAJHpWJ5MTG+5f+i5BarOLeaHkpD79K7L
SibfVmJhrjArvqC++bdQjP0PLfmAXf5QmdyuMMS4wR9Gkjn+1snDye2reUIQ0iIy
iAgb7NsghdLAdhQuPdWtfjGTVDVfTSxe8KLBGtBM8NDdtTn3Y5KhHajuJ5Tm5Eoz
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:03 2026 by rpki-client