Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/5F506D7C8C7911EBB7E88620C4F9AE02.roa
File:                     5F506D7C8C7911EBB7E88620C4F9AE02.roa (raw, json)
Hash identifier:          Jg71CQh08KLYbbjjEZzTeyDZeQ8B6eKm18WWzoCmHMg=
Subject key identifier:   99:7E:62:38:CC:44:76:0E:03:4D:08:7E:7E:B6:13:E0:02:3F:A8:58
Certificate issuer:       /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
Certificate serial:       06EC
Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/5F506D7C8C7911EBB7E88620C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:13:59 +0000
ROA not before:           Sat 20 Dec 2025 22:18:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139911
IP address blocks:        103.147.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl
                          rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772 (0x6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E08E, serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
        Validity
            Not Before: Dec 20 22:18:53 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a449a7-ba18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:d9:11:7d:02:53:b9:cf:58:a5:69:fe:cc:
                    a3:6c:c7:6a:44:03:32:8f:9a:92:82:9b:b0:b9:f6:
                    2b:7b:9c:f0:21:a3:c3:11:a0:c4:37:0d:75:a5:9a:
                    dc:59:cf:67:9e:2c:a7:f8:e4:0d:58:c8:4e:cf:4a:
                    c2:1e:33:9d:40:75:07:fa:d2:68:b5:eb:71:4d:57:
                    6f:82:73:fd:80:70:5a:b1:c1:c7:91:38:ce:bb:82:
                    2e:98:44:fb:a7:4a:cf:67:2d:33:a3:fe:6c:d2:6e:
                    25:69:d9:f3:d9:af:73:44:0e:1a:ad:27:35:b0:99:
                    da:88:f7:20:78:51:d0:a7:76:ef:fa:ff:ac:b2:1c:
                    86:72:c8:63:2b:d9:61:f9:d8:aa:d3:64:80:64:bf:
                    a6:53:67:41:ed:bb:ec:33:3f:da:5f:20:0c:e9:bf:
                    3e:91:c4:fe:32:1f:72:da:ac:50:f1:c2:bb:fb:c1:
                    79:99:26:00:75:2c:78:b7:48:80:2c:f0:21:16:66:
                    c9:74:6e:e7:c1:16:ab:ce:98:9c:1b:13:d7:72:a3:
                    24:aa:9b:e0:5a:0d:aa:31:05:20:17:3e:cd:62:52:
                    4c:7f:c4:ea:25:96:fd:11:8d:28:fd:5c:12:9c:af:
                    5c:d9:7b:0e:77:64:79:87:db:a7:98:6c:43:c4:42:
                    16:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7E:62:38:CC:44:76:0E:03:4D:08:7E:7E:B6:13:E0:02:3F:A8:58
            X509v3 Authority Key Identifier:
                keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/5F506D7C8C7911EBB7E88620C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:52:b1:ed:b9:b5:80:13:53:7b:3a:ce:bb:a4:44:8b:06:f1:
         6e:58:3f:49:4b:5b:50:06:58:eb:42:37:55:54:63:e3:aa:82:
         bc:e4:f4:d8:ed:c8:68:af:7e:aa:08:a4:4b:33:cc:9b:a4:b3:
         57:d1:6f:97:a0:7b:90:4b:51:82:23:73:0e:57:0e:44:b5:a8:
         32:c2:3b:6a:4c:73:ac:72:c1:b2:1d:01:b2:69:45:ac:4e:0e:
         45:f9:ed:22:db:2e:02:c2:50:62:0e:29:ac:38:9e:49:03:82:
         f0:13:77:54:80:2b:c4:48:e4:c2:95:37:ec:ce:7f:d8:1f:d9:
         40:b7:ea:9e:b6:50:98:4f:24:3b:2f:75:30:90:41:38:32:33:
         0d:93:ba:28:9d:1b:d3:2d:a4:4f:35:1b:0d:a4:6f:e2:31:ab:
         04:3d:65:d4:b1:c1:be:6c:e3:f9:3f:74:56:ce:9d:64:6b:73:
         76:ed:7e:3a:b2:da:5b:e6:f7:e2:2e:d5:8a:2a:73:6b:84:0f:
         f5:dc:8a:73:6b:2b:fa:e0:c3:5f:86:da:52:7a:13:17:38:ae:
         ac:e6:a0:36:2c:fe:50:47:9a:b2:db:08:54:57:51:09:0e:7c:
         ed:ae:39:09:04:dc:2e:78:19:51:ee:dd:39:51:e9:49:05:14:
         76:02:e8:c7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUUwOEUxMTAvBgNVBAUTKDEwNDhDMjdFMTE0QjkxMTMxNTVFQUVCQzkwQkVDNkRE
ODBGOEM2Q0IwHhcNMjUxMjIwMjIxODUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDlhNy1iYTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtMfZEX0CU7nPWKVp/syjbMdqRAMyj5qSgpuwufYre5zwIaPDEaDENw11pZrc
Wc9nniyn+OQNWMhOz0rCHjOdQHUH+tJotetxTVdvgnP9gHBascHHkTjOu4IumET7
p0rPZy0zo/5s0m4ladnz2a9zRA4arSc1sJnaiPcgeFHQp3bv+v+sshyGcshjK9lh
+diq02SAZL+mU2dB7bvsMz/aXyAM6b8+kcT+Mh9y2qxQ8cK7+8F5mSYAdSx4t0iA
LPAhFmbJdG7nwRarzpicGxPXcqMkqpvgWg2qMQUgFz7NYlJMf8TqJZb9EY0o/VwS
nK9c2XsOd2R5h9unmGxDxEIWwQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJl+YjjM
RHYOA00Ifn62E+ACP6hYMB8GA1UdIwQYMBaAFBBIwn4RS5ETFV6uvJC+xt2A+MbL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTA4RS9FMUNBNTg0NjhD
NzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtSTVZYcTY4a0w3RzNZRDR4
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VFakNmaEZMa1JNVlhxNjhrTDdHM1lENHhzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUUwOEUvRTFDQTU4NDY4Qzc3MTFFQjg4NUIzMTFGQzRGOUFFMDIvNUY1MDZEN0M4
Qzc5MTFFQkI3RTg4NjIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5MHMA0GCSqGSIb3DQEBCwUAA4IBAQBpUrHtubWAE1N7Os67pESL
BvFuWD9JS1tQBljrQjdVVGPjqoK85PTY7chor36qCKRLM8ybpLNX0W+XoHuQS1GC
I3MOVw5EtagywjtqTHOscsGyHQGyaUWsTg5F+e0i2y4CwlBiDimsOJ5JA4LwE3dU
gCvESOTClTfszn/YH9lAt+qetlCYTyQ7L3UwkEE4MjMNk7oonRvTLaRPNRsNpG/i
MasEPWXUscG+bOP5P3RWzp1ka3N27X46stpb5vfiLtWKKnNrhA/13Ipzayv64MNf
htpSehMXOK6s5qA2LP5QR5qy2whUV1EJDnztrjkJBNwueBlR7t05UelJBRR2AujH
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:25 2026 by rpki-client