Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/50B93FA8B5EE11EF9AC9D812C4F9AE02.roa
File:                     50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (raw, json)
Hash identifier:          ajdGzJbwz5TOYdIi82plxkghmo/zXY3H1Me9aI3spR8=
Subject key identifier:   14:10:75:8B:8E:4E:11:0C:F9:B9:62:F7:7A:8E:10:51:76:3A:23:54
Certificate issuer:       /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Certificate serial:       F1
Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/50B93FA8B5EE11EF9AC9D812C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:00:25 +0000
ROA not before:           Tue 03 Jun 2025 07:38:00 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132839
IP address blocks:        45.117.192.0/22 maxlen: 24
                          103.57.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
                          rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
        Validity
            Not Before: Jun  3 07:38:00 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a589e9-711e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:de:5e:e3:2a:1a:90:fb:a6:83:fe:0b:85:
                    7b:c2:89:34:88:19:56:83:35:0e:be:38:e9:7a:89:
                    b2:92:d9:50:5f:07:0b:85:c2:94:c9:5a:26:48:04:
                    04:97:f5:47:59:b9:7e:4c:01:38:65:06:75:a4:43:
                    cc:36:ae:1c:cf:a8:5d:61:41:a2:06:eb:99:97:a8:
                    42:53:1e:25:77:67:9c:41:40:a8:38:cf:0c:ca:7e:
                    e5:fb:ed:01:c6:d1:ae:05:b2:f8:ad:c6:b3:fa:81:
                    51:29:29:89:b4:fe:d8:81:80:39:ce:7c:a9:6d:83:
                    81:15:93:6e:c0:bb:53:77:86:e9:0d:59:7d:02:d0:
                    07:da:95:93:73:79:0f:b1:bd:7f:1e:26:fa:73:93:
                    a3:6d:16:23:c0:46:4c:e8:1d:19:7e:d0:72:83:07:
                    36:f6:80:f6:ed:4e:86:72:ed:c2:a2:57:a3:1e:a6:
                    01:74:a0:96:77:c3:42:4a:c5:7a:e0:9f:f2:e6:82:
                    9b:28:84:45:f4:59:f6:d0:fd:f4:60:d0:5c:27:96:
                    6e:14:e9:9b:86:a2:9d:e0:ec:ad:5b:ba:02:e5:f5:
                    41:81:17:e7:6d:b3:e8:da:ba:8d:11:b2:8b:be:49:
                    9f:6b:fa:76:2f:27:9b:8a:bd:87:83:86:b0:f1:92:
                    ca:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:10:75:8B:8E:4E:11:0C:F9:B9:62:F7:7A:8E:10:51:76:3A:23:54
            X509v3 Authority Key Identifier:
                keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/50B93FA8B5EE11EF9AC9D812C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.192.0/22
                  103.57.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:33:fe:f8:ee:43:92:bc:9b:52:33:39:29:1d:09:80:d9:45:
         69:89:74:30:f6:41:37:18:9d:86:c2:85:92:a2:9c:4a:69:4b:
         8c:ca:11:9a:23:fe:05:39:78:ff:98:90:26:82:dc:f4:27:2d:
         6f:e2:ef:f0:f1:06:59:06:2e:90:11:9f:d5:7e:1b:e4:65:80:
         2c:5a:50:fa:44:6e:8c:39:4b:34:71:c1:ee:96:4a:c9:2a:74:
         78:80:46:4f:5c:4a:17:e4:5a:21:a9:ef:e8:1d:ae:e8:78:41:
         ca:b0:53:0c:8c:8f:c4:f1:7b:24:81:fd:1c:90:e2:97:a2:e8:
         ad:3d:2f:ce:5d:63:95:71:c0:37:d1:30:a5:35:c6:f0:5b:24:
         10:83:d7:3e:75:a8:0a:36:72:b9:62:13:7e:f4:98:a9:6d:20:
         55:b2:0b:90:b9:d0:03:bd:be:22:a2:bb:f1:29:4f:69:d5:08:
         33:73:a5:3c:94:e5:88:31:7b:29:2d:bf:37:58:86:ed:3f:54:
         71:56:36:43:24:be:55:2b:eb:82:98:20:d2:f9:cf:ca:50:35:
         56:24:f6:ca:d2:4e:7e:9b:9b:30:a0:3f:5a:2e:0d:22:d8:ab:
         15:2c:26:68:a0:35:ff:28:97:06:71:cb:d2:ad:e9:16:9e:27:
         81:ee:fa:55
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZBOTYxMTAvBgNVBAUTKERBRUZBNTQzNThGNEJDQzBEODQ3Q0M2REM5Q0FGNzhC
QzVFMDk5NkUwHhcNMjUwNjAzMDczODAwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODllOS03MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuCneXuMqGpD7poP+C4V7wok0iBlWgzUOvjjpeomyktlQXwcLhcKUyVomSAQE
l/VHWbl+TAE4ZQZ1pEPMNq4cz6hdYUGiBuuZl6hCUx4ld2ecQUCoOM8Myn7l++0B
xtGuBbL4rcaz+oFRKSmJtP7YgYA5znypbYOBFZNuwLtTd4bpDVl9AtAH2pWTc3kP
sb1/Hib6c5OjbRYjwEZM6B0ZftBygwc29oD27U6Gcu3ColejHqYBdKCWd8NCSsV6
4J/y5oKbKIRF9Fn20P30YNBcJ5ZuFOmbhqKd4OytW7oC5fVBgRfnbbPo2rqNEbKL
vkmfa/p2Lyebir2Hg4aw8ZLKqwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBQQdYuO
ThEM+bli93qOEFF2OiNUMB8GA1UdIwQYMBaAFNrvpUNY9LzA2EfMbcnK94vF4Jlu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkE5Ni84QTM1MDkwQ0I1
RUQxMUVGOUQyMDY5MEVDNEY5QUUwMi8ydS1sUTFqMHZNRFlSOHh0eWNyM2k4WGdt
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ1LWxRMWowdk1EWVI4eHR5Y3IzaThYZ21XNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZBOTYvOEEzNTA5MENCNUVEMTFFRjlEMjA2OTBFQzRGOUFFMDIvNTBCOTNGQThC
NUVFMTFFRjlBQzlEODEyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCLXXAAwQCZznkMA0GCSqGSIb3DQEBCwUAA4IBAQBjM/747kOSvJtS
MzkpHQmA2UVpiXQw9kE3GJ2GwoWSopxKaUuMyhGaI/4FOXj/mJAmgtz0Jy1v4u/w
8QZZBi6QEZ/VfhvkZYAsWlD6RG6MOUs0ccHulkrJKnR4gEZPXEoX5Fohqe/oHa7o
eEHKsFMMjI/E8Xskgf0ckOKXouitPS/OXWOVccA30TClNcbwWyQQg9c+dagKNnK5
YhN+9JipbSBVsguQudADvb4iorvxKU9p1Qgzc6U8lOWIMXspLb83WIbtP1RxVjZD
JL5VK+uCmCDS+c/KUDVWJPbK0k5+m5swoD9aLg0i2KsVLCZooDX/KJcGccvSrekW
nieB7vpV
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:28:26 2026 by rpki-client