Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/BD314CEA619711EE81211277C4F9AE02.roa
File:                     BD314CEA619711EE81211277C4F9AE02.roa (raw, json)
Hash identifier:          5im2El+XqMtWQp5XtOEvy4f/d1/1FRGNJyssOKlFrL0=
Subject key identifier:   B1:7D:D5:4B:74:16:7C:08:B3:47:A1:11:B7:8E:03:08:83:27:14:B6
Certificate issuer:       /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial:       1ED1
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/BD314CEA619711EE81211277C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:28:45 +0000
ROA not before:           Thu 04 Sep 2025 16:24:44 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     58668
IP address blocks:        103.12.236.0/22 maxlen: 22
                          103.12.236.0/23 maxlen: 23
                          103.12.236.0/23 maxlen: 24
                          103.12.236.0/24 maxlen: 24
                          103.12.237.0/24 maxlen: 24
                          103.12.238.0/23 maxlen: 23
                          103.12.238.0/23 maxlen: 24
                          103.12.238.0/24 maxlen: 24
                          103.12.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7889 (0x1ed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
        Validity
            Not Before: Sep  4 16:24:44 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a45b2d-7805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:51:3b:4e:65:1d:a5:48:51:d3:ba:63:44:
                    b8:15:43:f3:9e:e7:96:5a:e7:23:8d:f6:15:46:66:
                    97:b2:08:20:e7:15:da:7a:71:ed:fe:76:a8:61:cc:
                    53:0d:a0:d0:1e:99:51:86:03:97:d9:29:e2:4d:42:
                    12:76:a4:09:50:65:cb:b9:53:a5:48:5f:fc:3c:82:
                    7f:5e:f0:e9:65:b4:50:a0:2f:fe:9a:09:61:3a:5e:
                    07:26:8a:6d:d2:20:bb:b6:ec:48:61:90:f8:0d:50:
                    fe:27:7d:bf:2f:73:b9:08:45:98:19:3d:95:c6:84:
                    9c:1b:34:ad:93:d2:8f:e6:9d:ce:a6:f5:e9:b3:9f:
                    c3:dc:f1:d6:c4:7c:9a:95:6b:f9:5f:a1:68:93:a4:
                    75:bb:5b:78:bd:66:bb:e9:32:8c:cd:2b:38:b6:47:
                    f1:cd:98:f5:a4:a1:fd:f8:fa:5f:19:44:cb:c1:c3:
                    54:b6:36:c2:ef:ef:ee:b9:2f:af:a2:53:b6:f7:e5:
                    09:b6:cd:f0:f3:5f:d8:77:55:e8:06:68:42:82:cd:
                    6b:f2:27:2a:5b:87:ab:04:67:b0:fb:c9:36:08:d1:
                    c5:1c:a9:81:df:41:2f:67:79:de:9d:d5:62:94:94:
                    85:7e:c8:ee:87:b1:6b:f2:24:cb:a6:34:87:b6:5f:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7D:D5:4B:74:16:7C:08:B3:47:A1:11:B7:8E:03:08:83:27:14:B6
            X509v3 Authority Key Identifier:
                keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/BD314CEA619711EE81211277C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:fa:cd:0d:e2:6a:ef:bc:2b:b6:58:89:be:1e:5e:49:e3:
         88:2f:44:cd:87:33:38:6c:7b:31:d5:d5:e3:d3:04:2e:1c:3a:
         9f:41:39:57:4d:b0:58:92:21:e9:75:b6:19:ac:39:49:a9:c0:
         1e:86:67:bc:04:3e:24:ab:ee:d2:86:d1:e7:4b:94:ac:90:26:
         ba:b4:d4:77:4c:12:45:d7:40:ce:3e:f5:dd:72:68:dc:96:35:
         47:ca:b4:49:53:3c:3b:a0:fd:df:3c:01:b5:96:74:da:6a:1a:
         58:6e:5f:50:e9:fd:0c:a0:ae:ae:0a:51:ad:e2:a1:c6:53:81:
         2e:33:85:51:f0:25:42:ab:ca:7d:a1:34:c0:e0:11:ce:3e:02:
         e2:bc:f3:83:7f:fc:44:28:92:35:57:07:46:d5:ef:2b:df:3e:
         52:16:44:47:77:86:55:68:23:39:b0:74:be:cf:ae:44:2a:ee:
         a3:0c:5b:dd:6c:1b:a1:ac:5e:1c:34:85:4a:3d:87:66:b3:80:
         30:fc:49:6e:d7:09:54:ac:43:5c:6c:94:f2:b2:a2:b9:a0:82:
         4b:88:02:fd:66:6f:8a:ef:f9:36:13:fc:23:8c:b3:41:59:6b:
         c9:ad:68:47:5d:26:c7:b1:12:fd:e1:ec:48:98:02:68:10:bf:
         24:2c:1a:c0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICHtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw
NDJFQ0U0NjcwHhcNMjUwOTA0MTYyNDQ0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWIyZC03ODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxSxRO05lHaVIUdO6Y0S4FUPznueWWucjjfYVRmaXsggg5xXaenHt/naoYcxT
DaDQHplRhgOX2SniTUISdqQJUGXLuVOlSF/8PIJ/XvDpZbRQoC/+mglhOl4HJopt
0iC7tuxIYZD4DVD+J32/L3O5CEWYGT2VxoScGzStk9KP5p3OpvXps5/D3PHWxHya
lWv5X6Fok6R1u1t4vWa76TKMzSs4tkfxzZj1pKH9+PpfGUTLwcNUtjbC7+/uuS+v
olO29+UJts3w81/Yd1XoBmhCgs1r8icqW4erBGew+8k2CNHFHKmB30EvZ3nendVi
lJSFfsjuh7Fr8iTLpjSHtl9/yQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLF91Ut0
FnwIs0ehEbeOAwiDJxS2MB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB
RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0RDQjYvNjdDNkFBNEE4QUYxMTFFNjk4MDc4MzU1QzRGOUFFMDIvQkQzMTRDRUE2
MTk3MTFFRTgxMjExMjc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwzsMA0GCSqGSIb3DQEBCwUAA4IBAQBaV/rNDeJq77wrtliJvh5e
SeOIL0TNhzM4bHsx1dXj0wQuHDqfQTlXTbBYkiHpdbYZrDlJqcAehme8BD4kq+7S
htHnS5SskCa6tNR3TBJF10DOPvXdcmjcljVHyrRJUzw7oP3fPAG1lnTaahpYbl9Q
6f0MoK6uClGt4qHGU4EuM4VR8CVCq8p9oTTA4BHOPgLivPODf/xEKJI1VwdG1e8r
3z5SFkRHd4ZVaCM5sHS+z65EKu6jDFvdbBuhrF4cNIVKPYdms4Aw/Elu1wlUrENc
bJTysqK5oIJLiAL9Zm+K7/k2E/wjjLNBWWvJrWhHXSbHsRL94exImAJoEL8kLBrA
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:18 2026 by rpki-client