Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa
File:                     FAB56D7E154711F1A1427AB42F3D8C67.roa (raw, json)
Hash identifier:          XQL75+py8gyPYwB7NS3YOvOj6Z0ixaWmfV1k8DLv7QY=
Subject key identifier:   B8:A3:7C:12:91:94:EB:20:DD:3E:45:8B:F9:29:14:CF:59:50:3A:2B
Certificate issuer:       /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Certificate serial:       057D
Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa
Signing time:             Sun 01 Mar 2026 12:42:28 +0000
ROA not before:           Sun 01 Mar 2026 08:23:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139716
IP address blocks:        103.172.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
                          rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
        Validity
            Not Before: Mar  1 08:23:52 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a43434-4379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:e8:19:56:d6:2f:d5:53:cb:fd:41:d7:9c:
                    a1:82:c1:19:00:6d:ac:81:be:34:2c:44:83:6d:73:
                    5c:22:6c:d7:86:dc:af:fb:df:66:8a:10:cf:e1:3a:
                    b9:99:96:de:3c:c3:37:3c:f4:20:7f:04:2b:db:4e:
                    cd:e1:88:75:f9:4e:90:c5:9d:ae:a6:48:cb:ce:2c:
                    40:36:16:0f:5f:98:c3:84:48:10:fb:af:22:71:36:
                    d8:20:d1:4e:41:c9:87:f8:4d:d1:c3:45:b9:55:b3:
                    71:f3:f0:35:5a:46:04:f0:39:32:af:12:a4:ef:2b:
                    3b:eb:4a:65:66:33:e8:1f:2c:77:2c:a9:34:68:b0:
                    55:41:fb:2a:07:38:7b:f6:a2:65:96:bc:5c:21:3f:
                    0a:29:c0:7f:0c:c9:48:b5:15:c1:dd:62:46:7d:f7:
                    18:62:2a:8a:49:a1:f1:8c:b1:dd:1b:28:4e:12:06:
                    5c:cf:4a:1d:9a:47:8f:37:93:e5:2c:26:d0:aa:15:
                    32:f2:ee:e9:55:77:34:7d:3a:1c:36:ac:44:6c:d3:
                    44:04:f6:a3:66:92:97:ee:c2:8f:95:5f:ee:b0:3a:
                    9d:58:ba:10:6d:d7:2e:8b:18:13:4c:02:fa:f5:e1:
                    ca:96:c9:07:3c:90:aa:95:10:36:67:2d:09:c3:ad:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A3:7C:12:91:94:EB:20:DD:3E:45:8B:F9:29:14:CF:59:50:3A:2B
            X509v3 Authority Key Identifier:
                keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:56:ef:91:8f:a3:bc:86:ca:02:94:fd:15:21:16:33:dd:10:
         70:16:5e:7f:95:41:af:db:db:34:32:08:21:51:6b:de:de:9e:
         28:54:7c:50:29:f0:eb:39:5a:6b:eb:a8:61:e6:c6:14:96:95:
         09:f5:c6:f6:fe:8b:08:7c:30:db:c7:65:e2:e9:25:f5:08:66:
         49:0f:1b:db:7c:d5:c2:28:af:1a:13:4c:85:84:ef:69:57:cd:
         f4:b0:b2:fe:3e:2e:1d:00:44:f7:97:c2:e8:e3:92:3c:8b:3e:
         a8:ca:9f:5c:e3:6b:80:f3:68:4c:9f:5c:49:2a:1f:85:6f:27:
         e7:74:3c:ad:51:82:bb:c1:df:1d:74:a8:18:8c:ff:1e:ae:6a:
         50:dd:be:c8:f0:ae:c3:4c:67:4c:af:56:c7:e4:0a:6c:7a:5d:
         b8:80:c7:e6:89:ec:4f:c0:66:ec:f8:96:5a:43:76:be:10:da:
         51:86:59:8d:0a:86:f1:b0:ad:1b:5d:bb:bd:d7:16:44:13:e9:
         ed:7e:93:b7:44:20:ac:b7:ee:8a:a5:d7:7d:8d:3b:61:b3:b5:
         c7:2e:4e:89:da:db:7a:36:e5:a6:a6:9d:32:a7:3c:31:d9:4e:
         75:53:5d:6c:10:6f:36:4f:ec:04:f7:e7:78:db:ae:d8:26:ed:
         2c:fe:21:50
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE3RDYxMTAvBgNVBAUTKEIyN0FFQzUzRkZCQUIyRjVCNUJDMENCNDdDMDg3MDZE
NTA1MzMyMTAwHhcNMjYwMzAxMDgyMzUyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzQzNC00Mzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuzoGVbWL9VTy/1B15yhgsEZAG2sgb40LESDbXNcImzXhtyv+99mihDP4Tq5
mZbePMM3PPQgfwQr207N4Yh1+U6QxZ2upkjLzixANhYPX5jDhEgQ+68icTbYINFO
QcmH+E3Rw0W5VbNx8/A1WkYE8DkyrxKk7ys760plZjPoHyx3LKk0aLBVQfsqBzh7
9qJllrxcIT8KKcB/DMlItRXB3WJGffcYYiqKSaHxjLHdGyhOEgZcz0odmkePN5Pl
LCbQqhUy8u7pVXc0fTocNqxEbNNEBPajZpKX7sKPlV/usDqdWLoQbdcuixgTTAL6
9eHKlskHPJCqlRA2Zy0Jw61ZrwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLijfBKR
lOsg3T5Fi/kpFM9ZUDorMB8GA1UdIwQYMBaAFLJ67FP/urL1tbwMtHwIcG1QUzIQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTdENi9ERDhFNTcyNDFF
OUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2VzF2QXkwZkFod2JWQlRN
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NucnNVXy02c3ZXMXZBeTBmQWh3YlZCVE1oQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE3RDYvREQ4RTU3MjQxRTlEMTFFQzlDMkI5RjRBQzRGOUFFMDIvRkFCNTZEN0Ux
NTQ3MTFGMUExNDI3QUI0MkYzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6ykMA0GCSqGSIb3DQEBCwUAA4IBAQCJVu+Rj6O8hsoClP0VIRYz
3RBwFl5/lUGv29s0MgghUWve3p4oVHxQKfDrOVpr66hh5sYUlpUJ9cb2/osIfDDb
x2Xi6SX1CGZJDxvbfNXCKK8aE0yFhO9pV830sLL+Pi4dAET3l8Lo45I8iz6oyp9c
42uA82hMn1xJKh+FbyfndDytUYK7wd8ddKgYjP8ermpQ3b7I8K7DTGdMr1bH5Aps
el24gMfmiexPwGbs+JZaQ3a+ENpRhlmNCobxsK0bXbu91xZEE+ntfpO3RCCst+6K
pdd9jTths7XHLk6J2tt6NuWmpp0ypzwx2U51U11sEG82T+wE9+d4267YJu0s/iFQ
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:03 2026 by rpki-client