Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3DF6459A772511EEA2E37420C4F9AE02.roa
File:                     3DF6459A772511EEA2E37420C4F9AE02.roa (raw, json)
Hash identifier:          wtmuHnFK2qYyBuP8+t+q2ozRUGymMFacY7+KrbbFs5o=
Subject key identifier:   2B:9E:45:CE:FE:0A:9A:29:DD:95:11:D3:C3:15:6D:19:06:5B:CA:FA
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       01DC
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3DF6459A772511EEA2E37420C4F9AE02.roa
Signing time:             Sun 05 Apr 2026 03:37:56 +0000
ROA not before:           Sun 05 Apr 2026 03:37:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151049
IP address blocks:        103.121.64.0/23 maxlen: 23
                          103.121.64.0/24 maxlen: 24
                          103.121.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: Apr  5 03:37:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d1d914-787f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:d2:ad:d4:07:8c:3f:47:e2:a5:46:7a:9a:
                    22:3a:87:0e:c2:70:85:b0:7f:2a:2f:20:e6:52:0f:
                    bf:5b:ea:a1:44:39:bd:82:d8:15:77:ae:77:01:4c:
                    31:e4:a6:f8:de:4b:9b:03:33:f6:fd:95:86:98:6c:
                    a5:1f:80:a7:15:e0:3f:fd:31:4d:8e:12:e8:89:59:
                    6f:93:88:91:a6:40:1c:50:08:4c:12:30:f2:1d:b7:
                    2e:49:cb:e1:8c:ad:94:8d:81:a5:71:46:e0:aa:6c:
                    6c:a9:9d:36:2d:b9:6e:66:64:0c:9f:e7:dd:9e:1b:
                    e5:5c:ec:57:b9:e9:a8:e5:a2:2b:bf:ad:70:1a:d7:
                    bc:76:99:1d:f0:da:97:77:50:97:3c:41:2c:07:e7:
                    b6:22:67:ac:00:90:a0:37:dc:57:83:c7:a7:e2:79:
                    d0:20:b8:ed:b3:bd:e9:86:04:14:aa:0c:d8:e4:5a:
                    4c:9d:9a:b6:fd:88:2b:a3:19:10:4f:12:f1:11:4c:
                    65:e9:44:d1:55:40:ff:bc:94:9e:11:df:33:b5:3e:
                    46:8b:7c:63:ab:aa:ad:79:54:5b:64:97:69:f1:44:
                    89:96:e4:d5:03:46:dd:04:e4:e3:23:6c:30:a0:e6:
                    8e:1d:01:a1:77:a7:53:a9:6a:72:79:97:6a:94:d3:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9E:45:CE:FE:0A:9A:29:DD:95:11:D3:C3:15:6D:19:06:5B:CA:FA
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3DF6459A772511EEA2E37420C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:da:dc:df:86:4e:9a:d1:77:41:7b:db:51:50:52:ff:0a:df:
         2f:78:d9:4a:63:5a:ed:6b:7b:92:e6:01:32:59:62:1b:f5:ba:
         59:83:fd:58:71:8f:67:09:d4:6d:c6:7a:83:84:e6:67:65:5c:
         9e:79:20:af:bb:2c:c5:77:47:40:c4:52:33:9f:48:16:84:36:
         16:a4:c8:1b:76:02:ee:c9:41:5e:07:0a:2b:04:0b:e0:d1:d6:
         d8:80:b7:f7:02:43:cb:aa:e4:de:f1:bf:96:e7:f3:ca:f6:d8:
         ab:b7:39:81:ca:dc:eb:2f:a7:c0:99:53:f0:25:0d:7d:f5:e8:
         7d:86:89:ff:c1:1f:4c:70:83:d3:e8:5a:a9:c9:58:51:8c:80:
         5d:96:08:13:6a:e0:3b:00:0c:d1:19:a9:4b:a5:29:99:da:a2:
         de:00:ff:1d:69:ae:78:83:46:e0:99:63:0d:98:dc:ca:22:45:
         78:47:f5:de:4c:34:94:23:0e:4a:57:88:2a:9d:58:0e:5c:f8:
         65:ca:c2:d1:7c:5c:5b:ff:6c:67:61:44:95:83:4b:cc:32:3a:
         c0:9f:cc:09:d8:aa:23:95:ee:79:bb:88:07:7e:c9:41:33:64:
         96:a9:37:8e:ef:47:17:38:fd:21:79:36:28:90:17:fb:d7:67:
         c5:bf:c6:3f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC
QjZGMUVCRjEwHhcNMjYwNDA1MDMzNzU2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQxZDkxNC03ODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvtHSrdQHjD9H4qVGepoiOocOwnCFsH8qLyDmUg+/W+qhRDm9gtgVd653AUwx
5Kb43kubAzP2/ZWGmGylH4CnFeA//TFNjhLoiVlvk4iRpkAcUAhMEjDyHbcuScvh
jK2UjYGlcUbgqmxsqZ02LbluZmQMn+fdnhvlXOxXuemo5aIrv61wGte8dpkd8NqX
d1CXPEEsB+e2ImesAJCgN9xXg8en4nnQILjts73phgQUqgzY5FpMnZq2/YgroxkQ
TxLxEUxl6UTRVUD/vJSeEd8ztT5Gi3xjq6qteVRbZJdp8USJluTVA0bdBOTjI2ww
oOaOHQGhd6dTqWpyeZdqlNNR9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCueRc7+
Cpop3ZUR08MVbRkGW8r6MB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3
MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEE1NkEvMjZGQTE4MTg3NzI0MTFFRUExNjc0RTFGQzRGOUFFMDIvM0RGNjQ1OUE3
NzI1MTFFRUEyRTM3NDIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ3lAMA0GCSqGSIb3DQEBCwUAA4IBAQBv2tzfhk6a0XdBe9tRUFL/
Ct8veNlKY1rta3uS5gEyWWIb9bpZg/1YcY9nCdRtxnqDhOZnZVyeeSCvuyzFd0dA
xFIzn0gWhDYWpMgbdgLuyUFeBworBAvg0dbYgLf3AkPLquTe8b+W5/PK9tirtzmB
ytzrL6fAmVPwJQ199eh9hon/wR9McIPT6FqpyVhRjIBdlggTauA7AAzRGalLpSmZ
2qLeAP8daa54g0bgmWMNmNzKIkV4R/XeTDSUIw5KV4gqnVgOXPhlysLRfFxb/2xn
YUSVg0vMMjrAn8wJ2Kojle55u4gHfslBM2SWqTeO70cXOP0heTYokBf712fFv8Y/
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:08:41 2026 by rpki-client