Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/C43C22501DEF11F1B60466D9163D8C67.roa
File:                     C43C22501DEF11F1B60466D9163D8C67.roa (raw, json)
Hash identifier:          xsIr4KFI9a9YHG0N66oMLWH8AurLcb1F9zQyd9fncF4=
Subject key identifier:   A8:BE:7E:B8:C0:B7:DF:CD:D0:1D:10:4A:7A:74:E7:A4:57:17:A1:6C
Certificate issuer:       /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial:       0BCE
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/C43C22501DEF11F1B60466D9163D8C67.roa
Signing time:             Thu 12 Mar 2026 08:45:05 +0000
ROA not before:           Thu 12 Mar 2026 08:45:05 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     142622
IP address blocks:        103.11.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3022 (0xbce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
        Validity
            Not Before: Mar 12 08:45:05 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69b27d11-818f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:33:8c:74:e9:86:6d:b0:94:05:0f:47:ab:19:
                    76:1b:06:fe:6f:26:a4:74:c6:cb:6a:ef:c9:2d:34:
                    8c:e1:65:2e:f2:bf:07:f9:bd:7c:7c:c5:08:78:6b:
                    35:ef:2a:9c:39:b0:6e:c3:bb:25:66:91:c6:7d:6b:
                    64:4c:39:7f:15:31:f7:d0:0e:06:0c:c2:7b:d2:b7:
                    34:1f:7f:8c:14:b1:cb:fe:6c:e2:ac:4a:b2:55:a2:
                    c0:4b:89:a8:90:1d:fc:81:69:03:22:6a:00:71:2e:
                    60:d0:2b:5c:97:d1:2c:53:1d:33:5b:4a:e2:c1:74:
                    74:7c:40:0a:f4:1f:c0:ce:d5:b7:d0:18:e9:bd:c0:
                    1d:25:a6:9b:a4:fc:f4:2b:9e:2b:8b:76:96:73:bb:
                    dd:39:08:8d:28:81:31:83:90:9d:a2:84:0f:d1:8d:
                    60:48:cd:ef:52:2c:24:2c:c2:17:04:11:bb:a8:cf:
                    bc:1c:3f:93:f0:5e:ab:de:0a:f6:f4:a8:95:7f:48:
                    3d:36:b4:a8:3b:af:f7:e1:c5:50:58:12:7e:9d:1c:
                    9e:aa:a5:7e:56:39:98:99:ee:8b:0d:1e:5e:45:53:
                    fa:76:f9:65:b5:7a:de:0c:1e:af:4d:73:69:d5:e5:
                    e8:a6:f1:0b:f0:cf:1e:8b:10:9e:37:c9:95:f1:46:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BE:7E:B8:C0:B7:DF:CD:D0:1D:10:4A:7A:74:E7:A4:57:17:A1:6C
            X509v3 Authority Key Identifier:
                keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/C43C22501DEF11F1B60466D9163D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:4b:af:a9:00:47:a4:cc:57:20:6f:31:16:09:9b:88:b0:d0:
         a9:70:6e:d8:cf:8f:ca:79:0b:dc:68:63:bc:3f:90:f2:84:13:
         21:dc:85:b6:e9:aa:6e:73:45:14:3e:27:eb:93:03:67:07:e2:
         c7:da:c3:7a:4b:b4:87:85:1a:c4:12:66:02:57:7a:e3:94:d0:
         61:4d:aa:db:98:d5:d7:ea:eb:fa:a4:0b:78:26:c7:07:0c:62:
         7f:41:e0:f2:c9:18:aa:dd:91:ca:8d:6a:70:62:ce:d9:9f:c3:
         5a:ab:ab:d8:8f:d1:2a:50:81:67:c5:7d:b9:10:32:c5:9f:27:
         dd:34:51:55:8e:d8:02:f2:4f:ee:d9:8c:9c:28:64:0c:df:23:
         15:17:d5:a6:8d:4e:3f:25:77:a8:da:5d:d2:75:27:64:86:19:
         cc:ff:c8:40:51:16:fe:2e:a8:9a:12:7b:35:d8:6c:72:ae:cb:
         dc:65:1a:d7:6d:b5:f5:34:fc:36:de:78:ac:e8:16:e6:3d:9b:
         a5:3d:c4:dc:4d:8d:37:79:d8:13:8b:11:f5:d5:b6:2a:44:51:
         d2:5a:df:86:5e:f9:46:49:af:82:eb:5c:27:7c:6f:e2:5a:ff:
         8b:ba:6c:84:8a:f2:a3:1e:2a:d2:1b:27:c8:0e:69:a9:3d:6e:
         97:ef:10:f6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICC84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE
QzhDQzdFMTkwHhcNMjYwMzEyMDg0NTA1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIyN2QxMS04MThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArjOMdOmGbbCUBQ9Hqxl2Gwb+byakdMbLau/JLTSM4WUu8r8H+b18fMUIeGs1
7yqcObBuw7slZpHGfWtkTDl/FTH30A4GDMJ70rc0H3+MFLHL/mzirEqyVaLAS4mo
kB38gWkDImoAcS5g0Ctcl9EsUx0zW0riwXR0fEAK9B/AztW30BjpvcAdJaabpPz0
K54ri3aWc7vdOQiNKIExg5CdooQP0Y1gSM3vUiwkLMIXBBG7qM+8HD+T8F6r3gr2
9KiVf0g9NrSoO6/34cVQWBJ+nRyeqqV+VjmYme6LDR5eRVP6dvlltXreDB6vTXNp
1eXopvEL8M8eixCeN8mV8UYetwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKi+frjA
t9/N0B0QSnp056RXF6FsMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx
NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I3QjIvNDA2NjUwMDg0MTZGMTFFQUI1QzdDQTY1QzRGOUFFMDIvQzQzQzIyNTAx
REVGMTFGMUI2MDQ2NkQ5MTYzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZwvvMA0GCSqGSIb3DQEBCwUAA4IBAQBYS6+pAEekzFcgbzEWCZuI
sNCpcG7Yz4/KeQvcaGO8P5DyhBMh3IW26apuc0UUPifrkwNnB+LH2sN6S7SHhRrE
EmYCV3rjlNBhTarbmNXX6uv6pAt4JscHDGJ/QeDyyRiq3ZHKjWpwYs7Zn8Naq6vY
j9EqUIFnxX25EDLFnyfdNFFVjtgC8k/u2YycKGQM3yMVF9WmjU4/JXeo2l3SdSdk
hhnM/8hAURb+LqiaEns12GxyrsvcZRrXbbX1NPw23nis6BbmPZulPcTcTY03edgT
ixH11bYqRFHSWt+GXvlGSa+C61wnfG/iWv+LumyEivKjHirSGyfIDmmpPW6X7xD2
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:07:45 2026 by rpki-client