Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/BD6C86326AEC11ECB61ECF30C4F9AE02.roa
File:                     BD6C86326AEC11ECB61ECF30C4F9AE02.roa (raw, json)
Hash identifier:          Cnel+OeT3oP8Ba57DN2AfJdE9d8ywFeBBz6sL8SdLcA=
Subject key identifier:   1A:59:CE:0F:75:38:58:52:E6:BF:F0:AE:EB:F8:6E:9A:45:FF:02:24
Certificate issuer:       /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Certificate serial:       04BA
Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/BD6C86326AEC11ECB61ECF30C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:20:53 +0000
ROA not before:           Wed 28 Jan 2026 23:20:35 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137403
IP address blocks:        103.178.242.0/23 maxlen: 23
                          103.178.242.0/24 maxlen: 24
                          103.178.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
                          rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130128, serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
        Validity
            Not Before: Jan 28 23:20:35 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44b45-5094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:95:f3:e0:a8:0b:75:aa:2f:0e:0d:c1:c0:
                    8e:84:53:14:15:62:b8:4a:75:e9:94:e4:ca:cd:db:
                    f1:9b:bf:21:cd:03:eb:3e:f1:e2:da:bf:55:4a:ec:
                    bd:af:0b:f0:db:6f:5d:21:15:dd:e1:8b:bd:77:be:
                    08:8d:ac:cf:59:e9:8a:31:9c:00:69:1e:bc:78:ac:
                    93:e4:db:4d:0b:31:6f:a1:f7:1d:32:b7:87:e3:1d:
                    b0:1a:90:f8:43:56:1b:1e:83:37:a3:ff:01:2b:2f:
                    c5:4e:bf:79:ad:23:6a:2c:d2:3b:7c:ad:be:68:75:
                    42:82:6b:91:f5:a0:ec:e1:a1:02:7a:13:15:3d:96:
                    b1:46:71:0d:da:75:62:3b:4f:38:de:7c:66:a5:d5:
                    a2:a3:42:63:09:92:4e:b3:af:c5:88:5b:00:58:35:
                    e1:e9:b1:07:5f:6a:f6:4d:a6:40:2e:58:04:b1:d2:
                    f3:30:dd:91:c1:11:cd:28:18:2f:29:91:de:e0:dd:
                    7e:f9:6f:36:13:d9:08:0e:f0:10:d6:eb:e5:7a:19:
                    80:7c:40:3b:6e:59:9f:82:ed:1e:c3:fa:b7:69:c5:
                    1b:b6:c2:49:2f:90:19:90:0d:ef:c6:f3:77:dc:53:
                    0f:18:80:c8:96:26:f7:f7:0b:0e:00:42:8d:1b:7e:
                    cc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:59:CE:0F:75:38:58:52:E6:BF:F0:AE:EB:F8:6E:9A:45:FF:02:24
            X509v3 Authority Key Identifier:
                keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/BD6C86326AEC11ECB61ECF30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:35:46:91:77:14:cd:57:8a:0e:82:16:0b:6c:96:fd:56:53:
         5a:26:78:d1:88:18:9f:59:75:0b:8a:61:c9:f8:6e:88:fa:76:
         1a:bc:3d:3f:d2:b7:3b:be:6f:2d:3a:4c:14:44:bb:c6:31:d8:
         b8:52:89:53:4b:fb:b8:98:e3:ee:d8:5a:7d:5a:32:eb:91:71:
         e5:80:84:36:d4:b8:db:13:d4:a7:5f:05:ad:93:05:cd:18:78:
         82:4b:7c:08:c9:8d:4d:c0:6b:a7:94:6f:6d:0b:23:b3:4f:75:
         22:20:c3:7a:77:f7:52:ac:e0:69:1e:b8:77:36:e6:5e:45:01:
         18:3d:76:a3:ed:8b:7a:24:ab:f2:66:c6:d0:a5:34:c3:73:c1:
         6c:c1:ef:f4:66:2b:ca:bb:f3:32:09:27:4a:46:83:44:f4:ee:
         b1:81:2b:cd:0a:9b:9f:14:58:64:df:a7:3f:17:bb:85:2f:4c:
         a2:c7:96:37:e6:3f:34:bf:63:7a:78:b6:2c:37:a2:e2:52:d1:
         98:de:ff:0b:7d:19:16:9c:26:55:db:9f:03:6e:91:d0:50:a1:
         95:cd:a0:dd:83:d1:c4:5e:12:fd:9f:52:7b:37:62:23:6b:75:
         bb:65:b6:9d:81:64:03:63:9a:4a:70:70:53:e1:d1:9e:eb:5a:
         88:10:66:38
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzAxMjgxMTAvBgNVBAUTKDJGNEM4QzRBQ0M0NTVDNkQ1QTQ5MEM0MDkwQjNBMzUy
QThBRjFDQjUwHhcNMjYwMTI4MjMyMDM1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGI0NS01MDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlnOV8+CoC3WqLw4NwcCOhFMUFWK4SnXplOTKzdvxm78hzQPrPvHi2r9VSuy9
rwvw229dIRXd4Yu9d74IjazPWemKMZwAaR68eKyT5NtNCzFvofcdMreH4x2wGpD4
Q1YbHoM3o/8BKy/FTr95rSNqLNI7fK2+aHVCgmuR9aDs4aECehMVPZaxRnEN2nVi
O0843nxmpdWio0JjCZJOs6/FiFsAWDXh6bEHX2r2TaZALlgEsdLzMN2RwRHNKBgv
KZHe4N1++W82E9kIDvAQ1uvlehmAfEA7blmfgu0ew/q3acUbtsJJL5AZkA3vxvN3
3FMPGIDIlib39wsOAEKNG37M1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBpZzg91
OFhS5r/wruv4bppF/wIkMB8GA1UdIwQYMBaAFC9MjErMRVxtWkkMQJCzo1Korxy1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEyOC85MUJDMzc1MjZB
RTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhHMWFTUXhBa0xPalVxaXZI
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wweU1Tc3hGWEcxYVNReEFrTE9qVXFpdkhMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzAxMjgvOTFCQzM3NTI2QUU4MTFFQ0E0NDg0NjVCQzRGOUFFMDIvQkQ2Qzg2MzI2
QUVDMTFFQ0I2MUVDRjMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ7LyMA0GCSqGSIb3DQEBCwUAA4IBAQCgNUaRdxTNV4oOghYLbJb9
VlNaJnjRiBifWXULimHJ+G6I+nYavD0/0rc7vm8tOkwURLvGMdi4UolTS/u4mOPu
2Fp9WjLrkXHlgIQ21LjbE9SnXwWtkwXNGHiCS3wIyY1NwGunlG9tCyOzT3UiIMN6
d/dSrOBpHrh3NuZeRQEYPXaj7Yt6JKvyZsbQpTTDc8Fswe/0ZivKu/MyCSdKRoNE
9O6xgSvNCpufFFhk36c/F7uFL0yix5Y35j80v2N6eLYsN6LiUtGY3v8LfRkWnCZV
258DbpHQUKGVzaDdg9HEXhL9n1J7N2Ija3W7ZbadgWQDY5pKcHBT4dGe61qIEGY4
-----END CERTIFICATE-----
Generated at Fri Mar 27 09:36:44 2026 by rpki-client