Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/F508F35E86EF11F19E006003A7EE528E.roa
File:                     F508F35E86EF11F19E006003A7EE528E.roa (raw, json)
Hash identifier:          Ty3+mGIb6QkvbzK0VW/q7r14uQOfu2AHVHicnCmDQFw=
Subject key identifier:   7B:A7:96:27:60:FB:C5:2D:F7:89:4B:17:67:01:44:F8:95:5C:33:79
Certificate issuer:       /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
Certificate serial:       1BDE
Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/F508F35E86EF11F19E006003A7EE528E.roa
Signing time:             Thu 23 Jul 2026 23:40:59 +0000
ROA not before:           Thu 23 Jul 2026 23:40:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45766
IP address blocks:        43.251.84.0/22 maxlen: 24
                          103.216.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl
                          rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 23:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7134 (0x1bde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
        Validity
            Not Before: Jul 23 23:40:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a62a68b-fe5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e8:d7:54:eb:54:24:98:51:a0:70:42:91:07:
                    7f:d4:7a:60:c2:db:38:40:37:82:d7:03:5c:2f:c3:
                    a1:49:d7:06:73:e2:73:43:2e:a4:56:01:35:cd:bd:
                    f7:44:73:d4:e3:75:37:c6:03:d0:80:f1:6e:ad:e5:
                    16:4b:bb:59:1b:95:50:29:51:96:c1:db:4a:d0:b4:
                    cf:78:57:29:86:0e:89:31:ab:1a:71:44:86:c1:89:
                    62:36:f4:33:7b:e5:5c:63:67:05:da:06:2a:84:03:
                    da:5e:c6:d4:fb:25:47:46:e7:a0:72:09:2e:1f:dc:
                    18:75:a4:73:25:70:13:3e:46:70:e7:4d:f5:47:2a:
                    05:0e:61:66:34:ef:0c:4d:36:67:75:8d:53:98:13:
                    c6:21:46:73:59:93:e0:13:cc:c9:22:5e:5c:09:dc:
                    98:f2:7d:cf:b2:16:c8:af:b0:bb:17:1e:9a:44:ae:
                    87:bf:36:94:7b:7b:cd:94:7b:23:9c:f2:ad:25:c6:
                    43:82:4e:a2:de:28:d6:46:5a:37:fe:97:de:77:6d:
                    81:1a:eb:01:03:e2:5f:ff:e1:7a:62:3c:71:01:34:
                    6e:7c:09:7f:e8:7d:68:0a:98:61:d7:f7:7f:51:57:
                    c2:2a:d7:5a:fc:2e:c6:23:53:ff:41:74:f7:c4:39:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A7:96:27:60:FB:C5:2D:F7:89:4B:17:67:01:44:F8:95:5C:33:79
            X509v3 Authority Key Identifier:
                keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/F508F35E86EF11F19E006003A7EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.84.0/22
                  103.216.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:3f:96:2b:7d:44:b7:13:04:57:2d:81:3c:83:13:06:29:c2:
         20:87:8b:2d:d4:64:ae:bd:b0:8c:ad:56:28:5c:9e:49:2c:e2:
         57:02:41:f0:61:36:6a:62:8e:92:ce:45:a9:6d:7b:8c:5b:1a:
         17:2a:a8:50:0c:51:48:b6:97:a1:89:14:e0:ec:52:a7:b4:f5:
         61:7a:8f:f1:32:a7:91:18:c9:e7:4d:5b:7d:7d:c3:05:5f:c8:
         b4:f9:aa:e2:69:3c:75:76:2b:b1:68:03:89:16:f4:5b:68:84:
         9c:cb:36:ca:77:84:c3:29:d1:d0:b5:a7:e8:ac:e2:60:6c:46:
         24:3b:1c:0f:79:10:3c:af:e6:81:21:16:95:c1:25:a5:ab:c4:
         7c:19:97:1b:a6:8b:5b:ff:84:10:5a:fa:7e:97:d8:e2:26:e4:
         a2:86:e6:c6:50:67:6e:e6:37:2b:30:50:5b:c0:aa:44:66:4f:
         be:f1:d5:78:44:04:2a:2d:11:10:21:e7:02:95:75:4d:f5:d6:
         0e:88:44:98:0b:bb:79:99:08:5d:af:76:c2:87:af:09:22:87:
         4a:d2:9d:e0:83:72:62:3d:39:fd:bd:54:2f:5e:0b:58:f9:c4:
         9d:46:1c:04:b0:03:6e:60:1a:4e:98:a3:56:34:b1:a4:57:6c:
         2d:2a:fb:40
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICG94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy
OUUyRDVDMjIwHhcNMjYwNzIzMjM0MDU5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYyYTY4Yi1mZTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmujXVOtUJJhRoHBCkQd/1Hpgwts4QDeC1wNcL8OhSdcGc+JzQy6kVgE1zb33
RHPU43U3xgPQgPFureUWS7tZG5VQKVGWwdtK0LTPeFcphg6JMasacUSGwYliNvQz
e+VcY2cF2gYqhAPaXsbU+yVHRuegcgkuH9wYdaRzJXATPkZw5031RyoFDmFmNO8M
TTZndY1TmBPGIUZzWZPgE8zJIl5cCdyY8n3PshbIr7C7Fx6aRK6HvzaUe3vNlHsj
nPKtJcZDgk6i3ijWRlo3/pfed22BGusBA+Jf/+F6YjxxATRufAl/6H1oCphh1/d/
UVfCKtda/C7GI1P/QXT3xDk5nwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHunlidg
+8Ut94lLF2cBRPiVXDN5MB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz
MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY
Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ2NkQvMUVCMDkyNTQyMzM5MTFFN0EwNkIyNTc5QzRGOUFFMDIvRjUwOEYzNUU4
NkVGMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK/tUAwQCZ9g4MA0GCSqGSIb3DQEBCwUAA4IBAQCWP5YrfUS3EwRX
LYE8gxMGKcIgh4st1GSuvbCMrVYoXJ5JLOJXAkHwYTZqYo6SzkWpbXuMWxoXKqhQ
DFFItpehiRTg7FKntPVheo/xMqeRGMnnTVt9fcMFX8i0+ariaTx1diuxaAOJFvRb
aIScyzbKd4TDKdHQtaforOJgbEYkOxwPeRA8r+aBIRaVwSWlq8R8GZcbpotb/4QQ
Wvp+l9jiJuSihubGUGdu5jcrMFBbwKpEZk++8dV4RAQqLREQIecClXVN9dYOiESY
C7t5mQhdr3bCh68JIodK0p3gg3JiPTn9vVQvXgtY+cSdRhwEsANuYBpOmKNWNLGk
V2wtKvtA
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:52 2026 by rpki-client