Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/412371002A5911F08EA23244C4F9AE02.roa
File:                     412371002A5911F08EA23244C4F9AE02.roa (raw, json)
Hash identifier:          D1yfDyTJLdVgKeV2rHlPTQBf9awpPyRXNzKhhL6qHEI=
Subject key identifier:   FA:35:EC:81:8E:27:78:29:E6:35:2E:C9:B9:04:62:AD:C3:DF:3E:AB
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       044A
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/412371002A5911F08EA23244C4F9AE02.roa
Signing time:             Sat 07 Mar 2026 00:34:00 +0000
ROA not before:           Sat 07 Mar 2026 00:34:00 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137535
IP address blocks:        103.127.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 09:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1098 (0x44a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Mar  7 00:34:00 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ab7278-bd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:5d:5a:00:97:fd:8f:f8:74:20:79:ca:81:
                    97:49:3c:de:a0:a8:6d:b9:96:cd:82:78:0f:8e:2f:
                    90:00:63:79:d6:cf:0a:02:d3:65:3e:fc:75:8e:ef:
                    b2:6a:4d:07:9a:47:6d:69:c0:46:64:c2:83:4b:9c:
                    61:56:31:a7:63:ed:cc:90:f7:93:e5:cf:a0:c8:05:
                    0f:1a:9b:ce:6b:e5:bc:28:48:16:79:c9:42:26:f3:
                    21:51:4d:32:bf:61:8e:13:0f:e2:5e:ee:35:4c:84:
                    a9:70:f3:ac:43:db:78:04:db:db:71:19:35:60:eb:
                    ae:82:13:1a:72:18:e4:b1:a0:62:fd:67:00:f5:ff:
                    38:5e:d5:4b:eb:5e:bf:21:4a:75:bd:1c:2c:d6:14:
                    40:89:55:6f:70:06:f2:df:14:33:a4:e0:85:4d:cb:
                    59:53:07:fa:c7:40:0f:92:3b:db:ec:3d:73:74:a4:
                    f8:69:8f:fe:e0:9c:bb:9e:38:7c:f7:8e:32:82:99:
                    df:11:a4:84:1c:d1:a4:04:5a:51:20:56:8e:fb:b3:
                    c6:7a:f8:45:3a:10:ee:15:5f:a9:fc:f0:57:15:ce:
                    d7:83:48:36:d5:ac:b7:bd:ad:34:19:53:75:75:91:
                    07:35:1a:b9:0b:ca:e9:ac:fc:cc:dc:85:c2:26:30:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:35:EC:81:8E:27:78:29:E6:35:2E:C9:B9:04:62:AD:C3:DF:3E:AB
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/412371002A5911F08EA23244C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:5c:1f:21:2d:22:e5:6c:ca:6e:45:60:c8:02:af:8e:b4:57:
         ed:a5:dc:ec:df:7b:17:5b:85:f2:aa:41:60:49:47:6b:2f:60:
         cb:0e:1c:66:92:89:e8:33:3e:58:b3:d8:c2:9b:bb:a3:c3:9e:
         64:e9:be:59:1c:e3:31:b8:da:cb:16:8d:29:ee:95:dc:09:8c:
         0e:7d:7c:fd:a8:c2:a2:c3:d1:e1:c5:78:4a:41:1d:05:3f:de:
         84:05:01:ce:87:17:23:22:1c:34:e3:fb:82:7b:b9:15:7f:ea:
         1f:8f:47:77:33:80:46:f3:05:16:35:a3:fc:1a:74:7a:8b:8d:
         32:2e:88:0b:d4:e8:c2:07:18:44:56:85:84:42:13:c9:f4:6c:
         7f:4e:6e:49:81:7b:47:51:1e:ac:03:8a:ea:4e:ce:e3:e7:cd:
         27:a4:27:72:74:89:80:66:f6:f1:b6:9b:0c:8b:6c:ec:1c:f7:
         8a:14:75:bd:b8:0c:99:73:73:d4:99:98:1c:23:e9:10:0e:b7:
         97:bb:62:89:8a:21:03:2e:fd:21:1a:eb:83:51:3a:08:cd:b9:
         d2:fd:67:60:2a:2c:0a:f0:98:91:fe:b3:58:12:b1:80:7d:fd:
         7f:56:33:da:49:9e:31:50:95:c3:27:92:a9:58:fd:b1:94:c4:
         45:51:a4:95
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3
ODAzMTFBNUQwHhcNMjYwMzA3MDAzNDAwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFiNzI3OC1iZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzM5dWgCX/Y/4dCB5yoGXSTzeoKhtuZbNgngPji+QAGN51s8KAtNlPvx1ju+y
ak0HmkdtacBGZMKDS5xhVjGnY+3MkPeT5c+gyAUPGpvOa+W8KEgWeclCJvMhUU0y
v2GOEw/iXu41TISpcPOsQ9t4BNvbcRk1YOuughMachjksaBi/WcA9f84XtVL616/
IUp1vRws1hRAiVVvcAby3xQzpOCFTctZUwf6x0APkjvb7D1zdKT4aY/+4Jy7njh8
944ygpnfEaSEHNGkBFpRIFaO+7PGevhFOhDuFV+p/PBXFc7Xg0g21ay3va00GVN1
dZEHNRq5C8rprPzM3IXCJjBEsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPo17IGO
J3gp5jUuybkEYq3D3z6rMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5
MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjUxQUQvOEZEREY1RTg5OTFEMTFFQzgwOTM5QTU0QzRGOUFFMDIvNDEyMzcxMDAy
QTU5MTFGMDhFQTIzMjQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3/wMA0GCSqGSIb3DQEBCwUAA4IBAQAKXB8hLSLlbMpuRWDIAq+O
tFftpdzs33sXW4XyqkFgSUdrL2DLDhxmkonoMz5Ys9jCm7ujw55k6b5ZHOMxuNrL
Fo0p7pXcCYwOfXz9qMKiw9HhxXhKQR0FP96EBQHOhxcjIhw04/uCe7kVf+ofj0d3
M4BG8wUWNaP8GnR6i40yLogL1OjCBxhEVoWEQhPJ9Gx/Tm5JgXtHUR6sA4rqTs7j
580npCdydImAZvbxtpsMi2zsHPeKFHW9uAyZc3PUmZgcI+kQDreXu2KJiiEDLv0h
GuuDUToIzbnS/WdgKiwK8JiR/rNYErGAff1/VjPaSZ4xUJXDJ5KpWP2xlMRFUaSV
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:59 2026 by rpki-client