Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/D1DB990C1A3811EAB6F9C83DC4F9AE02.roa
File:                     D1DB990C1A3811EAB6F9C83DC4F9AE02.roa (raw, json)
Hash identifier:          7Dz9hu6gjsKF7rOCaXHWUeixpnR4qVyHb9xN6ykXLfw=
Subject key identifier:   56:82:7F:C5:CC:F7:A8:94:33:13:54:BF:1C:0A:4F:DC:EC:2D:44:14
Certificate issuer:       /CN=A919FD74/serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
Certificate serial:       0C72
Authority key identifier: 86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/D1DB990C1A3811EAB6F9C83DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:29:37 +0000
ROA not before:           Tue 20 Jan 2026 18:15:58 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139854
IP address blocks:        103.146.10.0/23 maxlen: 24
                          2001:df2:3980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl
                          rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3186 (0xc72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FD74, serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
        Validity
            Not Before: Jan 20 18:15:58 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46970-d55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:92:c4:0b:0f:bd:b3:e6:42:fc:a4:36:a9:
                    2c:ba:77:cc:bb:13:4c:15:d2:a3:5d:69:28:af:8e:
                    ef:52:e9:e7:cb:7c:47:4b:9c:72:eb:bd:ef:07:be:
                    84:6a:8f:ff:84:96:86:68:96:3a:90:64:9f:5d:98:
                    d7:57:c5:96:e0:f1:84:b2:9b:ae:33:d3:e0:af:d8:
                    26:1d:06:86:1b:07:42:87:76:b4:0d:dc:f2:52:ec:
                    a8:bd:4a:6e:1b:12:58:07:fb:8e:59:7e:0d:1d:18:
                    fe:ba:02:0b:07:0e:d0:50:71:f3:b6:73:aa:be:7b:
                    1d:a9:8f:1a:3f:30:06:de:87:04:a3:4b:d8:65:77:
                    08:6d:f5:9a:11:3a:3c:b8:3e:f6:49:4e:af:2f:29:
                    c7:0f:20:e9:12:d0:f9:81:ad:67:72:59:a4:c1:c3:
                    41:ba:a6:52:39:ef:9a:65:b4:62:2f:4a:f6:62:ca:
                    9b:26:44:62:4d:87:28:77:61:9b:b3:0c:a6:0f:08:
                    00:f7:05:50:6b:9d:79:2a:d9:d4:2d:89:94:32:a3:
                    40:ab:14:f9:3f:3c:70:d7:db:1d:ad:f0:08:7d:16:
                    d1:41:d3:93:1e:f9:41:99:0c:37:ab:df:f0:f8:34:
                    9e:60:b8:9c:a6:94:fd:8f:47:ae:61:04:8b:34:44:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:82:7F:C5:CC:F7:A8:94:33:13:54:BF:1C:0A:4F:DC:EC:2D:44:14
            X509v3 Authority Key Identifier:
                keyid:86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/D1DB990C1A3811EAB6F9C83DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.10.0/23
                IPv6:
                  2001:df2:3980::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:d0:f1:f5:37:ce:cd:b6:ac:75:af:70:7d:97:09:02:a4:
         28:b9:46:91:0e:17:c2:8c:f0:b5:56:0e:36:e4:eb:59:aa:73:
         92:f2:33:36:7c:00:fb:2b:61:33:35:7b:b5:ef:43:95:56:57:
         3e:b3:53:39:8c:99:ef:dd:8b:d2:76:06:5b:10:5a:4d:d3:0d:
         48:a8:8a:35:65:96:97:7e:d7:c7:6c:19:96:5c:8e:35:ac:a9:
         96:bd:75:bf:63:7f:ad:d1:e0:b2:08:ca:53:8c:dd:74:c3:6d:
         ba:29:c7:e0:34:19:01:a7:2b:12:d4:9e:7b:c3:33:8b:b9:cd:
         9d:b0:d1:c6:8f:09:89:a1:20:b3:e3:07:de:af:12:d5:54:e1:
         d8:f0:b6:4a:92:4b:82:b8:38:89:2d:c0:5d:4c:21:2d:57:0b:
         af:2c:27:6c:24:6e:c4:fb:30:c3:7b:da:d6:9c:87:e2:1e:b1:
         83:15:74:9b:f3:5e:2c:9c:c9:5d:b4:8b:b2:1d:f5:aa:98:b9:
         56:dc:a5:88:78:ab:e7:bf:dd:01:00:e7:61:5d:54:6d:15:34:
         d5:6d:ec:bd:af:fd:7a:57:b6:49:82:76:b5:af:5d:4b:eb:a7:
         6f:2e:ea:dc:40:56:34:c1:35:f2:97:a8:da:9f:fd:23:b9:51:
         84:8f:2a:55
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZENzQxMTAvBgNVBAUTKDg2N0EwNzE0OTY2QTlEN0Q4QjIwMkRGQjFERTIyMTND
MDJDMDM2MjcwHhcNMjYwMTIwMTgxNTU4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Njk3MC1kNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApcqSxAsPvbPmQvykNqksunfMuxNMFdKjXWkor47vUunny3xHS5xy673vB76E
ao//hJaGaJY6kGSfXZjXV8WW4PGEspuuM9Pgr9gmHQaGGwdCh3a0DdzyUuyovUpu
GxJYB/uOWX4NHRj+ugILBw7QUHHztnOqvnsdqY8aPzAG3ocEo0vYZXcIbfWaETo8
uD72SU6vLynHDyDpEtD5ga1nclmkwcNBuqZSOe+aZbRiL0r2YsqbJkRiTYcod2Gb
swymDwgA9wVQa515KtnULYmUMqNAqxT5Pzxw19sdrfAIfRbRQdOTHvlBmQw3q9/w
+DSeYLicppT9j0euYQSLNEQaDwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFaCf8XM
96iUMxNUvxwKT9zsLUQUMB8GA1UdIwQYMBaAFIZ6BxSWap19iyAt+x3iITwCwDYn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkQ3NC81MzY3QjZCRTFB
MzgxMUVBQTBFOEEyM0RDNEY5QUUwMi9obm9IRkpacW5YMkxJQzM3SGVJaFBBTEFO
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hub0hGSlpxblgyTElDMzdIZUloUEFMQU5pYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUZENzQvNTM2N0I2QkUxQTM4MTFFQUEwRThBMjNEQzRGOUFFMDIvRDFEQjk5MEMx
QTM4MTFFQUI2RjlDODNEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ5IKMA8EAgACMAkDBwAgAQ3yOYAwDQYJKoZIhvcNAQELBQADggEB
AItQ0PH1N87Ntqx1r3B9lwkCpCi5RpEOF8KM8LVWDjbk61mqc5LyMzZ8APsrYTM1
e7XvQ5VWVz6zUzmMme/di9J2BlsQWk3TDUioijVllpd+18dsGZZcjjWsqZa9db9j
f63R4LIIylOM3XTDbbopx+A0GQGnKxLUnnvDM4u5zZ2w0caPCYmhILPjB96vEtVU
4djwtkqSS4K4OIktwF1MIS1XC68sJ2wkbsT7MMN72tach+IesYMVdJvzXiycyV20
i7Id9aqYuVbcpYh4q+e/3QEA52FdVG0VNNVt7L2v/XpXtkmCdrWvXUvrp28u6txA
VjTBNfKXqNqf/SO5UYSPKlU=
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:40:56 2026 by rpki-client