Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/F21C48F48AF811ED89B22845C4F9AE02.roa
File:                     F21C48F48AF811ED89B22845C4F9AE02.roa (raw, json)
Hash identifier:          IcH4dg6kk7cde0x2+WG4H/eyPG3lQ7Xkvay29l35ygk=
Subject key identifier:   73:25:3A:2D:61:7C:C6:5E:11:96:B0:67:4F:91:CD:E5:DA:C4:B0:70
Certificate issuer:       /CN=A911BFB0/serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C
Certificate serial:       026D
Authority key identifier: 5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/F21C48F48AF811ED89B22845C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:06:00 +0000
ROA not before:           Thu 24 Jul 2025 17:57:17 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132100
IP address blocks:        103.70.216.0/22 maxlen: 22
                          103.70.216.0/24 maxlen: 24
                          103.70.217.0/24 maxlen: 24
                          103.70.218.0/24 maxlen: 24
                          103.70.219.0/24 maxlen: 24
                          182.255.52.0/22 maxlen: 22
                          182.255.52.0/24 maxlen: 24
                          182.255.53.0/24 maxlen: 24
                          182.255.54.0/24 maxlen: 24
                          182.255.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.crl
                          rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BFB0, serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C
        Validity
            Not Before: Jul 24 17:57:17 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a51ab8-14cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1e:d9:f5:09:50:78:c0:54:a5:13:c3:8c:78:
                    10:6f:ac:03:cc:35:92:e4:58:f9:ae:bb:61:3f:4e:
                    1c:7f:7f:16:56:87:18:c0:a8:79:72:bb:03:44:93:
                    43:69:d1:ec:89:e5:b3:a1:b0:c7:33:c9:51:51:a6:
                    c0:a1:58:9f:68:12:9d:0b:c5:22:4c:6d:32:00:55:
                    88:76:6d:ec:79:28:4e:98:56:06:f1:50:14:e4:a7:
                    84:f3:b1:39:0a:16:e4:10:7b:d9:0d:3f:ad:70:2d:
                    f9:d4:42:19:d8:8e:c4:79:cd:9c:24:c2:6c:38:d2:
                    96:ee:94:d2:93:25:cf:0c:e8:b1:57:c8:f2:d7:45:
                    e6:ea:c1:5f:55:c8:6b:78:0d:0b:64:aa:5c:7a:ef:
                    b1:01:5d:7d:1b:07:6d:85:b7:5b:c1:d0:09:5e:5d:
                    3f:64:dc:6a:e5:b2:1e:b2:96:36:0e:66:fe:e7:e1:
                    4c:05:6f:b6:cc:98:75:43:ce:cf:26:b1:26:6b:0b:
                    8a:eb:38:ad:dd:50:22:9f:b5:f4:70:10:b2:63:d8:
                    c1:2f:14:45:fb:90:6e:5a:c3:1f:ba:fb:44:79:5d:
                    3c:76:fa:c3:81:fa:fd:60:ff:2b:c5:4e:7e:18:43:
                    77:4b:e1:9c:83:c7:ad:d4:56:1f:7a:b6:ef:be:de:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:25:3A:2D:61:7C:C6:5E:11:96:B0:67:4F:91:CD:E5:DA:C4:B0:70
            X509v3 Authority Key Identifier:
                keyid:5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/F21C48F48AF811ED89B22845C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.216.0/22
                  182.255.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:52:3e:ed:e5:f6:5e:3e:bc:39:85:d9:2d:28:05:af:60:b6:
         1c:9b:77:2e:0f:bd:35:d4:79:e6:24:8a:36:f6:14:a6:5d:76:
         b6:e0:96:1b:b5:45:59:2a:99:fe:60:83:70:cf:3f:06:76:26:
         02:9b:92:23:47:d7:18:5a:f7:19:17:d8:29:d5:77:e9:eb:94:
         c6:62:a8:fc:1f:3f:87:1f:6d:a9:6e:d1:28:c3:66:4d:8e:0a:
         db:e7:ba:23:15:88:73:e7:de:cd:40:7f:b9:3e:f8:a9:86:b7:
         14:ce:84:5f:34:81:ef:0f:69:66:34:56:d5:3f:b2:2f:69:cc:
         c7:49:98:88:67:d1:c2:2f:3e:b5:b2:c1:69:93:8c:5a:c5:18:
         06:5c:d6:05:29:79:48:fb:6f:b2:1a:66:7c:ef:74:41:45:cf:
         3c:81:ae:33:26:11:fb:90:b4:e1:ae:61:56:78:e9:14:b5:54:
         50:93:61:77:91:a8:3d:b3:08:70:32:7f:1e:2f:b1:53:4f:fb:
         e2:54:23:46:cf:54:3b:7c:33:7f:4f:e9:fd:77:67:17:90:ea:
         24:66:a5:2b:93:4b:7f:7f:1f:f1:f9:d4:d7:1d:e0:e4:bb:27:
         6b:12:ff:61:f1:f8:42:47:dd:31:64:4a:6d:3a:71:0c:8b:e2:
         90:b3:78:89
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJGQjAxMTAvBgNVBAUTKDVCQUNBNzZBMUQzQTAwRTM1OEZGRTUzMThCOTAyNDk4
ODAwRDgyNkMwHhcNMjUwNzI0MTc1NzE3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MWFiOC0xNGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlh7Z9QlQeMBUpRPDjHgQb6wDzDWS5Fj5rrthP04cf38WVocYwKh5crsDRJND
adHsieWzobDHM8lRUabAoVifaBKdC8UiTG0yAFWIdm3seShOmFYG8VAU5KeE87E5
ChbkEHvZDT+tcC351EIZ2I7Eec2cJMJsONKW7pTSkyXPDOixV8jy10Xm6sFfVchr
eA0LZKpceu+xAV19GwdthbdbwdAJXl0/ZNxq5bIespY2Dmb+5+FMBW+2zJh1Q87P
JrEmawuK6zit3VAin7X0cBCyY9jBLxRF+5BuWsMfuvtEeV08dvrDgfr9YP8rxU5+
GEN3S+Gcg8et1FYferbvvt6U5wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHMlOi1h
fMZeEZawZ0+RzeXaxLBwMB8GA1UdIwQYMBaAFFusp2odOgDjWP/lMYuQJJiADYJs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkZCMC8yMkMyNTE0NjZD
QzIxMUU5QTBENkFGNjdDNEY5QUUwMi9XNnluYWgwNkFPTllfLVV4aTVBa21JQU5n
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c2eW5haDA2QU9OWV8tVXhpNUFrbUlBTmdtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJGQjAvMjJDMjUxNDY2Q0MyMTFFOUEwRDZBRjY3QzRGOUFFMDIvRjIxQzQ4RjQ4
QUY4MTFFRDg5QjIyODQ1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ0bYAwQCtv80MA0GCSqGSIb3DQEBCwUAA4IBAQCUUj7t5fZePrw5
hdktKAWvYLYcm3cuD7011HnmJIo29hSmXXa24JYbtUVZKpn+YINwzz8GdiYCm5Ij
R9cYWvcZF9gp1Xfp65TGYqj8Hz+HH22pbtEow2ZNjgrb57ojFYhz597NQH+5Pvip
hrcUzoRfNIHvD2lmNFbVP7IvaczHSZiIZ9HCLz61ssFpk4xaxRgGXNYFKXlI+2+y
GmZ873RBRc88ga4zJhH7kLThrmFWeOkUtVRQk2F3kag9swhwMn8eL7FTT/viVCNG
z1Q7fDN/T+n9d2cXkOokZqUrk0t/fx/x+dTXHeDkuydrEv9h8fhCR90xZEptOnEM
i+KQs3iJ
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:09 2026 by rpki-client