Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/B8A13FB4D51111F1BA4B67B5FC65CEF9.roa
File:                     B8A13FB4D51111F1BA4B67B5FC65CEF9.roa (raw, json)
Hash identifier:          WZ3Udje3dPUityzlhimnI3r52p17r4tjiJCMGEcMKm8=
Subject key identifier:   22:D6:8A:DB:B9:48:6F:86:48:C7:BE:6D:14:C9:B2:94:9A:26:F1:BA
Certificate issuer:       /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
Certificate serial:       076A
Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/B8A13FB4D51111F1BA4B67B5FC65CEF9.roa
Signing time:             Sat 31 Oct 2026 09:59:11 +0000
ROA not before:           Sat 31 Oct 2026 09:59:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     401701
IP address blocks:        103.146.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl
                          rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 21:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1898 (0x76a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00E, serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
        Validity
            Not Before: Oct 31 09:59:11 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6ae5bbef-2f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:58:a0:a9:12:b1:63:64:02:08:f9:d1:4e:
                    7f:11:ec:34:d4:0c:e6:c5:6e:52:62:52:67:77:ad:
                    bd:08:f9:de:d9:aa:3d:25:d7:11:0c:14:c5:75:fa:
                    2a:80:f9:7e:5e:eb:c0:d9:30:69:f9:b1:5f:d7:ba:
                    c3:90:5a:90:70:3b:19:e6:cd:85:d3:1d:9f:01:72:
                    09:10:f2:4d:de:83:37:24:b7:48:93:e2:ae:36:95:
                    77:7d:91:23:01:51:58:c0:2d:db:80:5e:c5:31:98:
                    f1:d9:f6:7a:c6:34:9d:9e:6d:a9:a1:c5:4c:8a:1c:
                    7b:db:30:19:51:07:3b:7d:5a:94:9e:82:5c:5c:de:
                    55:e5:14:27:f9:45:8f:1f:85:59:da:47:ff:7e:0e:
                    f4:3b:d5:df:08:e0:49:cd:05:da:84:76:49:75:68:
                    48:5d:77:1b:25:60:a5:99:32:bb:b5:5f:02:9c:16:
                    ed:2b:b4:9c:88:2a:cf:04:20:64:6e:ca:70:3c:39:
                    e9:6c:40:77:1c:f2:c4:41:16:12:8c:50:1d:a1:fb:
                    41:2f:69:bd:59:a2:f7:0a:62:98:01:3d:bc:95:45:
                    1b:e1:56:6a:93:e5:ea:96:fe:fb:bd:0e:99:77:1e:
                    72:47:17:77:55:f1:df:7d:b8:d6:03:d8:4a:ca:0f:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D6:8A:DB:B9:48:6F:86:48:C7:BE:6D:14:C9:B2:94:9A:26:F1:BA
            X509v3 Authority Key Identifier:
                keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/B8A13FB4D51111F1BA4B67B5FC65CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:58:b2:e2:ba:d4:6d:2f:ba:0d:91:a8:2d:cc:5c:7c:a8:9d:
         dc:c8:e9:b8:31:d9:2e:b0:3f:44:29:6f:18:6e:3d:c8:38:07:
         d2:8b:26:65:a5:b6:00:a4:86:60:4a:7d:c4:29:f4:8a:7e:80:
         75:33:f6:48:fa:80:29:b9:05:e6:09:da:b2:60:e2:d5:96:f3:
         c8:9a:1e:97:4b:e1:8b:27:0d:5d:1a:eb:a5:ef:61:c8:9f:4b:
         ec:a3:cb:19:74:75:16:77:c5:67:92:e8:0c:6c:6b:f3:ae:38:
         bb:03:17:d5:35:03:40:ff:00:36:66:eb:33:fc:00:af:f7:7f:
         95:8e:86:55:84:e9:f5:36:0b:50:5f:4f:23:bf:cb:d5:92:47:
         25:f0:b2:40:4b:b5:6d:88:ac:12:f9:66:2e:6a:6f:c7:7d:44:
         29:29:9b:25:ed:21:3f:90:77:e2:fe:e2:56:78:20:c4:02:48:
         b6:36:68:46:c7:fa:e9:ac:c2:43:0a:b1:8f:ba:03:f0:2f:96:
         dc:9b:4b:9b:40:25:4b:f5:6c:28:d3:c1:bc:3c:dd:be:e5:cc:
         b4:ff:57:c6:da:76:4d:ea:8b:fd:06:49:c4:36:f2:c2:8e:28:
         b6:7d:bf:89:22:f0:01:0e:25:13:30:c5:b9:70:11:aa:13:1e:
         93:f2:76:a0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwMEUxMTAvBgNVBAUTKDI2QThDODRDMjBEMDJBN0ZDNEFFRURFMTU1QzBCMzFC
MDhFRTdCNjcwHhcNMjYxMDMxMDk1OTExWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWU1YmJlZi0yZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApStYoKkSsWNkAgj50U5/Eew01AzmxW5SYlJnd629CPne2ao9JdcRDBTFdfoq
gPl+XuvA2TBp+bFf17rDkFqQcDsZ5s2F0x2fAXIJEPJN3oM3JLdIk+KuNpV3fZEj
AVFYwC3bgF7FMZjx2fZ6xjSdnm2pocVMihx72zAZUQc7fVqUnoJcXN5V5RQn+UWP
H4VZ2kf/fg70O9XfCOBJzQXahHZJdWhIXXcbJWClmTK7tV8CnBbtK7SciCrPBCBk
bspwPDnpbEB3HPLEQRYSjFAdoftBL2m9WaL3CmKYAT28lUUb4VZqk+Xqlv77vQ6Z
dx5yRxd3VfHffbjWA9hKyg96IwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCLWitu5
SG+GSMe+bRTJspSaJvG6MB8GA1UdIwQYMBaAFCaoyEwg0Cp/xK7t4VXAsxsI7ntn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRS9DNkI1N0M4RThD
OTAxMUVCOTFERTBFN0FDNEY5QUUwMi9KcWpJVENEUUtuX0VydTNoVmNDekd3anVl
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pxaklUQ0RRS25fRXJ1M2hWY0N6R3dqdWUyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0UwMEUvQzZCNTdDOEU4QzkwMTFFQjkxREUwRTdBQzRGOUFFMDIvQjhBMTNGQjRE
NTExMTFGMUJBNEI2N0I1RkM2NUNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5J8MA0GCSqGSIb3DQEBCwUAA4IBAQAEWLLiutRtL7oNkagtzFx8
qJ3cyOm4MdkusD9EKW8Ybj3IOAfSiyZlpbYApIZgSn3EKfSKfoB1M/ZI+oApuQXm
CdqyYOLVlvPImh6XS+GLJw1dGuul72HIn0vso8sZdHUWd8VnkugMbGvzrji7AxfV
NQNA/wA2Zusz/ACv93+VjoZVhOn1NgtQX08jv8vVkkcl8LJAS7VtiKwS+WYuam/H
fUQpKZsl7SE/kHfi/uJWeCDEAki2NmhGx/rprMJDCrGPugPwL5bcm0ubQCVL9Wwo
08G8PN2+5cy0/1fG2nZN6ov9BknENvLCjii2fb+JIvABDiUTMMW5cBGqEx6T8nag
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:28:18 2026 by rpki-client