Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/2569C82ADC2311F08AE4CDD5626F56BC.roa
File:                     2569C82ADC2311F08AE4CDD5626F56BC.roa (raw, json)
Hash identifier:          +GvRnx4kGmdGhgUa7+g7/7rbplkPi3N501wiLsGfa8A=
Subject key identifier:   B7:33:DD:05:53:F0:60:67:F7:18:E4:AD:61:87:E4:53:EC:BB:F7:01
Certificate issuer:       /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial:       0F46
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/2569C82ADC2311F08AE4CDD5626F56BC.roa
Signing time:             Thu 30 Apr 2026 18:22:06 +0000
ROA not before:           Thu 30 Apr 2026 18:22:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.159.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3910 (0xf46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
        Validity
            Not Before: Apr 30 18:22:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f39dce-c266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:f2:bc:5b:2a:ec:49:83:3e:94:9d:3a:29:
                    2d:79:99:f6:2d:75:c7:69:cd:eb:de:34:13:59:65:
                    ed:9a:ee:ff:de:9a:f8:ab:7b:a5:d3:e7:76:f7:77:
                    5c:1c:58:d5:77:60:2d:f9:a4:10:c4:c1:78:a9:6e:
                    b2:a9:32:39:b0:f3:b8:2a:2a:6e:b9:b7:d6:52:a0:
                    76:75:51:85:0b:4b:b7:1b:c3:48:64:f4:f5:12:77:
                    c6:97:da:da:ee:ef:81:50:97:44:cd:14:95:45:93:
                    1c:2c:64:f9:17:f7:e2:0c:0c:e1:42:97:97:34:1a:
                    fb:02:7d:71:ad:20:a9:e8:75:0d:ad:e2:6d:d6:76:
                    a0:5b:20:96:4b:ba:e2:c4:ed:c9:e1:e4:8d:a0:b9:
                    74:41:cd:08:78:44:d7:ef:05:78:ef:82:a5:83:d3:
                    9e:99:e2:34:4d:b1:49:f8:93:13:17:ba:d0:c2:aa:
                    89:51:12:e4:ad:b7:56:d7:e1:c5:f8:ad:09:fe:8d:
                    25:e3:2b:cd:be:6f:bb:8d:61:5b:51:35:ed:65:d8:
                    09:94:91:2e:14:ed:5a:d9:91:3d:d6:4a:fe:5b:62:
                    e8:b5:ec:10:ee:1c:2d:25:1d:1c:c8:63:97:eb:c4:
                    5b:40:57:03:e7:ae:87:d5:4c:56:8f:78:2f:3a:df:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:33:DD:05:53:F0:60:67:F7:18:E4:AD:61:87:E4:53:EC:BB:F7:01
            X509v3 Authority Key Identifier:
                keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/2569C82ADC2311F08AE4CDD5626F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:bb:db:13:27:9b:bf:85:e3:95:36:63:34:4a:59:15:7f:5f:
         bb:7b:15:24:80:63:32:86:15:92:80:90:2e:8c:06:3c:1e:f2:
         25:25:72:73:39:01:6b:68:63:f0:b3:8f:42:e2:12:d5:2b:13:
         de:a7:b5:5a:dc:48:d1:03:33:04:90:3f:d2:2f:22:33:50:ad:
         66:f6:20:0d:f8:6e:3d:5e:5b:9d:8c:da:e4:46:5e:39:26:69:
         f1:6b:db:5a:64:86:bb:58:c9:97:2a:f2:d8:48:53:7c:f5:07:
         73:7c:d3:f5:8d:d9:d1:a3:85:a3:18:c7:b1:9b:6f:7d:06:59:
         bb:fb:ce:12:26:42:7f:42:4e:c6:88:a5:ec:e6:00:32:34:33:
         71:79:b0:67:31:4d:c7:ef:bc:de:ab:9a:47:21:5c:db:b0:d4:
         01:f6:74:28:3e:51:ba:8b:14:e5:c8:ff:31:37:c7:f6:66:66:
         d9:d3:79:c6:2c:70:50:33:10:2a:99:10:5e:9a:8f:0f:8c:47:
         2c:80:23:92:7d:b5:5d:d8:70:b0:ee:95:53:8f:10:18:aa:eb:
         10:68:f8:35:72:0c:7b:6c:01:b8:8d:26:c3:50:77:bd:29:7d:
         6c:95:9e:d5:e5:b6:d0:00:27:81:c6:c0:da:ec:5f:0e:32:e4:
         f7:26:b7:44
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICD0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4
OTVGQzQ3REUwHhcNMjYwNDMwMTgyMjA2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYzOWRjZS1jMjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsvTyvFsq7EmDPpSdOikteZn2LXXHac3r3jQTWWXtmu7/3pr4q3ul0+d293dc
HFjVd2At+aQQxMF4qW6yqTI5sPO4KipuubfWUqB2dVGFC0u3G8NIZPT1EnfGl9ra
7u+BUJdEzRSVRZMcLGT5F/fiDAzhQpeXNBr7An1xrSCp6HUNreJt1nagWyCWS7ri
xO3J4eSNoLl0Qc0IeETX7wV474Klg9OemeI0TbFJ+JMTF7rQwqqJURLkrbdW1+HF
+K0J/o0l4yvNvm+7jWFbUTXtZdgJlJEuFO1a2ZE91kr+W2LotewQ7hwtJR0cyGOX
68RbQFcD566H1UxWj3gvOt/SKQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLcz3QVT
8GBn9xjkrWGH5FPsu/cBMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD
MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS
OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjY5OEUvRjE5QTdDOTQ5QzFDMTFFOTkyRkFGQjFCQzRGOUFFMDIvMjU2OUM4MkFE
QzIzMTFGMDhBRTRDREQ1NjI2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ59QMA0GCSqGSIb3DQEBCwUAA4IBAQAcu9sTJ5u/heOVNmM0SlkV
f1+7exUkgGMyhhWSgJAujAY8HvIlJXJzOQFraGPws49C4hLVKxPep7Va3EjRAzME
kD/SLyIzUK1m9iAN+G49XludjNrkRl45Jmnxa9taZIa7WMmXKvLYSFN89QdzfNP1
jdnRo4WjGMexm299Blm7+84SJkJ/Qk7GiKXs5gAyNDNxebBnMU3H77zeq5pHIVzb
sNQB9nQoPlG6ixTlyP8xN8f2ZmbZ03nGLHBQMxAqmRBemo8PjEcsgCOSfbVd2HCw
7pVTjxAYqusQaPg1cgx7bAG4jSbDUHe9KX1slZ7V5bbQACeBxsDa7F8OMuT3JrdE
-----END CERTIFICATE-----
Generated at Wed May 13 07:30:59 2026 by rpki-client