Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/BEDA89FABC1411F180DDD3483C11F970.roa
File:                     BEDA89FABC1411F180DDD3483C11F970.roa (raw, json)
Hash identifier:          eVuRTO7STTEgwRq3+fBY8S6wle3YPlh/UKWKAwUhgYk=
Subject key identifier:   0E:FB:4A:2D:9A:B0:79:8A:70:F5:B2:EC:1F:B4:D5:E3:26:7E:29:50
Certificate issuer:       /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial:       0893
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/BEDA89FABC1411F180DDD3483C11F970.roa
Signing time:             Wed 30 Sep 2026 21:41:16 +0000
ROA not before:           Wed 30 Sep 2026 21:41:16 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139088
IP address blocks:        103.12.196.0/24 maxlen: 24
                          103.12.197.0/24 maxlen: 24
                          103.12.198.0/24 maxlen: 24
                          103.12.199.0/24 maxlen: 24
                          103.73.100.0/24 maxlen: 24
                          103.73.101.0/24 maxlen: 24
                          103.73.102.0/24 maxlen: 24
                          103.73.103.0/24 maxlen: 24
                          103.125.176.0/24 maxlen: 24
                          103.125.177.0/24 maxlen: 24
                          103.125.178.0/24 maxlen: 24
                          103.125.179.0/24 maxlen: 24
                          103.150.208.0/24 maxlen: 24
                          103.150.209.0/24 maxlen: 24
                          103.151.236.0/24 maxlen: 24
                          103.151.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 21:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195 (0x893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
        Validity
            Not Before: Sep 30 21:41:16 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abd81fc-bf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:e4:f1:1e:2a:33:4c:3a:d5:fd:72:68:b9:
                    bd:57:d0:ad:ec:c3:7b:a2:6f:13:3c:7d:3a:8b:f3:
                    ad:d6:81:18:a4:ac:eb:e1:82:31:1e:9e:de:5d:f0:
                    33:87:75:a0:72:ee:e3:ed:8f:43:79:93:00:d2:a4:
                    a0:84:b1:64:58:a4:6c:6f:25:98:e9:3b:1c:59:8b:
                    6b:d0:7e:a9:75:dd:e7:ef:e4:26:19:f6:c7:c3:79:
                    d5:3a:22:51:20:38:b5:a5:2b:30:a0:fd:58:1c:c3:
                    ef:80:9f:af:2c:4b:03:b0:8a:ec:ff:ac:e5:53:26:
                    ec:7a:49:9b:f5:5b:5e:f0:e1:a2:a4:49:7a:36:17:
                    d2:22:d4:0d:27:1e:8a:2f:8a:14:d4:df:a8:28:10:
                    fe:8b:ee:57:c7:0f:a4:ae:bd:6f:6f:c0:d6:98:70:
                    e1:8b:59:d1:44:f5:1b:e8:9f:26:97:f3:5f:ab:2a:
                    a2:17:29:74:c2:b3:af:12:91:d9:2e:87:10:21:9f:
                    23:3f:fa:71:f4:ec:7f:8f:34:ae:60:d4:31:15:5f:
                    6c:83:a2:ac:1b:e5:3a:71:33:c7:10:15:92:d1:07:
                    6a:b2:cf:0d:d5:28:db:fc:5f:f5:38:ee:56:22:0b:
                    84:11:4d:6e:d4:5c:d3:db:d9:d9:1d:9b:c0:c0:ea:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FB:4A:2D:9A:B0:79:8A:70:F5:B2:EC:1F:B4:D5:E3:26:7E:29:50
            X509v3 Authority Key Identifier:
                keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/BEDA89FABC1411F180DDD3483C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.196.0/22
                  103.73.100.0/22
                  103.125.176.0/22
                  103.150.208.0/23
                  103.151.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:3b:76:78:af:2e:d7:a7:ca:9d:b8:19:a7:0d:d0:4a:c8:a0:
         94:7e:06:24:e2:89:65:59:75:7c:e5:59:a0:ef:ae:11:4c:1b:
         d2:35:0f:27:62:20:28:6c:2f:a2:2c:de:11:cb:05:cf:d0:8e:
         0c:54:85:60:ec:81:6f:29:a5:02:33:24:18:f0:2b:83:5e:be:
         59:1b:51:8f:35:7e:7f:19:80:db:dd:4b:5f:68:4e:fa:1e:b9:
         d9:a6:b0:75:19:2c:66:16:4c:c0:e1:4d:f5:11:ca:2d:33:67:
         1b:61:e1:13:13:26:26:83:80:a3:b1:07:6e:76:85:ec:10:ba:
         9f:08:02:ef:c9:00:2e:30:f4:84:9b:f6:d1:73:3e:09:30:dd:
         5a:66:7d:10:b0:84:bc:0e:a1:6f:b4:91:ad:56:2f:d8:09:13:
         fb:66:2a:5d:e1:57:b5:f5:45:6b:37:c1:09:bf:72:df:bd:b0:
         8a:77:21:92:6f:7c:21:5c:d0:ed:54:fa:cf:71:86:80:ec:ac:
         10:63:d2:45:df:7e:b1:e8:91:da:ab:9f:55:46:a6:cc:11:2b:
         2f:b5:1a:5c:70:fb:f0:21:8f:5a:25:5b:b7:01:34:34:cf:db:
         32:d3:e0:06:8a:d1:7d:39:aa:50:36:c2:d8:4c:73:8b:4d:3d:
         de:b5:f0:d6
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY1NEMxMTAvBgNVBAUTKDVFQTExQzhBM0EyOUUwNjk3M0MxRjEyMTYxMUQ1QTVD
MkExQjA2OUQwHhcNMjYwOTMwMjE0MTE2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkODFmYy1iZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA06Pk8R4qM0w61f1yaLm9V9Ct7MN7om8TPH06i/Ot1oEYpKzr4YIxHp7eXfAz
h3Wgcu7j7Y9DeZMA0qSghLFkWKRsbyWY6TscWYtr0H6pdd3n7+QmGfbHw3nVOiJR
IDi1pSswoP1YHMPvgJ+vLEsDsIrs/6zlUybsekmb9Vte8OGipEl6NhfSItQNJx6K
L4oU1N+oKBD+i+5Xxw+krr1vb8DWmHDhi1nRRPUb6J8ml/NfqyqiFyl0wrOvEpHZ
LocQIZ8jP/px9Ox/jzSuYNQxFV9sg6KsG+U6cTPHEBWS0Qdqss8N1Sjb/F/1OO5W
IguEEU1u1FzT29nZHZvAwOqxQwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFA77Si2a
sHmKcPWy7B+01eMmfilQMB8GA1UdIwQYMBaAFF6hHIo6KeBpc8HxIWEdWlwqGwad
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0Qy81MUE5RUFDQzQx
NjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRHbHp3ZkVoWVIxYVhDb2JC
cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hxRWNpam9wNEdsendmRWhZUjFhWENvYkJwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTY1NEMvNTFBOUVBQ0M0MTYwMTFFQjkwODc0NDUwQzRGOUFFMDIvQkVEQTg5RkFC
QzE0MTFGMTgwREREMzQ4M0MxMUY5NzAucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk
BAIAATAeAwQCZwzEAwQCZ0lkAwQCZ32wAwQBZ5bQAwQBZ5fsMA0GCSqGSIb3DQEB
CwUAA4IBAQA+O3Z4ry7Xp8qduBmnDdBKyKCUfgYk4ollWXV85Vmg764RTBvSNQ8n
YiAobC+iLN4RywXP0I4MVIVg7IFvKaUCMyQY8CuDXr5ZG1GPNX5/GYDb3UtfaE76
HrnZprB1GSxmFkzA4U31EcotM2cbYeETEyYmg4CjsQdudoXsELqfCALvyQAuMPSE
m/bRcz4JMN1aZn0QsIS8DqFvtJGtVi/YCRP7Zipd4Ve19UVrN8EJv3LfvbCKdyGS
b3whXNDtVPrPcYaA7KwQY9JF336x6JHaq59VRqbMESsvtRpccPvwIY9aJVu3ATQ0
z9sy0+AGitF9OapQNsLYTHOLTT3etfDW
-----END CERTIFICATE-----
Generated at Sat Oct 3 17:52:25 2026 by rpki-client