Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/7BF0DB503ECF11EEA6759B55C4F9AE02.roa
File:                     7BF0DB503ECF11EEA6759B55C4F9AE02.roa (raw, json)
Hash identifier:          utr9cvGOzINqaYUQ/dmwQU5yDRbxn3goNF9CCVXnSpA=
Subject key identifier:   9B:B4:62:8C:63:05:16:E8:78:98:50:BD:35:6D:24:4B:77:05:49:69
Certificate issuer:       /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Certificate serial:       0ABA
Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/7BF0DB503ECF11EEA6759B55C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:10:42 +0000
ROA not before:           Wed 04 Feb 2026 19:16:35 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     131471
IP address blocks:        103.148.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
                          rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 19:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746 (0xaba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
        Validity
            Not Before: Feb  4 19:16:35 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47312-c119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:0b:8f:0c:0c:e6:7e:0a:d7:5d:86:e6:ec:
                    59:a2:b4:73:7a:2a:0c:74:12:e1:87:6b:25:97:38:
                    98:2a:b4:a9:39:39:60:fb:74:8f:47:74:06:58:55:
                    5d:3b:62:af:04:ba:bb:75:8e:f6:eb:d4:76:6b:59:
                    95:1a:dc:7d:21:80:2d:ac:68:6a:2f:3c:36:32:bc:
                    8b:ee:b8:01:b3:39:e4:6c:fb:56:91:c8:2f:97:43:
                    a5:79:a7:f1:8f:fc:d6:96:8d:e7:6d:bd:92:81:16:
                    c2:88:7b:8a:27:9e:bb:ee:aa:ab:56:1c:47:0d:60:
                    10:4a:3e:95:02:50:1f:22:2b:c5:ff:16:35:53:52:
                    3e:be:84:22:f8:04:52:ad:ab:c3:14:38:11:15:73:
                    a4:d7:be:f1:36:1e:b5:66:d1:34:9d:d6:b0:2e:d2:
                    d5:a0:e5:af:0e:86:fa:94:c2:7e:18:60:66:84:51:
                    00:3e:61:a0:73:c4:bf:3b:c0:3d:92:33:24:54:72:
                    e2:81:f5:19:30:e6:38:cb:59:26:ef:f5:b2:4c:5d:
                    6e:df:0e:7d:9a:6a:34:7d:cf:e3:55:e4:85:c6:13:
                    4c:f0:02:cb:53:51:7d:3e:f8:52:99:a9:64:9b:93:
                    d1:bd:af:db:16:06:ef:f2:b7:cc:71:1c:fc:45:8f:
                    9a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B4:62:8C:63:05:16:E8:78:98:50:BD:35:6D:24:4B:77:05:49:69
            X509v3 Authority Key Identifier:
                keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/7BF0DB503ECF11EEA6759B55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:d6:74:5d:d0:ac:a1:f1:90:c7:a4:81:3e:d6:2f:b3:67:f5:
         94:80:e3:79:45:f9:19:89:1b:49:91:f7:95:e7:7f:94:1d:e0:
         fe:ad:0d:f4:d6:cf:3d:7b:54:81:33:04:cb:d9:4d:a0:a7:ce:
         41:da:93:fe:bf:63:fd:bd:c0:4f:58:99:23:69:91:5f:c4:69:
         6b:c9:40:97:cb:0d:9b:8c:13:2b:6b:62:05:ca:4e:51:0e:eb:
         5f:de:ec:c6:6e:5e:74:2b:48:e5:76:65:9b:84:b9:08:47:bb:
         55:28:c6:33:d4:8e:8a:d8:94:28:03:6b:af:92:d8:64:13:51:
         ec:9f:f0:0d:d8:d0:32:1c:a7:06:ef:af:68:d4:89:3d:ba:dc:
         e2:9c:49:2a:98:5a:8f:df:1a:a6:88:f2:4f:90:3f:e4:18:e6:
         0b:85:93:1a:06:7d:c5:51:51:c5:58:5c:8d:b8:e6:13:c6:61:
         8b:a2:0d:3b:6c:4f:9c:1f:01:aa:58:6d:2a:e3:96:a0:91:dd:
         3f:dd:72:49:c6:18:3a:35:94:e6:1c:7f:8f:3f:e9:13:9b:e0:
         01:da:e3:b3:37:4b:93:64:73:de:c3:d0:6a:ee:fa:5c:9e:f2:
         64:98:86:d8:d7:53:0f:c5:36:7e:6b:ba:7c:34:a4:01:b1:ab:
         76:e9:b5:77
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5
MjcyMTRDMzkwHhcNMjYwMjA0MTkxNjM1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzMxMi1jMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuQMLjwwM5n4K112G5uxZorRzeioMdBLhh2sllziYKrSpOTlg+3SPR3QGWFVd
O2KvBLq7dY7269R2a1mVGtx9IYAtrGhqLzw2MryL7rgBsznkbPtWkcgvl0Oleafx
j/zWlo3nbb2SgRbCiHuKJ5677qqrVhxHDWAQSj6VAlAfIivF/xY1U1I+voQi+ARS
ravDFDgRFXOk177xNh61ZtE0ndawLtLVoOWvDob6lMJ+GGBmhFEAPmGgc8S/O8A9
kjMkVHLigfUZMOY4y1km7/WyTF1u3w59mmo0fc/jVeSFxhNM8ALLU1F9PvhSmalk
m5PRva/bFgbv8rfMcRz8RY+a/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJu0Yoxj
BRboeJhQvTVtJEt3BUlpMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx
NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTBCQTYvMEYzREY0Mjg3MTU3MTFFQTg2NTU5RDJEQzRGOUFFMDIvN0JGMERCNTAz
RUNGMTFFRUE2NzU5QjU1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5SAMA0GCSqGSIb3DQEBCwUAA4IBAQAl1nRd0Kyh8ZDHpIE+1i+z
Z/WUgON5RfkZiRtJkfeV53+UHeD+rQ301s89e1SBMwTL2U2gp85B2pP+v2P9vcBP
WJkjaZFfxGlryUCXyw2bjBMra2IFyk5RDutf3uzGbl50K0jldmWbhLkIR7tVKMYz
1I6K2JQoA2uvkthkE1Hsn/AN2NAyHKcG769o1Ik9utzinEkqmFqP3xqmiPJPkD/k
GOYLhZMaBn3FUVHFWFyNuOYTxmGLog07bE+cHwGqWG0q45agkd0/3XJJxhg6NZTm
HH+PP+kTm+AB2uOzN0uTZHPew9Bq7vpcnvJkmIbY11MPxTZ+a7p8NKQBsat26bV3
-----END CERTIFICATE-----
Generated at Fri Mar 13 22:45:58 2026 by rpki-client