Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/791CD4FEFAE511F0B461E4A0696F56BC.roa
File:                     791CD4FEFAE511F0B461E4A0696F56BC.roa (raw, json)
Hash identifier:          nkx43CRHYNhsKmR2UchTww3j8r3WylsKbynVxRoROSc=
Subject key identifier:   5D:29:3A:43:36:5D:EA:DE:11:59:5A:6A:80:4F:6F:AA:30:D9:72:A9
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       0407
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/791CD4FEFAE511F0B461E4A0696F56BC.roa
Signing time:             Sun 01 Mar 2026 15:03:58 +0000
ROA not before:           Mon 26 Jan 2026 18:33:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58682
IP address blocks:        103.185.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031 (0x407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Jan 26 18:33:14 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4555e-bc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:ef:b9:a1:77:47:29:c9:8d:ba:36:d0:98:
                    ec:42:7c:e3:3c:2c:d1:2c:b4:90:90:12:20:68:cb:
                    5b:ef:d3:61:28:aa:a1:8f:0c:2b:b7:93:72:c9:05:
                    ad:2b:2c:e4:2d:47:27:3a:6a:e3:d0:9d:f2:27:ac:
                    b8:4e:2e:6d:2b:f0:fb:3d:db:01:69:f0:db:d8:3a:
                    7d:3b:94:a8:f0:d1:fc:f9:65:27:8d:99:a3:94:af:
                    d0:01:50:31:a9:d0:0f:e7:6b:25:df:47:dc:a5:5a:
                    5c:4f:9c:3a:46:5f:dd:11:a7:10:94:1e:a0:f8:72:
                    7e:5b:68:0d:9d:39:bc:1e:6e:49:6d:3f:05:34:b6:
                    30:5d:05:f0:04:76:cc:c2:3f:03:eb:d4:ac:a0:9d:
                    97:25:7e:95:f4:73:f6:85:55:7d:82:48:d7:3d:0e:
                    4c:57:cb:5e:34:3a:40:bf:a1:8f:43:f6:96:8e:b4:
                    12:c6:96:d1:3e:b4:32:67:48:96:38:fa:77:65:40:
                    01:a7:de:50:77:8b:55:fc:81:f3:6f:ea:c8:e8:1c:
                    7b:1a:51:36:e6:46:5a:a3:18:9f:59:70:e7:b7:82:
                    e5:7c:a0:cb:01:5e:52:e3:aa:17:39:24:f6:c3:43:
                    fa:16:24:f0:b3:55:f7:98:33:57:2d:ee:e4:25:87:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:29:3A:43:36:5D:EA:DE:11:59:5A:6A:80:4F:6F:AA:30:D9:72:A9
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/791CD4FEFAE511F0B461E4A0696F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ce:11:07:dd:b5:55:45:04:e9:22:02:b6:a0:b7:62:6e:e6:
         11:13:52:b6:9c:0d:44:95:84:59:b5:0e:c5:7d:9e:f0:a4:37:
         b0:e1:23:7a:bc:76:37:43:66:fb:a5:15:2c:4a:18:39:38:e9:
         84:47:79:9c:3a:07:ab:69:d4:83:7a:20:05:93:a9:f7:9b:99:
         dc:6d:7d:94:97:3d:3d:42:d5:d5:e2:08:f4:b3:a3:95:2e:d0:
         4c:b4:1c:da:28:d8:fb:06:46:9f:d1:1a:a1:50:42:d6:5f:03:
         41:91:ea:89:ea:06:f1:a4:19:dd:8f:ad:39:a6:13:59:67:8b:
         e4:43:ce:f2:c9:88:de:65:2e:4f:c1:4d:c2:c8:b3:95:25:bb:
         0d:21:ac:80:09:5f:2e:6c:7c:4f:9d:dc:c4:ca:27:d7:b1:4e:
         3d:cd:d1:ac:06:f2:c1:f6:28:6b:a1:7a:9c:f9:e2:9c:53:66:
         9d:bb:dc:07:0c:39:46:10:3e:1c:70:49:9a:57:f4:6f:26:8d:
         ad:4d:eb:dd:37:eb:56:d8:65:9d:6f:62:4d:e7:04:f1:c9:cb:
         b9:98:0f:7f:e1:9e:0c:aa:9f:92:80:8f:15:74:92:16:fa:93:
         a0:61:d3:f4:b8:01:67:70:c5:06:81:76:a7:9c:04:c8:be:91:
         88:90:bd:ed
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND
NDE0RjE2QjUwHhcNMjYwMTI2MTgzMzE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTU1ZS1iYzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqTfvuaF3RynJjbo20JjsQnzjPCzRLLSQkBIgaMtb79NhKKqhjwwrt5NyyQWt
KyzkLUcnOmrj0J3yJ6y4Ti5tK/D7PdsBafDb2Dp9O5So8NH8+WUnjZmjlK/QAVAx
qdAP52sl30fcpVpcT5w6Rl/dEacQlB6g+HJ+W2gNnTm8Hm5JbT8FNLYwXQXwBHbM
wj8D69SsoJ2XJX6V9HP2hVV9gkjXPQ5MV8teNDpAv6GPQ/aWjrQSxpbRPrQyZ0iW
OPp3ZUABp95Qd4tV/IHzb+rI6Bx7GlE25kZaoxifWXDnt4LlfKDLAV5S46oXOST2
w0P6FiTws1X3mDNXLe7kJYdKFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF0pOkM2
XereEVlaaoBPb6ow2XKpMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5
QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG
clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ0RjIvRDI5OUY4RUNCOUFCMTFFQzkxRTNEMTY1QzRGOUFFMDIvNzkxQ0Q0RkVG
QUU1MTFGMEI0NjFFNEEwNjk2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7n7MA0GCSqGSIb3DQEBCwUAA4IBAQA4zhEH3bVVRQTpIgK2oLdi
buYRE1K2nA1ElYRZtQ7FfZ7wpDew4SN6vHY3Q2b7pRUsShg5OOmER3mcOgeradSD
eiAFk6n3m5ncbX2Ulz09QtXV4gj0s6OVLtBMtBzaKNj7Bkaf0RqhUELWXwNBkeqJ
6gbxpBndj605phNZZ4vkQ87yyYjeZS5PwU3CyLOVJbsNIayACV8ubHxPndzEyifX
sU49zdGsBvLB9ihroXqc+eKcU2adu9wHDDlGED4ccEmaV/RvJo2tTevdN+tW2GWd
b2JN5wTxycu5mA9/4Z4Mqp+SgI8VdJIW+pOgYdP0uAFncMUGgXannATIvpGIkL3t
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:33 2026 by rpki-client