Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/B301332073DF11EE9DFE0B56C4F9AE02.roa
File:                     B301332073DF11EE9DFE0B56C4F9AE02.roa (raw, json)
Hash identifier:          /r8YzB+3Ermc5mHFzYv0oDUZxQd5lLv3vmeCAA8WE5o=
Subject key identifier:   06:FA:2A:4A:B8:98:55:5A:0B:2B:50:46:86:CE:5D:37:F6:84:E0:4F
Certificate issuer:       /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Certificate serial:       01C7
Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/B301332073DF11EE9DFE0B56C4F9AE02.roa
Signing time:             Tue 17 Mar 2026 03:37:44 +0000
ROA not before:           Tue 17 Mar 2026 03:37:43 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132193
IP address blocks:        103.6.181.0/24 maxlen: 24
                          103.245.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl
                          rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
        Validity
            Not Before: Mar 17 03:37:43 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b8cc87-59b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ee:23:79:e5:f3:78:4e:14:37:16:fc:9c:fc:
                    c4:9a:84:48:88:77:b5:2a:4e:c9:91:6c:c4:1e:01:
                    19:59:64:d9:cd:59:7f:ee:3c:45:38:3b:28:21:28:
                    60:55:b5:7b:fe:e1:b6:27:7f:6d:4c:53:73:78:aa:
                    e3:25:c5:f5:80:ce:d6:b8:43:b8:14:af:d9:c7:87:
                    e1:a7:de:30:2e:c9:38:36:56:61:e4:ca:dc:d5:4f:
                    db:5f:f9:c4:c3:db:83:aa:88:97:2e:25:7e:4e:3c:
                    66:18:5e:95:d5:99:4e:c4:0c:ba:e1:48:bf:48:95:
                    b1:b7:2c:16:6f:f6:c3:60:99:6c:af:5f:4d:3e:ea:
                    0d:e7:a5:23:b1:8b:cf:cf:91:1f:57:86:fe:90:db:
                    51:73:7a:de:d2:13:7f:92:5f:58:61:d2:78:f8:19:
                    db:cb:3e:f5:de:ba:1b:db:e7:f0:17:4a:c2:36:4f:
                    72:31:5b:98:75:df:e8:a3:09:59:18:07:23:13:1b:
                    1d:8b:e5:4c:6a:1c:37:30:5e:63:95:94:91:a3:e7:
                    1d:94:a2:2a:37:47:a8:8a:ff:ed:fa:db:57:5c:2b:
                    89:ef:f5:d5:5e:34:1a:3a:61:84:d7:f0:3e:f8:c4:
                    5c:2c:09:81:ad:a8:8d:ba:6e:83:17:4b:71:63:98:
                    b1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FA:2A:4A:B8:98:55:5A:0B:2B:50:46:86:CE:5D:37:F6:84:E0:4F
            X509v3 Authority Key Identifier:
                keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/B301332073DF11EE9DFE0B56C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.181.0/24
                  103.245.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:87:2f:d5:f8:4e:5f:1d:d9:ac:bc:e1:11:ea:0b:b4:2b:d9:
         6b:c6:9c:48:32:60:b2:2e:e3:cc:cb:71:ae:a1:63:55:8f:d7:
         71:2c:a5:97:9a:da:80:1d:56:06:d4:f0:ae:86:dd:de:05:9a:
         1f:9d:84:d3:d1:26:11:46:2f:7f:2f:3a:b6:cd:77:b8:9c:50:
         f2:e0:16:c8:7d:bc:4d:f5:c9:62:5e:26:d4:38:e1:89:73:0f:
         8a:cb:b0:84:67:56:af:16:8e:55:c2:3f:35:29:07:18:66:88:
         aa:57:b8:55:09:63:ec:8f:fa:d4:60:6e:f1:8e:88:45:db:23:
         52:5e:b0:99:6d:90:7c:4b:a6:14:f0:d7:85:f0:c5:33:d6:b2:
         3d:90:9d:01:27:3a:0a:e7:03:2c:c0:5c:f4:5a:44:34:00:d8:
         d7:8a:de:33:f9:79:80:9a:7d:12:b7:c2:e3:0c:3a:1a:05:a3:
         fa:57:91:ba:80:69:f7:37:64:d5:aa:36:e5:68:6f:3c:fa:50:
         6d:30:63:08:23:06:bf:0e:a0:34:b6:85:d1:64:c4:60:3f:b8:
         e1:8f:0a:1e:da:29:7e:4c:f6:a4:e8:28:5f:39:4e:1c:59:a4:
         ce:9b:f5:92:56:bb:13:ab:1a:ef:53:fc:48:da:ed:f8:01:99:
         bb:1b:e2:99
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4
MzJBOTI3OUIwHhcNMjYwMzE3MDMzNzQzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWI4Y2M4Ny01OWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1+4jeeXzeE4UNxb8nPzEmoRIiHe1Kk7JkWzEHgEZWWTZzVl/7jxFODsoIShg
VbV7/uG2J39tTFNzeKrjJcX1gM7WuEO4FK/Zx4fhp94wLsk4NlZh5Mrc1U/bX/nE
w9uDqoiXLiV+TjxmGF6V1ZlOxAy64Ui/SJWxtywWb/bDYJlsr19NPuoN56UjsYvP
z5EfV4b+kNtRc3re0hN/kl9YYdJ4+Bnbyz713rob2+fwF0rCNk9yMVuYdd/oowlZ
GAcjExsdi+VMahw3MF5jlZSRo+cdlKIqN0eoiv/t+ttXXCuJ7/XVXjQaOmGE1/A+
+MRcLAmBraiNum6DF0txY5ix5QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAb6Kkq4
mFVaCytQRobOXTf2hOBPMB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz
REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0U4NDcvRUQ4RjFDMkU3M0RFMTFFRUE3OUFFODUxQzRGOUFFMDIvQjMwMTMzMjA3
M0RGMTFFRTlERkUwQjU2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZwa1AwQAZ/WcMA0GCSqGSIb3DQEBCwUAA4IBAQDEhy/V+E5fHdms
vOER6gu0K9lrxpxIMmCyLuPMy3GuoWNVj9dxLKWXmtqAHVYG1PCuht3eBZofnYTT
0SYRRi9/Lzq2zXe4nFDy4BbIfbxN9cliXibUOOGJcw+Ky7CEZ1avFo5Vwj81KQcY
ZoiqV7hVCWPsj/rUYG7xjohF2yNSXrCZbZB8S6YU8NeF8MUz1rI9kJ0BJzoK5wMs
wFz0WkQ0ANjXit4z+XmAmn0St8LjDDoaBaP6V5G6gGn3N2TVqjblaG88+lBtMGMI
Iwa/DqA0toXRZMRgP7jhjwoe2il+TPak6ChfOU4cWaTOm/WSVrsTqxrvU/xI2u34
AZm7G+KZ
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:56 2026 by rpki-client