Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/13D71D68CC6611F19880CE2B0E66CEF9.roa
File:                     13D71D68CC6611F19880CE2B0E66CEF9.roa (raw, json)
Hash identifier:          FjWabkKU/5gjY9J74Xj6FU3+fmcrY80IWZkwUiUuV1o=
Subject key identifier:   66:43:D0:22:98:42:E9:0F:99:3A:3E:50:8A:EA:1D:81:93:AD:F0:14
Certificate issuer:       /CN=A915037C/serialNumber=DCE20BBF301F792348BFCB29607C6B1FF93787F5
Certificate serial:       02
Authority key identifier: DC:E2:0B:BF:30:1F:79:23:48:BF:CB:29:60:7C:6B:1F:F9:37:87:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OILvzAfeSNIv8spYHxrH_k3h_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/13D71D68CC6611F19880CE2B0E66CEF9.roa
Signing time:             Tue 20 Oct 2026 09:10:22 +0000
ROA not before:           Tue 20 Oct 2026 09:10:22 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     45680
IP address blocks:        103.30.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/3OILvzAfeSNIv8spYHxrH_k3h_U.crl
                          rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/3OILvzAfeSNIv8spYHxrH_k3h_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OILvzAfeSNIv8spYHxrH_k3h_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 09:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915037C, serialNumber=DCE20BBF301F792348BFCB29607C6B1FF93787F5
        Validity
            Not Before: Oct 20 09:10:22 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad72ffe-37c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:e1:53:6e:8a:56:54:96:2d:60:46:19:00:
                    9e:1f:ee:64:88:f2:9f:91:b5:87:72:66:af:cc:36:
                    c0:f5:4f:76:12:76:a2:07:57:b9:75:3e:d4:8d:36:
                    ed:ef:ab:ea:5b:02:e0:72:b1:0d:b1:2d:46:b0:9f:
                    56:f9:75:bf:4a:86:ae:3b:47:e4:ad:d0:7b:42:1d:
                    e8:ee:a1:98:8c:68:84:fe:c4:ce:e9:7a:9a:f1:a0:
                    03:dc:72:1d:27:3c:9c:7f:5a:15:61:36:58:01:9c:
                    d9:b7:bb:1e:db:b6:f2:95:7f:33:94:87:12:07:6b:
                    c9:43:f3:13:bb:ad:62:db:0a:a9:1f:63:03:62:74:
                    52:ed:5c:77:89:03:33:83:5f:4b:51:9b:68:ca:80:
                    62:a9:b6:7f:4a:e8:d3:34:cf:1a:53:bc:04:35:99:
                    52:4c:14:b3:0f:52:87:c8:ac:c2:50:7e:6e:94:6f:
                    86:61:4f:6d:d1:d7:83:13:d1:9b:bd:cd:57:4d:c4:
                    06:2f:1d:db:e4:3b:ca:93:59:07:d0:53:5d:be:d6:
                    80:08:88:85:ca:d1:be:43:46:e5:a6:5c:c6:74:31:
                    94:f0:66:19:8a:75:51:1e:1b:ac:39:cd:79:38:f6:
                    02:c1:eb:7e:e2:2a:74:21:31:2a:06:34:2c:86:ae:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:43:D0:22:98:42:E9:0F:99:3A:3E:50:8A:EA:1D:81:93:AD:F0:14
            X509v3 Authority Key Identifier:
                keyid:DC:E2:0B:BF:30:1F:79:23:48:BF:CB:29:60:7C:6B:1F:F9:37:87:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/3OILvzAfeSNIv8spYHxrH_k3h_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OILvzAfeSNIv8spYHxrH_k3h_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/13D71D68CC6611F19880CE2B0E66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:84:c8:e0:d9:66:8d:bf:fa:94:67:8e:86:e4:a7:33:55:3b:
         82:22:18:e8:b0:8a:5b:10:2a:fb:14:ff:8a:b0:65:54:5f:03:
         8f:73:b5:a3:fd:1a:b0:f0:ca:13:0b:c9:8a:08:8f:d1:63:4b:
         48:1c:02:dc:df:44:72:de:a3:b7:57:4a:8f:b9:04:f5:67:0a:
         1c:fd:f7:05:5f:94:b3:50:57:d1:19:86:71:a9:ab:28:32:6c:
         e6:1b:bd:e6:e1:09:ce:2e:fc:8c:cc:f5:99:40:fd:10:ab:0a:
         94:67:ee:9d:44:cf:f8:b4:a6:ff:8b:82:f0:cb:bf:86:26:f9:
         9a:c1:d9:41:75:90:3c:9d:4e:96:fb:e2:5d:6a:ea:9a:f9:a2:
         44:c8:b4:72:77:18:ea:49:a2:62:a6:b9:71:99:47:9a:c9:e5:
         4f:01:b5:04:29:03:5e:e4:4f:39:43:16:58:4b:40:7d:9b:42:
         95:b9:17:99:17:31:78:8b:96:75:99:b6:9b:42:75:fe:e9:7b:
         b5:3a:57:40:cb:01:8f:d1:ce:2e:bc:6c:05:0c:a2:cb:a2:b5:
         91:b8:38:03:92:c2:34:1f:3f:04:ac:9f:70:e9:5b:31:5b:2e:
         5d:e1:90:ec:ce:3a:10:d2:9a:5d:37:d2:b0:c6:07:cd:a1:5d:
         18:4f:1a:53
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MDM3QzExMC8GA1UEBRMoRENFMjBCQkYzMDFGNzkyMzQ4QkZDQjI5NjA3QzZCMUZG
OTM3ODdGNTAeFw0yNjEwMjAwOTEwMjJaFw0yNzEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhZDcyZmZlLTM3YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvDOFTbopWVJYtYEYZAJ4f7mSI8p+RtYdyZq/MNsD1T3YSdqIHV7l1PtSNNu3v
q+pbAuBysQ2xLUawn1b5db9Khq47R+St0HtCHejuoZiMaIT+xM7peprxoAPcch0n
PJx/WhVhNlgBnNm3ux7btvKVfzOUhxIHa8lD8xO7rWLbCqkfYwNidFLtXHeJAzOD
X0tRm2jKgGKptn9K6NM0zxpTvAQ1mVJMFLMPUofIrMJQfm6Ub4ZhT23R14MT0Zu9
zVdNxAYvHdvkO8qTWQfQU12+1oAIiIXK0b5DRuWmXMZ0MZTwZhmKdVEeG6w5zXk4
9gLB637iKnQhMSoGNCyGrsmhAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUZkPQIphC
6Q+ZOj5QiuodgZOt8BQwHwYDVR0jBBgwFoAU3OILvzAfeSNIv8spYHxrH/k3h/Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwMzdDL0VBN0NDNUU2Q0M2
MzExRjFBQTNFREQ2MjBENjZDRUY5LzNPSUx2ekFmZVNOSXY4c3BZSHhySF9rM2hf
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM09JTHZ6QWZlU05JdjhzcFlIeHJIX2szaF9VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDM3Qy9FQTdDQzVFNkNDNjMxMUYxQUEzRURENjIwRDY2Q0VGOS8xM0Q3MUQ2OEND
NjYxMUYxOTg4MENFMkIwRTY2Q0VGOS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnHvAwDQYJKoZIhvcNAQELBQADggEBABWEyODZZo2/+pRnjobkpzNV
O4IiGOiwilsQKvsU/4qwZVRfA49ztaP9GrDwyhMLyYoIj9FjS0gcAtzfRHLeo7dX
So+5BPVnChz99wVflLNQV9EZhnGpqygybOYbvebhCc4u/IzM9ZlA/RCrCpRn7p1E
z/i0pv+LgvDLv4Ym+ZrB2UF1kDydTpb74l1q6pr5okTItHJ3GOpJomKmuXGZR5rJ
5U8BtQQpA17kTzlDFlhLQH2bQpW5F5kXMXiLlnWZtptCdf7pe7U6V0DLAY/Rzi68
bAUMosuitZG4OAOSwjQfPwSsn3DpWzFbLl3hkOzOOhDSml030rDGB82hXRhPGlM=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:17 2026 by rpki-client