Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/D08FF4F0BB7111EFACA16B1DC4F9AE02.roa
File:                     D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (raw, json)
Hash identifier:          jEbU+UZ6bH7hld9QXt1qM9jJKv0SNsetGnm09iu/Csc=
Subject key identifier:   E1:BB:13:5D:70:80:C6:1C:09:91:D9:78:F1:83:5A:C4:76:19:12:F2
Certificate issuer:       /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Certificate serial:       035A
Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/D08FF4F0BB7111EFACA16B1DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:04:03 +0000
ROA not before:           Tue 26 Aug 2025 07:15:46 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139029
IP address blocks:        103.191.163.0/24 maxlen: 24
                          2400:96e0:2000::/36 maxlen: 36
                          2400:96e0:2000::/40 maxlen: 40
                          2400:96e0:2001::/48 maxlen: 48
                          2400:96e0:2002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
                          rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858 (0x35a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
        Validity
            Not Before: Aug 26 07:15:46 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a40102-ca00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:3a:fd:af:c3:8c:13:67:39:97:7d:b0:a5:
                    34:09:ba:d0:9a:6f:b4:61:6d:a3:c1:86:b3:b6:b3:
                    88:4f:de:73:5b:db:50:0f:75:80:a7:47:cb:18:aa:
                    59:8f:0f:d0:d6:13:0c:03:26:50:fe:78:c1:d2:07:
                    e1:d2:da:af:3c:c6:ce:b5:06:dc:80:7e:3b:4d:46:
                    00:1b:9e:95:91:70:9e:78:21:f0:d3:0d:9c:3b:44:
                    40:76:a3:cb:30:7b:f1:b1:02:88:fb:d5:ca:8b:48:
                    cb:53:a4:1a:84:75:99:1c:bd:04:75:74:78:76:e6:
                    bf:d3:75:36:5b:9a:8d:09:44:37:ac:ad:fe:e8:b0:
                    98:cb:ab:05:77:b1:37:7d:1b:eb:f1:27:7a:36:61:
                    ba:14:1b:b8:2b:0c:1b:b5:77:d8:1e:7e:71:34:fa:
                    14:bd:28:f7:b6:a4:99:ea:22:4c:7b:d6:ab:3e:51:
                    f0:a3:4d:83:ca:02:a1:f0:ab:c9:d3:19:15:ff:cb:
                    e8:ac:33:a1:65:3c:c2:c5:9c:71:1e:4f:f8:6d:3f:
                    8b:ef:0a:8c:b9:67:06:51:99:a1:4a:44:d5:b9:2e:
                    d9:24:a1:4a:b9:12:1f:2a:0e:24:33:7e:43:47:cb:
                    2a:bb:3f:a4:3e:5c:51:a8:73:ff:4b:8f:db:c9:1d:
                    0c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BB:13:5D:70:80:C6:1C:09:91:D9:78:F1:83:5A:C4:76:19:12:F2
            X509v3 Authority Key Identifier:
                keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/D08FF4F0BB7111EFACA16B1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.163.0/24
                IPv6:
                  2400:96e0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c4:bd:8b:81:88:f6:bd:9d:83:0b:88:ac:cc:84:bc:3a:9a:71:
         45:f5:9b:73:f6:85:f4:cf:49:b7:c0:a7:f2:9c:01:48:a9:19:
         2e:6b:04:91:2b:3e:cc:a0:7e:cc:18:95:04:10:79:0f:cf:e9:
         cf:eb:fb:2c:65:fc:5b:7e:64:b1:1d:28:cf:16:98:79:25:69:
         be:b1:c8:fa:8b:6a:4d:93:72:02:82:b8:ed:45:c0:a5:53:23:
         b7:e5:f0:3c:58:9b:47:05:87:e7:a6:5f:b9:6b:03:0b:78:63:
         83:ad:86:c4:e4:8c:d7:50:bb:e0:97:0a:ee:e2:95:29:6e:1e:
         5e:ff:7e:b8:64:8d:71:90:86:66:2a:51:ba:f6:77:85:d0:8f:
         bb:5a:3e:11:87:a3:28:04:bd:da:6b:d0:6b:fc:d1:92:4a:11:
         db:4c:08:20:c7:ac:d4:ee:fd:e8:66:e4:30:93:74:ef:97:4a:
         d1:32:7c:3b:21:a2:1c:df:10:b3:38:0e:9d:6a:9c:8a:0e:50:
         0a:e6:9f:58:29:83:7c:a8:46:15:bc:53:96:38:94:4b:94:ec:
         7c:37:e4:aa:a0:68:2d:55:21:d7:72:cd:61:f7:43:43:ca:dc:
         3e:59:37:e9:29:a7:e0:04:ea:5d:6d:0f:a0:8d:cf:58:f7:64:
         cd:a2:ed:d3
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB
MEQ3NjE1MTIwHhcNMjUwODI2MDcxNTQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDEwMi1jYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu4Q6/a/DjBNnOZd9sKU0CbrQmm+0YW2jwYaztrOIT95zW9tQD3WAp0fLGKpZ
jw/Q1hMMAyZQ/njB0gfh0tqvPMbOtQbcgH47TUYAG56VkXCeeCHw0w2cO0RAdqPL
MHvxsQKI+9XKi0jLU6QahHWZHL0EdXR4dua/03U2W5qNCUQ3rK3+6LCYy6sFd7E3
fRvr8Sd6NmG6FBu4KwwbtXfYHn5xNPoUvSj3tqSZ6iJMe9arPlHwo02DygKh8KvJ
0xkV/8vorDOhZTzCxZxxHk/4bT+L7wqMuWcGUZmhSkTVuS7ZJKFKuRIfKg4kM35D
R8squz+kPlxRqHP/S4/byR0MAQIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFOG7E11w
gMYcCZHZePGDWsR2GRLyMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4
RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzI3MEYvREM1RTc0Q0EwOEU4MTFFREI5RTFCNjMzQzRGOUFFMDIvRDA4RkY0RjBC
QjcxMTFFRkFDQTE2QjFEQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM
BAIAATAGAwQAZ7+jMA4EAgACMAgDBgQkAJbgIDANBgkqhkiG9w0BAQsFAAOCAQEA
xL2LgYj2vZ2DC4iszIS8OppxRfWbc/aF9M9Jt8Cn8pwBSKkZLmsEkSs+zKB+zBiV
BBB5D8/pz+v7LGX8W35ksR0ozxaYeSVpvrHI+otqTZNyAoK47UXApVMjt+XwPFib
RwWH56ZfuWsDC3hjg62GxOSM11C74JcK7uKVKW4eXv9+uGSNcZCGZipRuvZ3hdCP
u1o+EYejKAS92mvQa/zRkkoR20wIIMes1O796GbkMJN075dK0TJ8OyGiHN8QszgO
nWqcig5QCuafWCmDfKhGFbxTljiUS5TsfDfkqqBoLVUh13LNYfdDQ8rcPlk36Smn
4ATqXW0PoI3PWPdkzaLt0w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:47 2026 by rpki-client