Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa
File:                     DA0AD156799211EFADCD2257C4F9AE02.roa (raw, json)
Hash identifier:          xIAIlJ7v8ECTIXnt1C8XuSoM0aGHLELefgFDc8efrDo=
Subject key identifier:   58:D6:D7:22:82:96:EE:52:E2:5A:11:4D:B9:4C:66:8A:A3:E6:52:EA
Certificate issuer:       /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial:       05C2
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:57:46 +0000
ROA not before:           Mon 15 Sep 2025 00:05:25 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132372
IP address blocks:        103.168.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
                          rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
        Validity
            Not Before: Sep 15 00:05:25 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a518ca-d3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:ef:e4:be:b8:62:7f:04:bd:ce:99:bc:de:
                    9c:91:52:a6:6b:cb:d4:38:02:20:b6:1e:34:f2:e2:
                    42:e7:d3:bc:8a:fc:60:60:a1:fd:da:4f:a0:1b:b3:
                    17:53:71:fb:10:54:94:73:45:58:96:b0:a1:36:f7:
                    d7:79:9b:f2:3a:8f:3b:bd:34:ed:eb:36:64:c2:2b:
                    9c:00:7c:43:e7:56:ca:b9:ef:f2:66:8b:7c:2b:c1:
                    d9:8e:11:fa:a2:89:c7:ae:db:6f:b6:b5:e8:c3:9e:
                    ae:c5:6f:e3:1d:62:e6:98:cc:7d:a4:0d:4c:2c:91:
                    25:dc:4a:83:2e:c6:0a:56:ee:3f:44:23:84:1c:8e:
                    36:6e:1b:d1:2f:76:26:aa:16:f9:51:7b:d2:d8:4b:
                    a6:9b:fc:3d:fa:81:51:6c:01:a2:27:30:35:59:59:
                    73:de:e9:c0:a4:3c:fe:57:8d:e1:f6:75:15:fe:0f:
                    36:8d:7e:7c:4f:51:1c:6f:6d:15:74:9e:98:a1:27:
                    e4:b9:f5:01:df:51:b9:ec:3d:7f:2c:f4:16:22:eb:
                    f6:84:1a:eb:11:b2:1e:65:4d:b4:94:a5:ae:e3:32:
                    9f:ee:ba:3e:5c:da:85:88:a7:16:2b:37:fc:1e:84:
                    d3:1d:ee:a2:23:e7:42:94:ce:b0:bf:af:da:dc:a9:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D6:D7:22:82:96:EE:52:E2:5A:11:4D:B9:4C:66:8A:A3:E6:52:EA
            X509v3 Authority Key Identifier:
                keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:db:8b:1b:2f:1e:16:c5:29:26:cf:dd:6b:b0:c1:a3:d4:e3:
         50:6c:0b:67:cc:3b:f2:d1:bd:ca:ae:61:d5:01:52:5c:e7:25:
         e9:5e:5e:ce:c7:33:d1:6b:2b:48:4b:26:b9:fb:60:07:dc:8a:
         c3:ef:4d:23:d6:ae:06:68:57:ff:83:ea:06:78:bb:9b:56:48:
         18:9a:20:86:8d:03:0b:b3:08:e2:4f:30:5a:bb:26:66:39:0a:
         3a:20:fc:d8:93:90:c2:28:48:01:83:76:99:b9:e1:25:10:26:
         c7:fe:ef:00:58:ef:de:7a:eb:4a:28:94:7d:1e:07:a7:ac:c4:
         20:59:4b:9d:21:bf:66:42:fc:f4:4d:bc:e0:1a:e6:bb:8b:40:
         60:59:b1:4b:5d:5c:73:a1:cd:19:0a:b0:db:84:1b:8b:4c:a4:
         d9:95:53:5c:2a:3e:a8:f9:a2:83:06:9e:ff:ca:72:69:d7:0e:
         dc:db:74:f1:eb:16:61:2e:15:28:42:d6:49:69:30:f8:c3:62:
         51:45:c6:e5:a5:39:a6:30:a1:03:fc:6a:cf:fb:ca:3e:5c:1b:
         a2:ea:d8:de:c2:41:17:02:1c:e2:8c:c6:6f:fa:a3:5c:29:3b:
         1a:13:13:b9:fa:f3:35:bf:1f:77:b8:53:d0:d9:9d:b7:ac:eb:
         17:14:6a:13
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5
QTUzOUFDRTEwHhcNMjUwOTE1MDAwNTI1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MThjYS1kM2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtenv5L64Yn8Evc6ZvN6ckVKma8vUOAIgth408uJC59O8ivxgYKH92k+gG7MX
U3H7EFSUc0VYlrChNvfXeZvyOo87vTTt6zZkwiucAHxD51bKue/yZot8K8HZjhH6
oonHrttvtrXow56uxW/jHWLmmMx9pA1MLJEl3EqDLsYKVu4/RCOEHI42bhvRL3Ym
qhb5UXvS2Eumm/w9+oFRbAGiJzA1WVlz3unApDz+V43h9nUV/g82jX58T1Ecb20V
dJ6YoSfkufUB31G57D1/LPQWIuv2hBrrEbIeZU20lKWu4zKf7ro+XNqFiKcWKzf8
HoTTHe6iI+dClM6wv6/a3Kl8UwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFjW1yKC
lu5S4loRTblMZoqj5lLqMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx
N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkQ5QkUvQjA5QzNDRTIxMTdCMTFFQzgwRTQyMTQzQzRGOUFFMDIvREEwQUQxNTY3
OTkyMTFFRkFEQ0QyMjU3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6hpMA0GCSqGSIb3DQEBCwUAA4IBAQCg24sbLx4WxSkmz91rsMGj
1ONQbAtnzDvy0b3KrmHVAVJc5yXpXl7OxzPRaytISya5+2AH3IrD700j1q4GaFf/
g+oGeLubVkgYmiCGjQMLswjiTzBauyZmOQo6IPzYk5DCKEgBg3aZueElECbH/u8A
WO/eeutKKJR9HgenrMQgWUudIb9mQvz0TbzgGua7i0BgWbFLXVxzoc0ZCrDbhBuL
TKTZlVNcKj6o+aKDBp7/ynJp1w7c23Tx6xZhLhUoQtZJaTD4w2JRRcblpTmmMKED
/GrP+8o+XBui6tjewkEXAhzijMZv+qNcKTsaExO5+vM1vx93uFPQ2Z23rOsXFGoT
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:44 2026 by rpki-client