Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/50AA91CAD70311EFB9BBC86DC4F9AE02.roa
File:                     50AA91CAD70311EFB9BBC86DC4F9AE02.roa (raw, json)
Hash identifier:          yOQ8UIyyxIlEPpq76DQLIko3L4pNxhHHewxA/jv0uaQ=
Subject key identifier:   C6:6B:55:F3:B2:90:DE:76:35:72:B4:72:F2:F8:8A:F6:76:B3:EF:89
Certificate issuer:       /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial:       0CFF
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/50AA91CAD70311EFB9BBC86DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 11:28:57 +0000
ROA not before:           Thu 30 Oct 2025 18:37:31 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133770
IP address blocks:        103.130.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
                          rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3327 (0xcff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
        Validity
            Not Before: Oct 30 18:37:31 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a57479-eff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:3f:17:17:1b:2d:f2:cb:75:79:03:22:74:
                    96:d1:0a:3e:31:f7:b4:51:0c:e9:c5:7a:9b:ca:fa:
                    9b:36:38:a1:be:77:a3:cd:0f:54:74:fd:f2:37:57:
                    e8:07:06:30:b6:dc:2f:00:e8:db:4f:bc:43:3c:af:
                    a9:e5:84:f8:f0:7a:03:ae:29:aa:9c:47:db:b1:d9:
                    31:bc:5c:b8:4f:aa:16:97:07:cf:3b:29:20:22:1b:
                    69:b5:a6:89:52:1c:b9:44:8e:c7:2d:df:77:08:e1:
                    ec:9e:e8:4a:22:04:04:b1:fb:26:39:98:79:5a:62:
                    a7:99:61:21:8d:18:02:ca:b7:e5:40:30:bf:8a:a4:
                    6a:aa:9a:bd:7a:4f:5a:fd:bc:9b:d6:b9:65:b8:b4:
                    09:8c:de:db:73:37:a7:40:b4:d6:d3:e0:46:2e:59:
                    ac:15:8a:7e:52:47:6a:9b:95:ea:f8:ae:de:4b:81:
                    40:4e:93:ab:a4:4e:d9:b4:22:b7:89:4c:87:6c:db:
                    cb:4c:9a:f4:d7:e0:57:22:a6:2f:67:2c:14:fe:25:
                    65:b1:8c:bf:5b:af:a0:c7:cf:9c:67:f8:2a:be:8c:
                    19:63:a6:cf:fd:cf:8b:98:c8:36:4e:22:04:70:c4:
                    aa:de:b1:41:b3:ba:81:74:a1:a9:e8:f6:3b:a1:d4:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6B:55:F3:B2:90:DE:76:35:72:B4:72:F2:F8:8A:F6:76:B3:EF:89
            X509v3 Authority Key Identifier:
                keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/50AA91CAD70311EFB9BBC86DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:28:aa:37:f6:39:fc:e0:11:ca:9d:a3:4c:e2:9c:5d:2d:ee:
         0a:bc:5c:3f:39:7a:d0:b1:b9:fa:cd:60:5e:37:58:15:0e:74:
         87:26:5d:79:bb:1e:b7:9c:d6:9a:6d:94:c0:54:0a:57:b2:1e:
         1c:1a:5e:5c:39:e2:ea:d4:00:f5:43:d7:b0:88:f7:4c:9e:bb:
         99:de:af:e3:4e:e8:ee:e5:3f:6c:23:6a:47:d5:36:2e:9e:55:
         ba:8c:6b:9f:33:93:f2:59:08:70:aa:d9:0d:4f:8a:14:9e:6b:
         74:41:ef:12:b7:25:a6:3f:e2:81:5c:6a:69:ed:e2:84:93:f8:
         37:6a:04:f8:33:8d:e4:e7:00:17:ae:b5:34:75:08:4b:0c:43:
         e9:26:e0:c6:df:62:70:77:20:e0:34:8b:48:3d:e8:96:37:5a:
         c2:96:bf:06:3e:eb:a5:05:65:83:65:54:56:fb:e0:f4:71:f5:
         32:7b:c0:e2:4a:78:7e:c8:c2:d3:81:1c:22:fc:50:bb:8d:33:
         04:ef:ae:15:04:dd:0c:6d:06:0e:89:52:c9:3c:e1:8c:e6:e6:
         07:1a:c2:61:e0:34:20:3b:db:02:ac:b6:3f:ca:fb:bd:6e:e2:
         f2:0e:6e:7b:9c:ac:82:d4:76:ac:ef:db:e3:7b:95:69:91:c3:
         af:e6:f4:ca
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz
QjJEOUY4NDAwHhcNMjUxMDMwMTgzNzMxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1NzQ3OS1lZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvU8/FxcbLfLLdXkDInSW0Qo+Mfe0UQzpxXqbyvqbNjihvnejzQ9UdP3yN1fo
BwYwttwvAOjbT7xDPK+p5YT48HoDrimqnEfbsdkxvFy4T6oWlwfPOykgIhtptaaJ
Uhy5RI7HLd93COHsnuhKIgQEsfsmOZh5WmKnmWEhjRgCyrflQDC/iqRqqpq9ek9a
/byb1rlluLQJjN7bczenQLTW0+BGLlmsFYp+Ukdqm5Xq+K7eS4FATpOrpE7ZtCK3
iUyHbNvLTJr01+BXIqYvZywU/iVlsYy/W6+gx8+cZ/gqvowZY6bP/c+LmMg2TiIE
cMSq3rFBs7qBdKGp6PY7odSfQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMZrVfOy
kN52NXK0cvL4ivZ2s++JMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC
ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyMUUvNjBDMTgxNTQwQjg5MTFFQThFNUFCNzVGQzRGOUFFMDIvNTBBQTkxQ0FE
NzAzMTFFRkI5QkJDODZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4JzMA0GCSqGSIb3DQEBCwUAA4IBAQBTKKo39jn84BHKnaNM4pxd
Le4KvFw/OXrQsbn6zWBeN1gVDnSHJl15ux63nNaabZTAVApXsh4cGl5cOeLq1AD1
Q9ewiPdMnruZ3q/jTuju5T9sI2pH1TYunlW6jGufM5PyWQhwqtkNT4oUnmt0Qe8S
tyWmP+KBXGpp7eKEk/g3agT4M43k5wAXrrU0dQhLDEPpJuDG32JwdyDgNItIPeiW
N1rClr8GPuulBWWDZVRW++D0cfUye8DiSnh+yMLTgRwi/FC7jTME764VBN0MbQYO
iVLJPOGM5uYHGsJh4DQgO9sCrLY/yvu9buLyDm57nKyC1Has79vje5VpkcOv5vTK
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:13 2026 by rpki-client