Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/A98754E2F1D011ECA4B56760C4F9AE02.roa
File:                     A98754E2F1D011ECA4B56760C4F9AE02.roa (raw, json)
Hash identifier:          5/Ww5JnvGXBocf2Wz+a0mphVRj8ZAu6MvDJEJRiSVxE=
Subject key identifier:   0C:01:B7:C7:0D:B1:F7:C6:8B:F8:04:AD:45:41:38:62:D8:84:83:A6
Certificate issuer:       /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC
Certificate serial:       034F
Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/A98754E2F1D011ECA4B56760C4F9AE02.roa
Signing time:             Fri 27 Feb 2026 01:20:49 +0000
ROA not before:           Fri 27 Feb 2026 01:20:49 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138583
IP address blocks:        103.133.212.0/24 maxlen: 24
                          2001:df7:bb80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl
                          rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D415B, serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC
        Validity
            Not Before: Feb 27 01:20:49 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a0f171-4d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:cf:7b:fe:64:2e:3f:f9:04:16:56:a0:e0:
                    95:4d:db:60:e6:3c:fb:fe:01:ac:e8:ac:37:f6:e3:
                    1e:11:c5:38:04:d6:6b:fc:97:d7:04:b6:de:92:f9:
                    74:93:bd:ed:78:55:cc:67:ed:9e:27:50:bb:9f:e6:
                    97:76:60:8f:a5:e0:c9:e7:50:6c:4b:c8:8f:e0:26:
                    f7:98:b4:29:11:eb:db:a9:58:32:b6:eb:4e:0a:5f:
                    05:00:93:7e:b7:10:75:aa:30:ec:ac:bf:13:2a:2e:
                    1d:5c:e6:48:9b:b7:8a:12:6d:94:90:d9:20:da:4f:
                    85:d9:1d:e9:cc:56:6f:b3:b2:69:15:77:9a:50:2d:
                    af:26:2c:82:18:73:09:65:a1:29:b1:8b:70:94:44:
                    47:8c:38:de:f3:3b:29:6e:28:f7:26:18:ca:e0:ab:
                    9f:7c:7b:15:8a:67:53:21:71:79:1b:51:2d:0f:a1:
                    a4:71:25:ac:9d:b8:c3:0c:3a:9f:5e:e8:6b:9d:26:
                    82:48:53:00:02:3c:2f:06:9a:0b:33:9f:cf:0b:ea:
                    02:77:f7:13:98:6f:78:0c:dc:76:68:f6:9c:c5:12:
                    ad:a7:44:b1:18:b6:99:1d:0d:3c:3a:f6:67:36:c2:
                    ea:71:db:ab:8e:10:5a:3a:b2:a9:aa:fb:16:30:ef:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:B7:C7:0D:B1:F7:C6:8B:F8:04:AD:45:41:38:62:D8:84:83:A6
            X509v3 Authority Key Identifier:
                keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/A98754E2F1D011ECA4B56760C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.212.0/24
                IPv6:
                  2001:df7:bb80::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:3f:c6:e3:1e:78:ee:93:fe:b1:65:86:83:ba:43:4d:d2:89:
         db:02:ed:77:11:16:bc:12:85:6e:9a:f8:0f:ba:e7:19:6e:63:
         63:18:38:4c:1a:d0:f8:02:74:30:01:25:e6:7e:83:b7:f8:e6:
         48:a5:58:fe:0e:5f:3b:fd:ec:60:4b:04:4d:ce:1f:ff:e9:ab:
         b6:80:9f:9c:46:4f:3e:32:b3:83:87:a5:ac:b8:e3:91:f1:05:
         79:4d:cd:d5:a7:38:51:9c:a4:0d:6e:f2:df:53:d6:5a:26:f2:
         0f:ff:b0:e5:ee:a0:56:07:cd:f0:65:74:0a:88:f5:60:69:ee:
         5c:a0:b6:e8:1f:5c:dd:2e:b6:77:8e:26:25:20:28:c6:68:d3:
         6e:9e:4e:53:64:95:e7:54:68:02:e0:72:91:9e:7b:5d:bf:f2:
         ba:c9:77:bd:ad:7f:cc:08:60:70:bf:01:cf:27:3b:7b:ac:be:
         01:85:bc:f9:63:e4:a8:f2:cc:72:53:02:01:b1:1e:04:4c:3f:
         fe:a3:61:9e:67:4b:cd:2b:18:bb:da:4f:6e:be:64:0a:38:1e:
         38:3d:db:8d:24:f6:b1:6b:6b:de:1b:11:2e:c8:b5:a0:3c:96:
         d4:e1:37:8b:42:fa:8c:39:40:c4:e4:30:b2:3a:6a:bc:4a:f0:
         47:4f:26:ba
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICA08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDQxNUIxMTAvBgNVBAUTKDZBQzRDMUI0QjY5MUJFQ0YxMkRERjcyNjVGOTYyNkQ1
OUFDNzY2Q0MwHhcNMjYwMjI3MDEyMDQ5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWEwZjE3MS00ZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ojPe/5kLj/5BBZWoOCVTdtg5jz7/gGs6Kw39uMeEcU4BNZr/JfXBLbekvl0
k73teFXMZ+2eJ1C7n+aXdmCPpeDJ51BsS8iP4Cb3mLQpEevbqVgytutOCl8FAJN+
txB1qjDsrL8TKi4dXOZIm7eKEm2UkNkg2k+F2R3pzFZvs7JpFXeaUC2vJiyCGHMJ
ZaEpsYtwlERHjDje8zspbij3JhjK4KuffHsVimdTIXF5G1EtD6GkcSWsnbjDDDqf
XuhrnSaCSFMAAjwvBpoLM5/PC+oCd/cTmG94DNx2aPacxRKtp0SxGLaZHQ08OvZn
NsLqcdurjhBaOrKpqvsWMO91aQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAwBt8cN
sffGi/gErUVBOGLYhIOmMB8GA1UdIwQYMBaAFGrEwbS2kb7PEt33Jl+WJtWax2bM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE1Qi81QzU0MzY4NEYx
Q0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZzOFMzZmNtWDVZbTFackha
c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FzVEJ0TGFSdnM4UzNmY21YNVltMVpySFpzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDQxNUIvNUM1NDM2ODRGMUNEMTFFQzkzMzlCOTVGQzRGOUFFMDIvQTk4NzU0RTJG
MUQwMTFFQ0E0QjU2NzYwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ4XUMA8EAgACMAkDBwAgAQ33u4AwDQYJKoZIhvcNAQELBQADggEB
AJ8/xuMeeO6T/rFlhoO6Q03SidsC7XcRFrwShW6a+A+65xluY2MYOEwa0PgCdDAB
JeZ+g7f45kilWP4OXzv97GBLBE3OH//pq7aAn5xGTz4ys4OHpay445HxBXlNzdWn
OFGcpA1u8t9T1lom8g//sOXuoFYHzfBldAqI9WBp7lygtugfXN0utneOJiUgKMZo
026eTlNkledUaALgcpGee12/8rrJd72tf8wIYHC/Ac8nO3usvgGFvPlj5KjyzHJT
AgGxHgRMP/6jYZ5nS80rGLvaT26+ZAo4Hjg9240k9rFra94bES7ItaA8ltThN4tC
+ow5QMTkMLI6arxK8EdPJro=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:09 2026 by rpki-client