Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/D575368892D011F0B767031EC4F9AE02.roa
File:                     D575368892D011F0B767031EC4F9AE02.roa (raw, json)
Hash identifier:          +49R+niUVHEGa6s++c9bW33UyinzUzW6Yjq4fPcKfcU=
Subject key identifier:   9E:48:2D:60:1A:DA:1C:FF:2D:32:39:93:21:BE:66:8C:20:C1:D4:D0
Certificate issuer:       /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial:       058C
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/D575368892D011F0B767031EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:06:47 +0000
ROA not before:           Tue 16 Sep 2025 07:43:28 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     64013
IP address blocks:        103.139.198.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
                          rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
        Validity
            Not Before: Sep 16 07:43:28 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a46416-bf76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:84:7e:87:54:a4:8c:6f:9d:0a:9c:82:ac:
                    1d:17:1b:60:43:ae:3c:3b:f3:01:b8:06:8f:0a:3f:
                    96:f3:2c:85:93:7d:c5:8f:51:09:73:ab:bb:5b:0f:
                    9a:fc:c4:c4:cf:dd:28:29:e8:70:af:ef:3d:55:72:
                    0c:2f:5f:a0:05:df:86:05:5b:b7:c0:dc:63:72:e2:
                    d9:a4:1e:c6:1e:0b:ba:4d:31:4e:d7:7b:1a:b2:e2:
                    b6:32:3e:8e:ef:c5:b3:f8:0d:83:b1:91:42:d9:fd:
                    80:99:6a:33:44:e1:5c:3a:f2:4b:a3:e5:c2:2b:98:
                    13:9a:bc:a6:0d:2d:49:db:21:2e:4d:82:e9:29:d8:
                    4a:b9:b1:b4:2a:c5:4f:cf:99:eb:d6:de:6f:14:7c:
                    8a:67:4b:d8:65:4e:46:11:eb:6c:a7:bf:19:18:56:
                    03:0c:3d:67:30:41:dc:a9:31:75:34:75:7e:88:6a:
                    7f:32:80:10:8c:b2:8b:63:07:10:8f:ad:ec:2b:8e:
                    53:72:5e:ee:bb:b4:d5:12:54:ee:a0:74:f3:5f:b7:
                    61:0e:40:11:f0:60:d7:ff:6b:3f:35:06:00:96:54:
                    e8:a0:71:a7:67:cc:d3:5f:62:e9:2d:1f:bc:5c:25:
                    35:10:0e:af:3e:60:9b:c9:1f:69:ee:30:e9:b0:ca:
                    70:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:48:2D:60:1A:DA:1C:FF:2D:32:39:93:21:BE:66:8C:20:C1:D4:D0
            X509v3 Authority Key Identifier:
                keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/D575368892D011F0B767031EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:a9:02:02:a7:fa:7a:7c:85:f5:9a:10:8d:4d:55:97:3b:bf:
         ec:e1:4c:0f:d8:7b:0f:ff:aa:62:c7:56:58:ef:0f:1a:dc:50:
         9e:af:90:06:bd:67:0c:90:eb:49:82:85:0c:94:a4:0d:b6:4d:
         f3:0c:55:cc:a0:35:ba:51:fb:5c:f3:bf:c0:89:9d:e9:d4:35:
         27:18:15:62:86:3f:14:fc:75:e1:bb:1a:6a:a4:af:af:13:9b:
         7d:80:e3:54:0f:14:40:ae:97:e4:d4:04:36:88:fe:ab:32:67:
         e5:53:73:ab:3f:9f:3e:9e:17:1a:e7:b4:5b:42:34:f8:60:71:
         72:04:79:3d:8b:61:4a:1d:44:0a:c0:c9:66:a2:d3:d9:bb:f5:
         b5:04:86:64:7b:3e:53:b8:0f:8e:fa:68:77:71:02:c7:f1:1f:
         05:9a:09:a2:d1:d0:4f:58:c3:86:ed:ea:6e:48:98:32:ae:b6:
         b5:73:39:a0:a9:b9:3c:9d:97:10:57:32:79:5b:3d:f1:fc:0b:
         92:fe:32:2b:af:2d:a9:90:3a:73:d9:43:ed:6d:7f:cc:98:be:
         ee:13:94:03:9d:4a:5b:bc:95:54:e3:3b:89:82:1d:26:6c:2f:
         c4:6f:97:b9:7c:f1:03:a4:02:38:f9:95:18:4a:fe:bc:84:5d:
         77:31:a0:d7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy
MzA2QTI4RTcwHhcNMjUwOTE2MDc0MzI4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjQxNi1iZjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuLmEfodUpIxvnQqcgqwdFxtgQ648O/MBuAaPCj+W8yyFk33Fj1EJc6u7Ww+a
/MTEz90oKehwr+89VXIML1+gBd+GBVu3wNxjcuLZpB7GHgu6TTFO13sasuK2Mj6O
78Wz+A2DsZFC2f2AmWozROFcOvJLo+XCK5gTmrymDS1J2yEuTYLpKdhKubG0KsVP
z5nr1t5vFHyKZ0vYZU5GEetsp78ZGFYDDD1nMEHcqTF1NHV+iGp/MoAQjLKLYwcQ
j63sK45Tcl7uu7TVElTuoHTzX7dhDkAR8GDX/2s/NQYAllTooHGnZ8zTX2LpLR+8
XCU1EA6vPmCbyR9p7jDpsMpwIwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ5ILWAa
2hz/LTI5kyG+ZowgwdTQMB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0
RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjQ5RjkvNkM2OTJBRjQxNEY5MTFFQzg5NDM1NTE0QzRGOUFFMDIvRDU3NTM2ODg5
MkQwMTFGMEI3NjcwMzFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4vGMA0GCSqGSIb3DQEBCwUAA4IBAQC4qQICp/p6fIX1mhCNTVWX
O7/s4UwP2HsP/6pix1ZY7w8a3FCer5AGvWcMkOtJgoUMlKQNtk3zDFXMoDW6Uftc
87/AiZ3p1DUnGBVihj8U/HXhuxpqpK+vE5t9gONUDxRArpfk1AQ2iP6rMmflU3Or
P58+nhca57RbQjT4YHFyBHk9i2FKHUQKwMlmotPZu/W1BIZkez5TuA+O+mh3cQLH
8R8Fmgmi0dBPWMOG7epuSJgyrra1czmgqbk8nZcQVzJ5Wz3x/AuS/jIrry2pkDpz
2UPtbX/MmL7uE5QDnUpbvJVU4zuJgh0mbC/Eb5e5fPEDpAI4+ZUYSv68hF13MaDX
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:08 2026 by rpki-client