Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/F80BF07C107B11ED9B3C5410C4F9AE02.roa
File:                     F80BF07C107B11ED9B3C5410C4F9AE02.roa (raw, json)
Hash identifier:          xwuBUsXePKpvMYj/ZZ+LZ8VttYRBb2/xivwKeGbI3bE=
Subject key identifier:   FB:74:48:9C:17:A9:FC:72:7C:EE:0E:A7:42:42:C4:1B:46:5F:41:DF
Certificate issuer:       /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Certificate serial:       0311
Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/F80BF07C107B11ED9B3C5410C4F9AE02.roa
Signing time:             Thu 19 Mar 2026 01:34:18 +0000
ROA not before:           Thu 19 Mar 2026 01:34:18 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     133929
IP address blocks:        103.165.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
                          rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
        Validity
            Not Before: Mar 19 01:34:18 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69bb529a-c055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:f8:08:56:b1:ac:df:45:f5:3c:be:d8:31:
                    83:68:20:2b:15:d5:9e:e7:93:f8:eb:e9:6c:e6:4f:
                    39:ab:49:af:a5:52:81:c0:ae:b6:3b:9b:e6:9f:6d:
                    57:80:ef:d5:43:7a:e9:58:0d:b4:ad:07:44:be:a3:
                    00:ba:28:2d:fd:1f:31:99:d6:55:1c:12:3d:47:67:
                    f4:9d:e0:c8:1a:d0:2b:00:26:24:e0:87:cd:ac:98:
                    6e:31:6f:e5:40:b9:13:31:3e:73:0e:d5:0b:2e:33:
                    56:ca:7c:a6:64:c9:5b:8d:b3:d0:bf:b7:06:04:cc:
                    fb:ef:6f:6c:17:fc:27:02:1f:ae:ae:6a:52:66:41:
                    b1:ec:17:b4:fb:52:c3:d6:4b:ed:1a:c7:c6:a0:f2:
                    45:9d:72:29:46:35:c9:95:fc:62:3b:38:26:19:fc:
                    85:22:9e:25:aa:29:c4:ea:79:f0:d9:bb:ed:74:de:
                    03:f2:24:45:8c:e8:53:28:26:64:66:fe:5d:a3:4b:
                    55:31:70:b1:86:24:b1:33:f3:d2:6c:45:98:58:74:
                    cb:c6:2e:87:c1:48:7a:25:df:de:ae:15:44:56:6c:
                    05:7d:5c:9b:be:41:b9:55:24:9b:44:47:2f:26:41:
                    9c:ab:81:38:0a:55:e2:2d:59:0d:9b:a4:1f:3a:b1:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:74:48:9C:17:A9:FC:72:7C:EE:0E:A7:42:42:C4:1B:46:5F:41:DF
            X509v3 Authority Key Identifier:
                keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/F80BF07C107B11ED9B3C5410C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:4a:5f:81:9e:7d:7d:e0:9e:87:14:37:53:9d:e9:74:6c:a4:
         1f:c9:5f:9c:20:1e:8c:1c:26:79:c3:5b:5c:a5:76:5c:c0:1c:
         b2:99:6d:f9:1d:b0:97:2a:ff:07:24:e2:9a:ec:8d:c6:79:9b:
         c3:d3:03:ab:09:5b:51:fa:45:5e:b0:d0:44:b5:dc:35:2e:c6:
         0a:fc:16:e3:e2:9f:ee:78:ea:fd:a7:90:a6:36:be:f5:40:f8:
         56:c4:15:3e:6f:c2:e7:1e:42:2f:b8:0e:43:09:e1:bf:56:0a:
         75:7f:12:f6:52:b8:4e:c0:40:b2:7b:39:aa:a9:6c:30:bc:24:
         36:66:6b:ca:40:bb:8e:90:b3:af:35:05:04:e5:7d:01:64:bf:
         9b:8c:0c:99:4f:fa:a2:3d:ac:9c:0d:7c:8c:c3:2a:0a:66:8d:
         7b:88:42:ab:ec:6f:b4:f8:ce:e8:ce:8b:90:ec:84:f0:b7:47:
         8c:a0:a0:d9:b1:12:1f:27:c2:b0:e7:de:8d:f3:a8:55:03:49:
         80:b9:05:d8:ee:5c:ab:42:13:f8:9e:44:e9:c4:45:ba:a5:bf:
         53:fb:bb:34:56:a5:35:16:a1:2c:a4:fa:2a:0c:45:de:5a:53:
         62:dd:94:41:29:ab:7a:97:ce:31:b4:4d:2c:ce:73:2f:f1:c4:
         56:86:e4:81
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx
QTYzNjE3QzcwHhcNMjYwMzE5MDEzNDE4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJiNTI5YS1jMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1VH4CFaxrN9F9Ty+2DGDaCArFdWe55P46+ls5k85q0mvpVKBwK62O5vmn21X
gO/VQ3rpWA20rQdEvqMAuigt/R8xmdZVHBI9R2f0neDIGtArACYk4IfNrJhuMW/l
QLkTMT5zDtULLjNWynymZMlbjbPQv7cGBMz7729sF/wnAh+urmpSZkGx7Be0+1LD
1kvtGsfGoPJFnXIpRjXJlfxiOzgmGfyFIp4lqinE6nnw2bvtdN4D8iRFjOhTKCZk
Zv5do0tVMXCxhiSxM/PSbEWYWHTLxi6HwUh6Jd/erhVEVmwFfVybvkG5VSSbREcv
JkGcq4E4ClXiLVkNm6QfOrEEdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPt0SJwX
qfxyfO4Op0JCxBtGX0HfMB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG
RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NThEQzYvNEEwMTIyN0MwRkY0MTFFREE4QjFGQTIwQzRGOUFFMDIvRjgwQkYwN0Mx
MDdCMTFFRDlCM0M1NDEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6URMA0GCSqGSIb3DQEBCwUAA4IBAQCXSl+Bnn194J6HFDdTnel0
bKQfyV+cIB6MHCZ5w1tcpXZcwByymW35HbCXKv8HJOKa7I3GeZvD0wOrCVtR+kVe
sNBEtdw1LsYK/Bbj4p/ueOr9p5CmNr71QPhWxBU+b8LnHkIvuA5DCeG/Vgp1fxL2
UrhOwECyezmqqWwwvCQ2ZmvKQLuOkLOvNQUE5X0BZL+bjAyZT/qiPaycDXyMwyoK
Zo17iEKr7G+0+M7ozouQ7ITwt0eMoKDZsRIfJ8Kw596N86hVA0mAuQXY7lyrQhP4
nkTpxEW6pb9T+7s0VqU1FqEspPoqDEXeWlNi3ZRBKat6l84xtE0sznMv8cRWhuSB
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:29 2026 by rpki-client