Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa
File:                     C664689AE0F511EABB96D531C4F9AE02.roa (raw, json)
Hash identifier:          IuNSCN6yrNlc/0wSwd/g4xZGin/ZqKczpvImaghk0B4=
Subject key identifier:   79:E1:5C:AD:9B:2E:35:4A:5C:D8:23:05:46:A5:A8:05:73:DF:D5:34
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       08B7
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:02:50 +0000
ROA not before:           Fri 18 Apr 2025 21:23:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.152.248.0/24 maxlen: 24
                          103.152.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231 (0x8b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Apr 18 21:23:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4632a-2d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:46:c2:c9:db:8d:60:06:19:a9:0a:1d:f8:
                    a0:6f:b6:ad:36:ce:18:c5:ae:9d:b9:bc:8a:6f:c8:
                    9e:38:48:0e:ef:2d:27:fe:b8:7b:60:0d:7d:0a:8d:
                    d8:ac:87:74:bd:e6:24:dc:aa:80:4f:cb:00:64:45:
                    2a:bb:66:b3:a9:48:80:39:ed:6c:ba:66:29:1f:61:
                    66:da:cb:b1:c5:85:a7:15:79:56:0b:a3:8c:5a:79:
                    d3:8b:99:c9:45:65:42:94:6f:a5:e4:01:50:a1:87:
                    a9:de:09:e7:51:a9:b8:16:28:3c:8f:93:1b:8d:b7:
                    df:c3:2d:55:4f:42:e8:79:5b:95:5c:a7:2e:44:52:
                    cb:6a:5c:7e:e0:4f:71:1d:94:0c:fd:30:b0:f2:16:
                    86:72:17:9c:e8:94:d0:7f:ae:1e:65:14:76:cc:77:
                    e5:1b:29:0c:cf:35:ba:a0:5b:11:db:c3:d4:11:db:
                    65:60:89:83:2f:1d:25:12:0e:35:8e:0c:97:50:27:
                    9f:74:61:2f:58:8f:f2:c0:46:53:c7:5a:b6:22:97:
                    80:d2:62:86:11:b1:f6:72:e9:29:88:5b:f1:9d:94:
                    52:2d:e2:08:1d:ba:c7:6d:a6:57:85:b3:a2:11:78:
                    e7:53:e4:d1:48:56:5a:8e:59:ba:fb:51:7f:35:4c:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E1:5C:AD:9B:2E:35:4A:5C:D8:23:05:46:A5:A8:05:73:DF:D5:34
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:48:49:a3:e1:ec:e1:51:eb:76:51:61:86:c4:27:6a:ce:49:
         06:4a:f7:0d:12:84:a9:7b:b0:b2:e7:bd:ff:bd:ef:85:74:a7:
         9e:62:b5:4e:3f:1f:9e:21:6e:a7:27:29:73:f2:b9:c6:06:de:
         d5:fd:43:33:f7:c2:cd:7a:43:fc:73:b5:df:ce:21:91:3e:8f:
         83:f5:fe:07:87:5e:bb:49:bf:fa:91:c2:00:57:e4:50:e8:b3:
         f9:6d:a5:6c:45:f5:a9:2a:db:d9:7d:63:fa:7b:c8:d4:b4:87:
         2c:7c:21:f7:7e:3c:7c:3d:a2:ef:65:52:1b:89:19:e3:e4:09:
         ea:bc:f6:ea:20:e8:5e:d1:d5:c9:d0:17:04:c0:64:f7:73:bb:
         67:a1:b1:fd:24:dc:64:ae:e9:b5:a6:f9:2b:5c:09:b6:3e:6c:
         62:0c:01:a2:1a:2a:ec:77:94:7c:ef:70:2b:2a:b9:13:76:7f:
         81:db:19:f1:9f:37:26:34:83:24:6b:37:fc:10:32:ca:93:87:
         15:33:1d:87:cc:bf:a4:6b:61:4d:bf:b0:07:b4:f7:9f:ee:77:
         46:2f:46:51:6d:5e:46:83:76:e9:b1:00:0e:a3:ae:f0:77:b4:
         e8:65:4b:22:ef:5c:1c:0d:96:48:7e:e9:fb:a3:48:1e:5e:62:
         5b:bc:9d:46
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2
OTQ5RUJFQzIwHhcNMjUwNDE4MjEyMzQwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjMyYS0yZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2TtGwsnbjWAGGakKHfigb7atNs4Yxa6dubyKb8ieOEgO7y0n/rh7YA19Co3Y
rId0veYk3KqAT8sAZEUqu2azqUiAOe1sumYpH2Fm2suxxYWnFXlWC6OMWnnTi5nJ
RWVClG+l5AFQoYep3gnnUam4Fig8j5Mbjbffwy1VT0LoeVuVXKcuRFLLalx+4E9x
HZQM/TCw8haGchec6JTQf64eZRR2zHflGykMzzW6oFsR28PUEdtlYImDLx0lEg41
jgyXUCefdGEvWI/ywEZTx1q2IpeA0mKGEbH2cukpiFvxnZRSLeIIHbrHbaZXhbOi
EXjnU+TRSFZajlm6+1F/NUywgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHnhXK2b
LjVKXNgjBUalqAVz39U0MB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE
RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEJGRTUvOURBRjQ4NkVEREVCMTFFQUIzMEVEOTIxQzRGOUFFMDIvQzY2NDY4OUFF
MEY1MTFFQUJCOTZENTMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5j4MA0GCSqGSIb3DQEBCwUAA4IBAQBaSEmj4ezhUet2UWGGxCdq
zkkGSvcNEoSpe7Cy573/ve+FdKeeYrVOPx+eIW6nJylz8rnGBt7V/UMz98LNekP8
c7XfziGRPo+D9f4Hh167Sb/6kcIAV+RQ6LP5baVsRfWpKtvZfWP6e8jUtIcsfCH3
fjx8PaLvZVIbiRnj5AnqvPbqIOhe0dXJ0BcEwGT3c7tnobH9JNxkrum1pvkrXAm2
PmxiDAGiGirsd5R873ArKrkTdn+B2xnxnzcmNIMkazf8EDLKk4cVMx2HzL+ka2FN
v7AHtPef7ndGL0ZRbV5Gg3bpsQAOo67wd7ToZUsi71wcDZZIfun7o0geXmJbvJ1G
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:25:10 2026 by rpki-client