Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/0A816CBA49DA11F09907E971C4F9AE02.roa
File:                     0A816CBA49DA11F09907E971C4F9AE02.roa (raw, json)
Hash identifier:          fnTyQBKGgkwU3Q11NmV99/bJq3X2QZKqIJ3i4fJ/7ik=
Subject key identifier:   0C:75:91:71:AE:41:48:1A:30:42:23:62:AB:99:18:02:4F:D1:42:DC
Certificate issuer:       /CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Certificate serial:       0613
Authority key identifier: 78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/0A816CBA49DA11F09907E971C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:30:53 +0000
ROA not before:           Mon 02 Mar 2026 23:30:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139009
IP address blocks:        103.146.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
                          rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91458BD, serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
        Validity
            Not Before: Mar  2 23:30:53 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a61dad-27fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:bf:d8:c7:ae:2a:17:f3:40:b4:62:23:6d:
                    76:e6:f4:f9:97:99:2c:c3:8a:53:ff:96:8d:a5:48:
                    62:a6:a0:e7:aa:16:ce:62:04:d4:95:4c:16:5b:3e:
                    a4:5a:16:d3:00:61:d7:5b:1f:f6:fa:34:cc:01:4d:
                    9a:1d:00:20:47:1b:74:e3:14:4a:17:9b:28:45:11:
                    8a:3f:e3:fb:69:0e:ce:b2:62:04:f3:43:e9:68:2a:
                    39:51:af:2f:52:21:1d:ca:c3:e3:1e:32:c7:c1:41:
                    f8:83:94:42:cb:0f:75:9d:ba:f2:17:7a:a2:60:d2:
                    e7:e4:58:e2:2b:cd:75:8f:b5:54:f8:6f:6a:ad:6e:
                    a7:bb:a8:45:35:88:46:66:28:53:f8:54:aa:3f:8c:
                    79:bf:af:53:b2:28:3c:39:23:c1:e4:8d:1d:84:87:
                    c4:4f:01:71:d6:52:55:86:ac:73:45:b4:09:f1:b2:
                    4e:c1:fc:0d:6c:ee:1e:31:dd:10:8e:1b:e3:83:79:
                    f2:03:5e:5c:05:73:a1:f9:bb:1e:a5:ee:2c:7b:1b:
                    8a:65:79:39:b0:3d:fd:f0:97:1c:fb:71:45:82:4f:
                    84:f2:5e:02:76:f0:f9:8d:be:ae:f0:64:bb:84:f4:
                    6d:32:6f:b4:f5:4e:f8:83:25:b4:e0:a0:ed:1e:32:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:75:91:71:AE:41:48:1A:30:42:23:62:AB:99:18:02:4F:D1:42:DC
            X509v3 Authority Key Identifier:
                keyid:78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/0A816CBA49DA11F09907E971C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:66:86:d7:28:e3:ae:30:0d:ac:8a:bf:e8:a6:67:c4:55:6b:
         a8:e8:62:99:46:ff:dd:41:28:1f:76:69:ea:3b:b0:82:35:46:
         be:d5:b3:81:59:65:f5:33:b4:0b:0b:8f:fc:f1:07:97:c1:f9:
         1d:b9:a6:73:ab:6b:2e:fc:d2:77:f0:33:a3:1c:6a:32:c1:22:
         22:a3:5c:5d:49:23:e2:8b:d8:25:cb:e8:c2:40:31:10:50:9e:
         c2:4c:b7:52:dc:09:c1:39:1a:22:eb:d7:57:31:61:06:9a:fb:
         bc:2c:15:7f:87:63:8a:85:03:ae:5f:fd:e9:a4:e0:aa:70:fa:
         8e:e0:22:8b:48:a5:c6:22:7d:43:1d:66:d3:52:cb:5a:95:65:
         e6:2b:1f:31:e7:29:e6:3d:eb:fe:9e:7e:94:5c:2c:c1:a4:f4:
         d0:3e:f9:aa:f5:13:93:0f:80:f3:ea:fb:be:d0:83:e0:54:e1:
         e4:a8:14:d9:15:bf:1e:b3:99:1a:8c:33:f8:d7:46:c2:4b:ea:
         1b:70:f2:89:4f:76:98:ad:5b:60:ef:05:0b:bc:4d:9a:d2:f6:
         b6:c0:c4:be:3e:47:c5:75:60:97:2e:4e:d0:f9:00:f2:54:9d:
         97:d0:84:3a:5f:3d:d1:2c:34:c8:cc:02:10:08:e4:d5:03:5c:
         9b:44:3a:7f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU4QkQxMTAvBgNVBAUTKDc4QzQ5MTlFQ0Y5OTU5QkY3MTM0RTM1REQ1RTQyQ0RF
QUI0MkQ1NDgwHhcNMjYwMzAyMjMzMDUzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWRhZC0yN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqhK/2MeuKhfzQLRiI2125vT5l5ksw4pT/5aNpUhipqDnqhbOYgTUlUwWWz6k
WhbTAGHXWx/2+jTMAU2aHQAgRxt04xRKF5soRRGKP+P7aQ7OsmIE80PpaCo5Ua8v
UiEdysPjHjLHwUH4g5RCyw91nbryF3qiYNLn5FjiK811j7VU+G9qrW6nu6hFNYhG
ZihT+FSqP4x5v69Tsig8OSPB5I0dhIfETwFx1lJVhqxzRbQJ8bJOwfwNbO4eMd0Q
jhvjg3nyA15cBXOh+bsepe4sexuKZXk5sD398Jcc+3FFgk+E8l4CdvD5jb6u8GS7
hPRtMm+09U74gyW04KDtHjKm8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAx1kXGu
QUgaMEIjYquZGAJP0ULcMB8GA1UdIwQYMBaAFHjEkZ7PmVm/cTTjXdXkLN6rQtVI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NThCRC85MDIyRjMxNkU4
OUExMUVCOThDQUNBN0FDNEY5QUUwMi9lTVNSbnMtWldiOXhOT05kMWVRczNxdEMx
VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VNU1Jucy1aV2I5eE5PTmQxZVFzM3F0QzFVZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDU4QkQvOTAyMkYzMTZFODlBMTFFQjk4Q0FDQTdBQzRGOUFFMDIvMEE4MTZDQkE0
OURBMTFGMDk5MDdFOTcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5KGMA0GCSqGSIb3DQEBCwUAA4IBAQCVZobXKOOuMA2sir/opmfE
VWuo6GKZRv/dQSgfdmnqO7CCNUa+1bOBWWX1M7QLC4/88QeXwfkduaZzq2su/NJ3
8DOjHGoywSIio1xdSSPii9gly+jCQDEQUJ7CTLdS3AnBORoi69dXMWEGmvu8LBV/
h2OKhQOuX/3ppOCqcPqO4CKLSKXGIn1DHWbTUstalWXmKx8x5ynmPev+nn6UXCzB
pPTQPvmq9ROTD4Dz6vu+0IPgVOHkqBTZFb8es5kajDP410bCS+obcPKJT3aYrVtg
7wULvE2a0va2wMS+PkfFdWCXLk7Q+QDyVJ2X0IQ6Xz3RLDTIzAIQCOTVA1ybRDp/
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:53 2026 by rpki-client