Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa
File:                     347B37060B7011F0BED04B49C4F9AE02.roa (raw, json)
Hash identifier:          CHZU+zszPQ+tFMfNIVE/wkHsje39UMtfAADrnw52zrI=
Subject key identifier:   8E:40:F1:A3:B7:58:8C:B5:9D:D0:3F:AE:65:7B:E3:D3:3F:AF:0B:39
Certificate issuer:       /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Certificate serial:       D0
Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa
Signing time:             Fri 13 Mar 2026 06:43:36 +0000
ROA not before:           Fri 13 Mar 2026 06:43:36 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138653
IP address blocks:        103.135.231.0/24 maxlen: 24
                          2001:df5:440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
                          rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
        Validity
            Not Before: Mar 13 06:43:36 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b3b218-be31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:2b:5d:c4:d5:9f:01:56:7a:f6:f4:a5:92:
                    29:86:f9:80:ba:32:2f:36:df:08:56:37:49:31:ff:
                    28:0f:b6:f4:63:5a:e9:8d:b7:b2:37:b7:9b:ef:1c:
                    fc:c7:c2:2f:e4:79:95:3c:69:e0:d4:80:d8:ed:e8:
                    80:b1:40:d1:1a:c8:5d:ca:36:eb:46:3f:3f:79:cc:
                    6b:bf:c6:b5:9d:47:45:aa:a0:8f:c2:ac:53:98:0e:
                    9f:60:4f:d0:15:ea:25:0b:a0:cd:7d:87:63:7f:31:
                    fd:5f:2d:74:d4:62:15:7d:49:28:41:2b:49:2e:97:
                    4b:cd:d0:38:f5:0c:1f:d8:a9:92:0b:8c:0c:18:aa:
                    60:f7:8e:14:1d:b1:e4:e5:f8:fa:44:26:21:bb:17:
                    dd:82:18:54:0d:04:30:69:b8:a7:c5:d6:78:13:ac:
                    20:76:2d:fc:7b:c2:b4:f0:81:6d:dc:6a:4e:80:50:
                    57:e6:b4:be:c7:3c:65:c4:2d:7f:77:67:5e:8f:cd:
                    65:e2:04:5c:cd:f0:84:70:6e:b0:a0:a7:96:f0:5e:
                    2d:09:2e:69:f3:a0:f5:4a:2d:97:f3:db:dd:05:f4:
                    33:f7:1b:8a:13:c1:45:5a:ff:ff:3c:de:91:d9:0e:
                    02:7d:4c:e9:29:bf:d2:c3:1f:ff:2c:37:34:d4:85:
                    5e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:40:F1:A3:B7:58:8C:B5:9D:D0:3F:AE:65:7B:E3:D3:3F:AF:0B:39
            X509v3 Authority Key Identifier:
                keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.231.0/24
                IPv6:
                  2001:df5:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:13:da:a5:07:e5:be:a4:a8:3c:17:43:30:5a:91:ee:4f:01:
         6c:ae:d9:74:80:09:33:5c:c8:12:7f:9e:f1:c2:4f:88:b6:01:
         d8:69:e5:58:1c:cb:4e:8e:20:f6:38:1f:c7:35:38:b8:14:bd:
         a7:60:e3:b3:fc:b9:3b:db:7f:a4:12:f1:fb:b6:76:cc:b9:31:
         3f:0e:88:79:e5:4a:2a:2a:37:df:6a:69:d1:cb:13:53:bf:89:
         49:3a:80:96:9b:ef:c9:5a:4f:ab:42:7e:8f:5a:b9:62:5e:e9:
         e4:96:a2:cb:ff:39:21:cc:f1:07:36:ac:31:40:90:c4:b1:15:
         67:44:68:45:b7:eb:b9:51:ec:e0:11:e9:51:fd:1d:52:28:58:
         24:3e:e7:b9:87:db:02:f5:8b:78:19:cf:0c:82:ea:6f:a0:25:
         ab:50:4d:99:a4:59:12:e0:b1:96:6e:94:5b:da:c8:ac:60:0f:
         14:a2:6c:dc:17:4a:df:30:3e:93:da:e4:ff:f1:0d:44:0e:55:
         c1:c2:a8:e3:6d:cc:6c:c6:ca:e9:48:51:43:50:1a:a6:83:5a:
         86:ab:c4:8f:db:7b:0b:9d:06:30:3a:03:ee:8c:0e:30:8a:93:
         f0:2f:74:37:5b:9a:69:bc:89:06:6a:d5:20:ff:a5:e1:77:99:
         8c:2e:e3:a3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA0OUYxMTAvBgNVBAUTKDhBQjk0NTgyQjAyRUFBODNBMjg1RjFDOTFGQzg1OUEw
RTJDMTEzNTMwHhcNMjYwMzEzMDY0MzM2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIzYjIxOC1iZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmzIrXcTVnwFWevb0pZIphvmAujIvNt8IVjdJMf8oD7b0Y1rpjbeyN7eb7xz8
x8Iv5HmVPGng1IDY7eiAsUDRGshdyjbrRj8/ecxrv8a1nUdFqqCPwqxTmA6fYE/Q
FeolC6DNfYdjfzH9Xy101GIVfUkoQStJLpdLzdA49Qwf2KmSC4wMGKpg944UHbHk
5fj6RCYhuxfdghhUDQQwabinxdZ4E6wgdi38e8K08IFt3GpOgFBX5rS+xzxlxC1/
d2dej81l4gRczfCEcG6woKeW8F4tCS5p86D1Si2X89vdBfQz9xuKE8FFWv//PN6R
2Q4CfUzpKb/Swx//LDc01IVeUQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFI5A8aO3
WIy1ndA/rmV749M/rws5MB8GA1UdIwQYMBaAFIq5RYKwLqqDooXxyR/IWaDiwRNT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDQ5Ri9DMDc0QzUxQ0Y4
RTUxMUVGQkVBNTIyNzFDNEY5QUUwMi9pcmxGZ3JBdXFvT2loZkhKSDhoWm9PTEJF
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lybEZnckF1cW9PaWhmSEpIOGhab09MQkUxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA0OUYvQzA3NEM1MUNGOEU1MTFFRkJFQTUyMjcxQzRGOUFFMDIvMzQ3QjM3MDYw
QjcwMTFGMEJFRDA0QjQ5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ4fnMA8EAgACMAkDBwAgAQ31BEAwDQYJKoZIhvcNAQELBQADggEB
AGYT2qUH5b6kqDwXQzBake5PAWyu2XSACTNcyBJ/nvHCT4i2Adhp5Vgcy06OIPY4
H8c1OLgUvadg47P8uTvbf6QS8fu2dsy5MT8OiHnlSioqN99qadHLE1O/iUk6gJab
78laT6tCfo9auWJe6eSWosv/OSHM8Qc2rDFAkMSxFWdEaEW367lR7OAR6VH9HVIo
WCQ+57mH2wL1i3gZzwyC6m+gJatQTZmkWRLgsZZulFvayKxgDxSibNwXSt8wPpPa
5P/xDUQOVcHCqONtzGzGyulIUUNQGqaDWoarxI/bewudBjA6A+6MDjCKk/AvdDdb
mmm8iQZq1SD/peF3mYwu46M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:21 2026 by rpki-client