Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/B7BE1DAC482511ECA1A68F13C4F9AE02.roa
File:                     B7BE1DAC482511ECA1A68F13C4F9AE02.roa (raw, json)
Hash identifier:          SOuuEngzMzJn6tRotSYMuHwkZUu/qid4gvYTernifnc=
Subject key identifier:   37:99:1A:F6:FD:98:07:B0:3C:45:33:77:1B:05:CC:18:C8:BF:D1:13
Certificate issuer:       /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
Certificate serial:       0504
Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/B7BE1DAC482511ECA1A68F13C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:45:49 +0000
ROA not before:           Sat 11 Oct 2025 02:26:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139597
IP address blocks:        103.142.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl
                          rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284 (0x504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
        Validity
            Not Before: Oct 11 02:26:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a434fd-6d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:3d:f3:74:31:c3:1c:ca:08:d0:f4:25:73:
                    de:f1:e4:61:d1:43:be:8b:27:86:2b:8b:72:56:80:
                    06:d6:d2:f9:ac:21:29:ac:f2:9a:1c:55:7d:72:fe:
                    14:b7:3b:52:b9:0e:52:4f:fa:1c:20:ca:34:ea:94:
                    36:61:43:9b:48:e3:b4:53:47:e1:ed:bc:aa:26:1e:
                    b3:24:25:89:fe:00:ec:c0:be:9b:38:e6:5a:f8:9e:
                    d6:ae:a1:84:91:56:98:08:82:8b:92:b1:ab:a6:a1:
                    8d:cb:63:bb:27:a6:e8:30:46:22:6c:36:94:09:20:
                    f3:74:cb:2e:53:ae:30:e4:0e:f5:26:42:33:e4:77:
                    c9:40:68:d4:d3:a3:76:89:19:1f:a5:26:07:97:32:
                    32:25:e9:01:51:99:29:a6:46:09:5d:4b:0c:03:2b:
                    f0:77:4f:3d:53:08:ff:de:b6:99:e6:be:11:58:9d:
                    6e:55:63:f5:6e:ee:9b:36:53:84:0b:68:13:ff:dd:
                    f4:c6:e4:da:90:9f:e4:9c:12:e8:f8:c0:e0:89:69:
                    32:01:e5:a5:03:4e:a6:58:a8:da:65:52:b7:33:d8:
                    8c:19:55:8e:a8:36:39:cc:f2:b8:2e:12:a3:3d:89:
                    96:52:91:d7:b1:c5:27:a9:12:47:38:b6:0c:7e:c3:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:99:1A:F6:FD:98:07:B0:3C:45:33:77:1B:05:CC:18:C8:BF:D1:13
            X509v3 Authority Key Identifier:
                keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/B7BE1DAC482511ECA1A68F13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:05:38:1a:3a:b6:6b:3b:3f:50:76:90:be:3c:5e:a9:4d:78:
         ac:6a:87:9a:49:2f:a0:61:9a:6d:c7:29:ef:31:c3:2e:53:31:
         15:a8:2d:b4:e6:ad:ac:be:77:6b:fc:72:28:d9:3a:36:06:c7:
         9e:fc:56:48:2d:94:70:39:01:ac:f2:b8:85:ce:f1:9b:b3:e7:
         2c:00:b1:57:aa:cc:45:9d:48:de:07:4a:a9:81:aa:08:da:43:
         e0:9c:8b:4f:df:fc:1a:1d:9a:8a:6a:cd:c4:66:90:fe:03:81:
         1c:41:ff:d8:b8:21:50:64:9c:9b:60:b3:48:f1:5c:bd:db:ce:
         30:5f:9d:b5:22:c2:0d:b5:49:3d:4c:be:7d:5e:57:22:3a:cf:
         25:a0:1c:95:91:f7:2f:c1:b8:74:1d:f0:59:fd:c5:79:d2:de:
         57:02:db:cb:35:59:a4:f2:cb:83:98:8e:56:70:f4:61:39:60:
         09:b6:c6:dd:94:32:04:64:99:b0:4b:c3:bc:f9:a4:0a:f4:e8:
         31:56:42:52:f2:b7:fa:64:83:f9:84:1a:ba:81:91:44:80:b0:
         47:72:ed:e2:7b:4d:b7:ab:3d:6a:48:ea:f6:06:24:4d:77:40:
         b9:46:14:cb:0c:31:e2:9b:03:f4:84:24:d4:0d:e2:2c:f0:76:
         fa:b2:05:d6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM5MkIxMTAvBgNVBAUTKDkzNEZGMjNCMzhFQzZENThBNkNBQUI3MDdCNzk1NTUx
Qzg5QzMxRkQwHhcNMjUxMDExMDIyNjIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzRmZC02ZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcE983QxwxzKCND0JXPe8eRh0UO+iyeGK4tyVoAG1tL5rCEprPKaHFV9cv4U
tztSuQ5ST/ocIMo06pQ2YUObSOO0U0fh7byqJh6zJCWJ/gDswL6bOOZa+J7WrqGE
kVaYCIKLkrGrpqGNy2O7J6boMEYibDaUCSDzdMsuU64w5A71JkIz5HfJQGjU06N2
iRkfpSYHlzIyJekBUZkppkYJXUsMAyvwd089Uwj/3raZ5r4RWJ1uVWP1bu6bNlOE
C2gT/930xuTakJ/knBLo+MDgiWkyAeWlA06mWKjaZVK3M9iMGVWOqDY5zPK4LhKj
PYmWUpHXscUnqRJHOLYMfsN3swIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDeZGvb9
mAewPEUzdxsFzBjIv9ETMB8GA1UdIwQYMBaAFJNP8js47G1YpsqrcHt5VVHInDH9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzkyQi9CMjBEQUQ2NjQ4
MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JWaW15cXR3ZTNsVlVjaWNN
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2swX3lPempzYlZpbXlxdHdlM2xWVWNpY01mMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzM5MkIvQjIwREFENjY0ODIzMTFFQzkzNzY4MzEyQzRGOUFFMDIvQjdCRTFEQUM0
ODI1MTFFQ0ExQTY4RjEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ44oMA0GCSqGSIb3DQEBCwUAA4IBAQA2BTgaOrZrOz9QdpC+PF6p
TXisaoeaSS+gYZptxynvMcMuUzEVqC205q2svndr/HIo2To2Bsee/FZILZRwOQGs
8riFzvGbs+csALFXqsxFnUjeB0qpgaoI2kPgnItP3/waHZqKas3EZpD+A4EcQf/Y
uCFQZJybYLNI8Vy9284wX521IsINtUk9TL59XlciOs8loByVkfcvwbh0HfBZ/cV5
0t5XAtvLNVmk8suDmI5WcPRhOWAJtsbdlDIEZJmwS8O8+aQK9OgxVkJS8rf6ZIP5
hBq6gZFEgLBHcu3ie023qz1qSOr2BiRNd0C5RhTLDDHimwP0hCTUDeIs8Hb6sgXW
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:32 2026 by rpki-client