Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/BE633CD283A611EE804BB319C4F9AE02.roa
File:                     BE633CD283A611EE804BB319C4F9AE02.roa (raw, json)
Hash identifier:          VEGEjvA8mXlTYgeX41lw6Rhiexaef4whXcV7cTx74tM=
Subject key identifier:   F6:26:B0:0B:B8:34:06:52:AB:0A:CF:E9:50:01:D3:7C:40:FE:2D:E9
Certificate issuer:       /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial:       0B23
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/BE633CD283A611EE804BB319C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:44:49 +0000
ROA not before:           Sun 28 Dec 2025 19:16:24 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135341
IP address blocks:        103.127.2.0/24 maxlen: 24
                          103.127.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2851 (0xb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
        Validity
            Not Before: Dec 28 19:16:24 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46d00-e225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:59:2f:71:1b:61:7c:e2:e9:af:b1:c9:6b:
                    a2:31:19:10:a2:bb:31:79:9e:ab:53:ab:21:88:3e:
                    ca:dd:23:e0:f2:21:3f:e3:1b:98:d5:23:c5:e2:fe:
                    c2:0a:48:f3:35:07:5c:88:8a:c4:79:b8:70:cb:20:
                    7b:bd:57:6e:25:72:d6:bf:28:db:28:34:a1:17:79:
                    4d:d0:fc:76:30:d9:a4:f1:7a:63:b3:1d:2d:5b:ad:
                    83:7a:af:c1:c8:07:d0:09:dc:74:da:56:02:f2:a4:
                    f3:58:6c:e9:99:22:0a:30:cf:79:c2:f1:f3:47:43:
                    15:ab:39:2d:ba:1b:a4:8c:a9:a8:cb:4a:b7:cc:1a:
                    38:6c:f2:49:2d:d8:45:72:f9:39:5e:49:35:27:db:
                    74:0e:ab:ae:1f:ed:ae:f2:b3:a8:70:2d:25:1d:fa:
                    fa:84:95:a0:ae:d6:f9:07:e0:c2:bc:98:04:b4:20:
                    3f:16:fb:16:34:cd:60:21:80:ae:51:49:31:4a:34:
                    e1:18:d0:85:f1:c1:68:7d:dd:e9:00:e5:2e:09:8f:
                    97:a7:4e:0b:78:37:e5:e7:48:6e:e7:f4:46:66:03:
                    0e:e0:d3:10:39:0e:23:6b:bc:d5:0c:8a:b0:16:4e:
                    3e:4a:b5:6f:e5:f0:ea:a7:80:1b:f3:e7:3c:bf:ba:
                    d9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:26:B0:0B:B8:34:06:52:AB:0A:CF:E9:50:01:D3:7C:40:FE:2D:E9
            X509v3 Authority Key Identifier:
                keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/BE633CD283A611EE804BB319C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:d5:20:82:1b:fb:e8:05:7f:b7:9b:c1:00:a8:f7:96:2a:
         c0:a0:85:07:f5:92:16:21:67:41:8e:6f:a4:76:c5:cd:ac:a7:
         80:d0:45:37:1e:c4:e5:21:c8:2f:85:bb:dc:3d:cf:ed:00:1a:
         71:07:40:fd:e0:b3:15:e4:2a:36:92:e9:40:62:ca:6b:1b:8c:
         72:ea:e3:af:0f:22:19:9e:1e:3f:c1:23:02:c8:55:87:fc:9a:
         d4:8d:41:bc:0a:a8:cf:a8:e3:c7:f2:7c:42:ae:65:85:23:e5:
         0b:ed:13:61:90:24:aa:61:84:90:0c:d7:6e:e6:92:ef:4d:67:
         b2:6b:41:83:d8:5c:e1:fc:dc:38:30:ae:96:77:75:4a:58:46:
         eb:6a:97:f1:35:17:9d:58:8e:71:2f:c0:51:2c:fb:30:e4:f3:
         9e:15:5b:44:3f:bd:14:16:6d:e1:95:b1:39:68:db:3c:61:2f:
         75:7d:90:3c:fe:a6:46:36:a9:3c:ec:9f:1a:8c:da:9a:c0:21:
         d9:9a:86:55:f5:5f:23:b0:68:dc:b1:ab:86:af:0f:27:b6:c1:
         08:b6:70:b0:4a:a3:f4:65:98:3a:75:40:fd:6b:4b:29:fe:a6:
         a6:25:57:90:18:f8:c2:61:1e:42:09:78:54:60:2d:0a:94:50:
         9c:2b:f4:b8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG
MUY2RUZCMTQwHhcNMjUxMjI4MTkxNjI0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmQwMC1lMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnwBZL3EbYXzi6a+xyWuiMRkQorsxeZ6rU6shiD7K3SPg8iE/4xuY1SPF4v7C
CkjzNQdciIrEebhwyyB7vVduJXLWvyjbKDShF3lN0Px2MNmk8Xpjsx0tW62Deq/B
yAfQCdx02lYC8qTzWGzpmSIKMM95wvHzR0MVqzktuhukjKmoy0q3zBo4bPJJLdhF
cvk5Xkk1J9t0DquuH+2u8rOocC0lHfr6hJWgrtb5B+DCvJgEtCA/FvsWNM1gIYCu
UUkxSjThGNCF8cFofd3pAOUuCY+Xp04LeDfl50hu5/RGZgMO4NMQOQ4ja7zVDIqw
Fk4+SrVv5fDqp4Ab8+c8v7rZvQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPYmsAu4
NAZSqwrP6VAB03xA/i3pMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0
MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0NCRDcvMTkyM0JGNjg2NDI4MTFFQUE3MDQxRDQ4QzRGOUFFMDIvQkU2MzNDRDI4
M0E2MTFFRTgwNEJCMzE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ38CMA0GCSqGSIb3DQEBCwUAA4IBAQALItUgghv76AV/t5vBAKj3
lirAoIUH9ZIWIWdBjm+kdsXNrKeA0EU3HsTlIcgvhbvcPc/tABpxB0D94LMV5Co2
kulAYsprG4xy6uOvDyIZnh4/wSMCyFWH/JrUjUG8CqjPqOPH8nxCrmWFI+UL7RNh
kCSqYYSQDNdu5pLvTWeya0GD2Fzh/Nw4MK6Wd3VKWEbrapfxNRedWI5xL8BRLPsw
5POeFVtEP70UFm3hlbE5aNs8YS91fZA8/qZGNqk87J8ajNqawCHZmoZV9V8jsGjc
sauGrw8ntsEItnCwSqP0ZZg6dUD9a0sp/qamJVeQGPjCYR5CCXhUYC0KlFCcK/S4
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:31:59 2026 by rpki-client