Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/A5309C7494BE11F1B072A5E83611F970.roa
File:                     A5309C7494BE11F1B072A5E83611F970.roa (raw, json)
Hash identifier:          8Q4en3Wuecztwqe6xCK+mpxnOTP9m+Kz+91dWZyI9pw=
Subject key identifier:   13:18:1D:FE:6E:4F:6C:1A:00:84:41:FF:F3:18:3A:95:7C:D7:BF:B3
Certificate issuer:       /CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
Certificate serial:       08FC
Authority key identifier: 59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/A5309C7494BE11F1B072A5E83611F970.roa
Signing time:             Mon 10 Aug 2026 13:24:37 +0000
ROA not before:           Mon 10 Aug 2026 13:24:37 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140963
IP address blocks:        103.153.212.0/23 maxlen: 23
                          103.153.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl
                          rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2300 (0x8fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917126B, serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
        Validity
            Not Before: Aug 10 13:24:37 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a79d115-4d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:50:69:7a:9b:f4:cc:e9:11:88:15:75:20:
                    4b:2a:04:97:42:30:c0:34:41:00:77:29:b0:1e:14:
                    42:07:90:dd:a9:c5:6c:6d:88:bd:d2:e4:f1:15:9d:
                    e8:17:cc:b4:f9:ec:8b:bd:7f:87:d5:6b:9f:12:9c:
                    f3:8f:50:9b:fd:d9:9a:01:5f:ed:6d:68:fe:ea:9c:
                    0d:38:1d:9d:e7:6f:77:94:90:e7:a6:fd:3f:95:8e:
                    a7:e7:7a:99:8a:a0:e7:9e:a0:46:76:5f:aa:67:e5:
                    4e:8d:f0:48:0e:d6:0e:08:7e:b0:5e:bb:73:a2:03:
                    c8:b1:ac:d8:91:1b:c5:e4:23:7e:d4:7d:96:80:e2:
                    00:3e:34:35:a7:54:13:53:c5:1c:63:de:77:c2:a9:
                    58:74:b2:6b:a6:3f:fb:3d:ac:2d:83:c7:af:73:92:
                    e3:b1:15:01:0b:90:33:4f:bc:75:82:e8:ad:ed:4e:
                    10:80:2d:5d:e6:76:fa:6c:4a:02:96:40:27:89:e4:
                    eb:1d:38:ff:f2:3f:03:5c:f4:b4:87:81:3d:59:d8:
                    62:e4:24:0c:1d:1d:14:95:94:2f:16:7a:96:f9:ad:
                    33:c6:87:2b:07:ad:0a:27:da:b7:fd:c7:6b:d7:92:
                    30:4b:08:6f:ea:a7:5d:a1:d5:f2:85:2d:70:91:b3:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:18:1D:FE:6E:4F:6C:1A:00:84:41:FF:F3:18:3A:95:7C:D7:BF:B3
            X509v3 Authority Key Identifier:
                keyid:59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/A5309C7494BE11F1B072A5E83611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:86:1e:ee:20:b4:b1:cc:8b:13:86:16:17:2b:54:c0:43:fd:
         2e:3e:4c:8e:ed:aa:54:08:63:88:ab:eb:75:a1:c2:4a:ba:2e:
         ce:32:47:7d:50:11:76:ce:da:d7:49:51:8f:d8:fd:05:fb:3d:
         66:0e:69:d4:a9:84:31:69:20:d0:df:bd:1f:a0:e1:f1:20:86:
         4a:55:0e:0a:84:6c:c7:0d:34:49:52:5e:b6:96:ee:75:67:1a:
         d1:c4:18:2f:92:de:93:2c:5a:22:5d:fb:e2:fe:3c:29:5d:0c:
         3e:18:c9:87:78:ea:ba:e3:d9:f6:6d:f1:13:9e:2b:32:a4:76:
         0c:46:89:21:c0:b6:5a:3e:31:c7:5d:21:ff:b4:6a:69:f7:8c:
         cf:29:0b:fa:5a:4e:94:05:49:26:2a:80:0a:a6:0a:a9:ff:4b:
         ee:3d:9c:5f:31:3a:90:71:e8:59:a4:f3:ed:08:d5:79:4a:a8:
         0a:e6:58:3b:30:99:ca:9c:09:c5:34:b8:b1:c8:e1:5c:7d:c7:
         e9:34:b0:55:35:9f:c3:d7:96:50:2c:2a:59:cf:79:84:fb:b1:
         72:f8:9c:17:9b:47:e9:66:be:26:e9:fb:22:00:29:9d:47:a2:
         b0:7a:99:e2:1d:44:4d:6d:ba:55:04:e2:96:8d:74:5d:41:7c:
         65:59:46:47
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzEyNkIxMTAvBgNVBAUTKDU5NkNBNzMzQ0UxREQxNkY4RUVGMzIzMTlFQTVEM0E4
QjIyRjkwQzkwHhcNMjYwODEwMTMyNDM3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc5ZDExNS00ZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3vlQaXqb9MzpEYgVdSBLKgSXQjDANEEAdymwHhRCB5DdqcVsbYi90uTxFZ3o
F8y0+eyLvX+H1WufEpzzj1Cb/dmaAV/tbWj+6pwNOB2d5293lJDnpv0/lY6n53qZ
iqDnnqBGdl+qZ+VOjfBIDtYOCH6wXrtzogPIsazYkRvF5CN+1H2WgOIAPjQ1p1QT
U8UcY953wqlYdLJrpj/7Pawtg8evc5LjsRUBC5AzT7x1guit7U4QgC1d5nb6bEoC
lkAnieTrHTj/8j8DXPS0h4E9Wdhi5CQMHR0UlZQvFnqW+a0zxocrB60KJ9q3/cdr
15IwSwhv6qddodXyhS1wkbMT7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBMYHf5u
T2waAIRB//MYOpV817+zMB8GA1UdIwQYMBaAFFlspzPOHdFvju8yMZ6l06iyL5DJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTI2Qi83Rjk2NUQ3NERB
REQxMUVBQUYwRjRCMUNDNEY5QUUwMi9XV3luTTg0ZDBXLU83ekl4bnFYVHFMSXZr
TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dXeW5NODRkMFctTzd6SXhucVhUcUxJdmtNay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzEyNkIvN0Y5NjVENzREQUREMTFFQUFGMEY0QjFDQzRGOUFFMDIvQTUzMDlDNzQ5
NEJFMTFGMUIwNzJBNUU4MzYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5nUMA0GCSqGSIb3DQEBCwUAA4IBAQCjhh7uILSxzIsThhYXK1TA
Q/0uPkyO7apUCGOIq+t1ocJKui7OMkd9UBF2ztrXSVGP2P0F+z1mDmnUqYQxaSDQ
370foOHxIIZKVQ4KhGzHDTRJUl62lu51ZxrRxBgvkt6TLFoiXfvi/jwpXQw+GMmH
eOq649n2bfETnisypHYMRokhwLZaPjHHXSH/tGpp94zPKQv6Wk6UBUkmKoAKpgqp
/0vuPZxfMTqQcehZpPPtCNV5SqgK5lg7MJnKnAnFNLixyOFcfcfpNLBVNZ/D15ZQ
LCpZz3mE+7Fy+JwXm0fpZr4m6fsiACmdR6KwepniHURNbbpVBOKWjXRdQXxlWUZH
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:25:21 2026 by rpki-client