Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/8FADE73CA49B11EEB19E774BC4F9AE02.roa
File:                     8FADE73CA49B11EEB19E774BC4F9AE02.roa (raw, json)
Hash identifier:          2893HNR31GoP/uh0ScggOWfiNSgjFGwQgJxlawN3n4I=
Subject key identifier:   3B:7E:A5:72:2F:5C:9C:79:A5:D6:20:60:33:97:DA:0C:19:CE:2F:7E
Certificate issuer:       /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial:       08C3
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/8FADE73CA49B11EEB19E774BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:54:40 +0000
ROA not before:           Mon 02 Jun 2025 21:08:17 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9541
IP address blocks:        103.139.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
                          rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2243 (0x8c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
        Validity
            Not Before: Jun  2 21:08:17 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42900-af06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e9:b6:36:05:31:dd:b0:27:ab:e7:cb:e2:3f:
                    58:bd:ef:fe:2a:65:d1:9d:2c:80:7e:f8:b1:0d:34:
                    36:21:1e:49:0c:50:80:35:4e:fa:f5:12:84:c0:f8:
                    29:61:d4:fa:f4:f3:2e:43:db:8e:f2:5d:f0:b1:75:
                    27:3b:d5:d9:2a:0f:8e:2a:16:4a:1f:27:45:45:53:
                    c7:05:bf:4d:d1:f2:1d:cd:bc:f7:3a:75:e1:e3:1d:
                    5c:42:83:82:46:b9:7f:27:23:70:5d:d7:d9:d8:86:
                    7f:72:7f:d8:72:60:54:29:19:10:17:81:c3:5c:3d:
                    03:80:68:4a:3f:c0:e8:c3:3c:01:c0:e3:03:6d:49:
                    c5:85:87:66:f2:88:60:1d:3f:99:43:c1:2d:0b:c0:
                    2c:d6:f3:1d:87:78:fe:6b:3a:79:ae:3b:26:6c:66:
                    c3:62:d7:94:31:81:4f:5f:d3:00:d4:dd:94:52:41:
                    61:ab:3c:18:5e:82:94:c7:30:a5:2c:6c:6b:6a:b5:
                    bb:b1:84:e5:a5:f1:7b:06:36:57:15:6e:07:d6:71:
                    5c:23:84:79:fa:25:ff:0b:af:09:98:76:5b:55:6d:
                    6f:02:93:0b:1b:88:68:e2:bb:cc:c0:06:ad:04:0e:
                    9c:f1:a7:63:83:11:e3:d8:81:e0:55:78:27:7e:be:
                    4c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7E:A5:72:2F:5C:9C:79:A5:D6:20:60:33:97:DA:0C:19:CE:2F:7E
            X509v3 Authority Key Identifier:
                keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/8FADE73CA49B11EEB19E774BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:fd:bc:73:7b:5a:06:87:01:f9:e1:d8:ba:eb:e2:42:5b:43:
         d8:32:b7:81:19:d3:45:be:63:0c:d7:22:55:f2:b4:fc:83:ae:
         15:b6:88:30:ef:52:df:0b:84:ea:1d:57:cd:29:20:e6:f0:9c:
         de:27:4c:f3:b2:51:10:fa:4e:13:f2:93:58:48:5c:f8:d6:23:
         e2:a6:c4:74:4f:f6:99:fa:0e:14:ca:24:3d:c7:d4:f4:17:fd:
         6f:bd:ad:b5:68:ff:4b:bb:50:c1:e7:cf:d4:0d:e4:7e:aa:c7:
         1f:5e:a8:2f:8b:7d:58:47:dc:95:27:0b:4e:e5:20:d4:a7:4a:
         15:82:52:ef:91:7f:02:5b:e1:63:53:6e:d1:d0:60:9c:b6:b3:
         db:8c:6a:07:b6:a3:a5:88:f8:e5:bb:31:a3:fc:0c:30:dc:07:
         d1:a7:77:0c:9e:0d:e2:96:37:ba:ad:23:6b:61:4a:09:44:f3:
         9f:b1:27:e2:e0:99:60:ec:94:19:c0:15:74:64:c8:6d:67:37:
         28:c7:ee:4d:a5:4e:5c:50:b7:10:b3:c9:84:0e:6c:05:ed:a7:
         6e:dc:56:bf:36:26:66:49:17:65:24:1e:6a:cc:e3:85:4e:49:
         aa:52:27:83:d3:7a:07:3f:1d:70:b4:6b:35:09:60:26:a6:64:
         01:20:31:cc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG
MDEzNjQzNTgwHhcNMjUwNjAyMjEwODE3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjkwMC1hZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Om2NgUx3bAnq+fL4j9Yve/+KmXRnSyAfvixDTQ2IR5JDFCANU769RKEwPgp
YdT69PMuQ9uO8l3wsXUnO9XZKg+OKhZKHydFRVPHBb9N0fIdzbz3OnXh4x1cQoOC
Rrl/JyNwXdfZ2IZ/cn/YcmBUKRkQF4HDXD0DgGhKP8DowzwBwOMDbUnFhYdm8ohg
HT+ZQ8EtC8As1vMdh3j+azp5rjsmbGbDYteUMYFPX9MA1N2UUkFhqzwYXoKUxzCl
LGxrarW7sYTlpfF7BjZXFW4H1nFcI4R5+iX/C68JmHZbVW1vApMLG4ho4rvMwAat
BA6c8adjgxHj2IHgVXgnfr5M5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDt+pXIv
XJx5pdYgYDOX2gwZzi9+MB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy
MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR
MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0Y3N0QvMTFFMjU5RDBEMjJEMTFFQThBRTczRDI3QzRGOUFFMDIvOEZBREU3M0NB
NDlCMTFFRUIxOUU3NzRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4s+MA0GCSqGSIb3DQEBCwUAA4IBAQBJ/bxze1oGhwH54di66+JC
W0PYMreBGdNFvmMM1yJV8rT8g64Vtogw71LfC4TqHVfNKSDm8JzeJ0zzslEQ+k4T
8pNYSFz41iPipsR0T/aZ+g4UyiQ9x9T0F/1vva21aP9Lu1DB58/UDeR+qscfXqgv
i31YR9yVJwtO5SDUp0oVglLvkX8CW+FjU27R0GCctrPbjGoHtqOliPjluzGj/Aww
3AfRp3cMng3ilje6rSNrYUoJRPOfsSfi4Jlg7JQZwBV0ZMhtZzcox+5NpU5cULcQ
s8mEDmwF7adu3Fa/NiZmSRdlJB5qzOOFTkmqUieD03oHPx1wtGs1CWAmpmQBIDHM
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:10 2026 by rpki-client