Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/99DA0A4C533C11EF92170913C4F9AE02.roa
File:                     99DA0A4C533C11EF92170913C4F9AE02.roa (raw, json)
Hash identifier:          0hf744/8ClGNM1pPRKsYmzGhD2Zto6yat3iUOtKyOcU=
Subject key identifier:   CD:D9:C6:BE:2F:DF:1D:4B:8E:98:60:8C:75:84:D3:63:DE:43:E9:2E
Certificate issuer:       /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial:       026F
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/99DA0A4C533C11EF92170913C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:43:47 +0000
ROA not before:           Sun 31 Aug 2025 04:21:20 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     61112
IP address blocks:        103.158.116.0/24 maxlen: 24
                          103.158.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
                          rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
        Validity
            Not Before: Aug 31 04:21:20 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a51583-5cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:4e:8a:dc:24:a5:3c:50:f7:02:35:a5:69:
                    9b:fb:ac:c9:21:91:3d:0a:23:81:eb:53:a3:fd:f6:
                    fd:78:4d:2c:bc:01:27:93:21:04:ec:de:60:03:f8:
                    e1:da:a1:8d:05:b6:c1:00:fc:5f:9c:b0:15:03:5f:
                    be:41:f3:2c:4d:f1:d1:5d:b3:62:f9:da:93:d0:9b:
                    4c:05:50:e3:9e:9c:33:59:a6:d4:21:3c:7b:a0:44:
                    0e:6a:56:d5:0b:15:c7:cd:40:bc:7b:6a:cc:12:70:
                    5f:c5:6c:7d:55:2b:63:64:58:11:0a:0a:96:43:f5:
                    5f:a5:34:95:ba:1f:a3:42:ca:90:87:91:ae:72:e3:
                    5f:49:1c:59:c0:63:70:72:e3:da:33:8d:a9:25:a9:
                    a5:34:12:16:f9:67:3c:fe:6f:38:09:12:19:72:89:
                    e9:95:77:11:40:13:ff:cf:6c:d6:c2:39:2b:a7:91:
                    b0:57:ff:56:c0:62:1a:77:60:e3:52:cf:0f:1c:f6:
                    d5:e3:9c:47:ea:b0:f1:81:7b:d0:fd:1c:b4:6f:f5:
                    0f:98:85:8f:bf:7b:0d:ac:af:d7:81:e7:01:d1:27:
                    4a:7b:cd:18:d9:34:1b:c9:7e:22:f1:09:22:ab:14:
                    9e:78:09:c6:f9:6f:fe:02:19:08:f2:32:1f:70:ab:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D9:C6:BE:2F:DF:1D:4B:8E:98:60:8C:75:84:D3:63:DE:43:E9:2E
            X509v3 Authority Key Identifier:
                keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/99DA0A4C533C11EF92170913C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:4d:45:5e:ef:22:b4:10:03:19:b0:d7:7e:7e:3c:13:fb:9b:
         a4:f0:10:8d:af:6b:0a:b6:45:8f:0f:04:bb:a8:62:0c:6f:af:
         46:77:64:39:80:bb:0c:7a:be:0a:bb:ce:b8:a2:54:1d:71:11:
         b9:65:42:bb:05:74:54:cf:82:fb:bd:3b:26:80:cb:9f:c1:5a:
         57:f0:b1:ac:0c:4b:38:7a:15:9f:b9:ed:e4:3b:3b:69:fa:64:
         d0:d0:ae:77:d4:a4:d1:f8:fe:52:ef:d7:40:51:d0:ae:5e:e4:
         5a:89:45:d8:f0:1a:8e:a9:d2:b9:7e:a6:79:c7:29:ca:f6:55:
         4b:80:9e:84:07:ff:c7:79:2a:7b:63:31:ac:b8:97:cf:f7:8d:
         4a:17:40:5e:11:26:b1:f1:d8:47:56:eb:02:3c:e3:be:66:1a:
         1e:f3:83:b2:1b:0b:d0:5d:4c:9d:d4:74:64:4e:50:3b:bf:e5:
         fb:7a:de:29:22:d0:90:5d:80:2c:07:f0:b8:2b:de:a8:1f:f6:
         8c:3c:0b:5a:3a:58:fa:d2:b3:5b:5e:a7:15:8c:b5:68:30:32:
         ed:15:0e:f2:27:ea:d6:13:8e:28:04:a9:5c:f5:77:e3:63:f2:
         c6:ce:ed:56:b7:1f:b9:62:08:47:8b:b5:56:56:b0:ef:30:d6:
         02:11:68:6f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5
Q0U3RDc4QjUwHhcNMjUwODMxMDQyMTIwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MTU4My01Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqu1OitwkpTxQ9wI1pWmb+6zJIZE9CiOB61Oj/fb9eE0svAEnkyEE7N5gA/jh
2qGNBbbBAPxfnLAVA1++QfMsTfHRXbNi+dqT0JtMBVDjnpwzWabUITx7oEQOalbV
CxXHzUC8e2rMEnBfxWx9VStjZFgRCgqWQ/VfpTSVuh+jQsqQh5GucuNfSRxZwGNw
cuPaM42pJamlNBIW+Wc8/m84CRIZconplXcRQBP/z2zWwjkrp5GwV/9WwGIad2Dj
Us8PHPbV45xH6rDxgXvQ/Ry0b/UPmIWPv3sNrK/XgecB0SdKe80Y2TQbyX4i8Qki
qxSeeAnG+W/+AhkI8jIfcKtHmwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM3Zxr4v
3x1LjphgjHWE02PeQ+kuMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx
NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0JFQTcvMDQ0RjY0NDgxMTY4MTFFRUFDNjNDMjM0QzRGOUFFMDIvOTlEQTBBNEM1
MzNDMTFFRjkyMTcwOTEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ550MA0GCSqGSIb3DQEBCwUAA4IBAQCOTUVe7yK0EAMZsNd+fjwT
+5uk8BCNr2sKtkWPDwS7qGIMb69Gd2Q5gLsMer4Ku864olQdcRG5ZUK7BXRUz4L7
vTsmgMufwVpX8LGsDEs4ehWfue3kOztp+mTQ0K531KTR+P5S79dAUdCuXuRaiUXY
8BqOqdK5fqZ5xynK9lVLgJ6EB//HeSp7YzGsuJfP941KF0BeESax8dhHVusCPOO+
Zhoe84OyGwvQXUyd1HRkTlA7v+X7et4pItCQXYAsB/C4K96oH/aMPAtaOlj60rNb
XqcVjLVoMDLtFQ7yJ+rWE44oBKlc9XfjY/LGzu1Wtx+5YghHi7VWVrDvMNYCEWhv
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:41 2026 by rpki-client