Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/BE1BE7B22D0211F19E900DBEAC833773.roa
File:                     BE1BE7B22D0211F19E900DBEAC833773.roa (raw, json)
Hash identifier:          BVRLAJG6OeNyYtQvExUgxznQDMGoT9wOOHjPwsOwIOQ=
Subject key identifier:   C0:79:45:C9:EF:03:9A:BE:C9:CB:68:0E:E2:D5:96:4B:DA:5D:DC:9E
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       05DA
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/BE1BE7B22D0211F19E900DBEAC833773.roa
Signing time:             Tue 12 May 2026 23:28:39 +0000
ROA not before:           Tue 12 May 2026 23:28:39 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138521
IP address blocks:        103.127.162.0/23 maxlen: 24
                          2404:2440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498 (0x5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6, serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: May 12 23:28:39 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a03b7a7-113b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:a8:83:b7:e9:fb:89:d8:2a:21:9d:72:5a:
                    b4:ef:1f:a4:dd:0a:2b:aa:42:5f:61:7e:f2:3b:95:
                    01:42:39:dc:85:44:f8:49:e3:ce:d0:e3:d3:0f:c6:
                    4c:a8:7c:32:47:95:b3:c5:47:e2:f2:df:f4:35:28:
                    24:cc:92:c0:65:28:89:cd:c7:18:71:fd:03:c7:8e:
                    6e:3c:f4:4b:97:80:17:b1:35:3e:bc:da:a3:ee:ba:
                    b7:b6:e9:5c:06:e4:b2:d5:04:82:d5:5c:14:7a:44:
                    d6:07:ab:b1:7b:50:bf:47:2f:d1:94:93:5a:42:f8:
                    54:89:7a:d6:77:8f:51:9d:cc:0b:94:84:2f:db:4b:
                    fd:16:43:74:de:db:d2:9b:f2:5f:85:e7:02:4c:05:
                    9e:36:38:f9:94:5c:a5:af:90:60:61:b5:fa:eb:9e:
                    57:b2:73:51:8c:f8:06:58:e4:48:5c:5e:4f:01:00:
                    5d:96:4d:c9:e2:3d:45:6d:8d:34:0a:cf:e8:72:c5:
                    f4:c9:4f:7e:1b:ee:7b:7d:a3:b3:9b:ed:84:f8:18:
                    cf:a3:35:29:80:89:c0:fe:27:6e:93:3a:49:3e:fe:
                    df:4e:2c:c2:62:4c:32:38:ba:34:eb:63:9f:98:08:
                    ec:af:38:a0:63:bd:4a:e7:84:58:7c:13:ff:85:60:
                    4e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:79:45:C9:EF:03:9A:BE:C9:CB:68:0E:E2:D5:96:4B:DA:5D:DC:9E
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/BE1BE7B22D0211F19E900DBEAC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.162.0/23
                IPv6:
                  2404:2440::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:7d:76:4a:0c:5a:24:c6:73:ea:2e:91:f2:51:ba:91:66:5f:
         99:66:34:be:19:41:02:d0:35:be:ee:31:a4:f3:e6:56:26:36:
         eb:35:da:25:f4:e5:06:ec:c9:db:56:f0:db:1d:d2:57:c8:5e:
         53:ba:6e:c5:85:a9:65:e4:17:9e:80:96:1b:c5:d6:06:e7:8f:
         96:be:1d:86:7e:b5:61:2f:56:42:a1:96:03:53:f4:b5:fb:1e:
         ef:4f:02:c6:87:ea:fe:1b:3b:50:ee:2f:fc:a2:8b:a0:93:9f:
         e1:e4:50:9e:41:4c:af:4b:64:38:f6:ba:ed:7d:ce:22:6b:ca:
         70:93:ed:83:2f:08:b4:e9:b6:53:a1:23:f7:16:3d:9d:46:b4:
         1b:01:39:fe:d5:aa:c1:a4:30:ae:9b:5a:5c:4f:43:8d:70:71:
         9f:2d:2b:a4:bf:3f:3d:6c:33:49:8c:24:9a:b6:51:ba:6f:44:
         8a:cd:56:a7:0a:a9:ae:62:76:29:fb:e0:c9:e0:9c:29:12:51:
         e0:52:29:12:a5:77:71:4d:da:29:d4:ed:cf:8a:92:68:dd:8e:
         7c:f7:9b:fa:07:10:15:3a:ae:54:ae:c1:07:c0:c3:07:3c:dd:
         c8:d2:55:64:ef:4c:b4:30:60:08:2c:cc:de:3b:ee:2f:11:7e:
         d2:3b:00:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:15:29 2026 by rpki-client