Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/5D7ACB26B90811F0ADC46B62C4F9AE02.roa
File:                     5D7ACB26B90811F0ADC46B62C4F9AE02.roa (raw, json)
Hash identifier:          Fmp31a6vqENn/r0IUJgnXGUeFpusRkGciQ7f9f+aliM=
Subject key identifier:   2C:D6:D3:18:38:BB:84:DA:AE:31:F9:5D:EE:10:93:1D:18:4E:01:7D
Certificate issuer:       /CN=A913714B/serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Certificate serial:       63
Authority key identifier: 2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/5D7ACB26B90811F0ADC46B62C4F9AE02.roa
Signing time:             Sun 03 May 2026 08:42:03 +0000
ROA not before:           Sun 03 May 2026 08:42:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135289
IP address blocks:        103.212.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
                          rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913714B, serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
        Validity
            Not Before: May  3 08:42:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f70a5a-090e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:32:27:3d:19:b2:7c:fe:78:54:b5:a9:ff:
                    86:16:8c:ef:2a:f2:ef:44:36:d2:0a:15:30:e5:e9:
                    e6:1e:d2:4e:d9:62:16:dd:15:73:9d:8b:34:1f:3b:
                    df:40:3b:77:6d:f2:d9:a1:74:19:fd:f3:c1:2a:0f:
                    eb:cc:3a:1e:fb:c9:f2:80:ce:23:8a:57:b3:67:38:
                    9e:34:eb:ac:57:75:5a:8f:4a:dc:a4:23:04:26:9d:
                    71:e3:83:a8:89:fc:9d:f2:85:ae:a0:52:33:7b:62:
                    a9:c4:f4:8a:f5:92:9b:3d:5f:49:8a:cb:53:df:79:
                    17:e0:c3:59:ed:73:91:9b:80:b2:ce:70:7d:b8:33:
                    67:9a:92:74:e6:c9:82:eb:49:e5:f3:96:08:ac:4f:
                    2d:aa:a1:a1:dd:cc:c6:2c:5e:64:ee:7d:98:3d:c5:
                    0e:6c:33:a4:84:66:9f:84:f7:c2:03:74:25:7b:70:
                    c5:97:93:09:d7:16:b2:54:1d:fa:16:fa:bf:90:da:
                    7f:c5:1a:31:34:f4:1d:ae:98:1a:35:6a:f1:c5:4a:
                    74:11:37:a3:08:6b:a6:3c:22:49:64:71:d1:2d:a3:
                    df:29:ce:20:d1:26:b2:3d:d2:cb:a7:78:39:6f:26:
                    75:3c:c9:6e:b5:6e:b8:5b:4a:9f:55:28:8e:da:55:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D6:D3:18:38:BB:84:DA:AE:31:F9:5D:EE:10:93:1D:18:4E:01:7D
            X509v3 Authority Key Identifier:
                keyid:2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/5D7ACB26B90811F0ADC46B62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:fe:90:39:74:bb:9a:11:64:2a:a5:bf:6a:f4:4d:85:c0:3f:
         2f:3d:39:5b:74:be:25:b7:7a:fa:bd:a7:ae:8a:de:9c:bd:da:
         28:6e:b4:f0:a0:30:c1:ab:fa:10:f4:f3:fc:e2:1a:92:eb:23:
         12:99:79:71:f4:62:0a:f2:b8:96:83:65:b2:f5:4e:1f:2c:a8:
         be:a6:3c:8f:77:f0:fe:e3:2f:50:79:9d:f9:c5:3a:8c:ce:be:
         d5:76:21:4e:6d:1f:df:c3:a9:a7:d8:f6:53:d0:f9:7a:3f:b2:
         6f:85:40:9e:93:7b:92:83:16:c6:c3:c7:d1:73:03:d8:04:f7:
         67:a0:92:e6:44:39:82:36:c8:8b:bb:d6:6d:b3:98:b0:03:7d:
         a8:51:70:16:f1:ae:b8:3b:1d:85:2f:cb:79:90:1a:bb:54:52:
         a8:5f:ee:e4:c6:8f:f2:f9:c3:1f:45:42:84:ec:a7:58:b1:37:
         5c:0d:76:a0:48:23:36:ea:ea:73:37:41:58:4c:a4:e2:ac:06:
         b5:49:d7:dd:be:7c:56:bb:af:41:da:a1:9a:38:90:15:fb:a5:
         8e:a2:97:49:f8:62:b2:a0:fa:db:47:35:fd:f1:4a:af:eb:fc:
         51:2f:65:96:7b:83:4a:52:bf:8f:48:0f:37:c9:d0:6d:73:15:
         01:ba:37:de
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NzE0QjExMC8GA1UEBRMoMkVENjk2QzIzRDMzNDVFNzRCMEQ3MzRFMjRCNzEwQUE3
OEFBRTVGQTAeFw0yNjA1MDMwODQyMDNaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZjcwYTVhLTA5MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJQjInPRmyfP54VLWp/4YWjO8q8u9ENtIKFTDl6eYe0k7ZYhbdFXOdizQfO99A
O3dt8tmhdBn988EqD+vMOh77yfKAziOKV7NnOJ4066xXdVqPStykIwQmnXHjg6iJ
/J3yha6gUjN7YqnE9Ir1kps9X0mKy1PfeRfgw1ntc5GbgLLOcH24M2eaknTmyYLr
SeXzlgisTy2qoaHdzMYsXmTufZg9xQ5sM6SEZp+E98IDdCV7cMWXkwnXFrJUHfoW
+r+Q2n/FGjE09B2umBo1avHFSnQRN6MIa6Y8IklkcdEto98pziDRJrI90suneDlv
JnU8yW61brhbSp9VKI7aVf35AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQULNbTGDi7
hNquMfld7hCTHRhOAX0wHwYDVR0jBBgwFoAULtaWwj0zRedLDXNOJLcQqniq5fow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTRCLzFBQkM3NUYwQjkw
ODExRjA4NzkwRjU2MUM0RjlBRTAyL0x0YVd3ajB6UmVkTERYTk9KTGNRcW5pcTVm
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTHRhV3dqMHpSZWRMRFhOT0pMY1FxbmlxNWZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzE0Qi8xQUJDNzVGMEI5MDgxMUYwODc5MEY1NjFDNEY5QUUwMi81RDdBQ0IyNkI5
MDgxMUYwQURDNDZCNjJDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABn1HowDQYJKoZIhvcNAQELBQADggEBAG3+kDl0u5oRZCqlv2r0TYXA
Py89OVt0viW3evq9p66K3py92ihutPCgMMGr+hD08/ziGpLrIxKZeXH0YgryuJaD
ZbL1Th8sqL6mPI938P7jL1B5nfnFOozOvtV2IU5tH9/DqafY9lPQ+Xo/sm+FQJ6T
e5KDFsbDx9FzA9gE92egkuZEOYI2yIu71m2zmLADfahRcBbxrrg7HYUvy3mQGrtU
Uqhf7uTGj/L5wx9FQoTsp1ixN1wNdqBIIzbq6nM3QVhMpOKsBrVJ192+fFa7r0Ha
oZo4kBX7pY6il0n4YrKg+ttHNf3xSq/r/FEvZZZ7g0pSv49IDzfJ0G1zFQG6N94=
-----END CERTIFICATE-----
Generated at Wed May 13 09:42:29 2026 by rpki-client