Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa
File:                     12482BA205A211ED81E44F6DC4F9AE02.roa (raw, json)
Hash identifier:          EaqsJvq9+kP/CsXJtpGYmUR7366ySfmmfcAxsNNsEdU=
Subject key identifier:   7F:A8:18:EF:40:E6:47:AD:B2:56:D9:A1:82:A3:36:5A:A3:3F:F5:EC
Certificate issuer:       /CN=A917C59F/serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
Certificate serial:       0968
Authority key identifier: 04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa
Signing time:             Tue 30 Jun 2026 21:24:50 +0000
ROA not before:           Tue 30 Jun 2026 21:24:50 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     38493
IP address blocks:        103.151.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl
                          rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2408 (0x968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C59F, serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
        Validity
            Not Before: Jun 30 21:24:50 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a443422-6234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:1c:43:4b:02:41:2f:e3:eb:b1:fc:1a:93:
                    11:31:d5:76:44:68:a3:55:d1:46:6a:2d:03:c1:88:
                    75:ed:5b:56:85:22:1b:29:c4:a3:94:15:50:39:a3:
                    c8:7b:52:df:84:02:77:a3:54:f8:d1:90:69:ee:3b:
                    00:84:58:2b:0c:3b:21:83:a4:12:6c:0c:a1:dc:70:
                    f1:81:7e:09:21:2d:77:73:bc:42:32:90:05:83:1f:
                    14:30:7d:95:f8:37:78:48:b7:12:39:a8:c8:0e:21:
                    9a:ee:d4:fa:47:e2:8c:e9:9b:a7:c1:fc:2a:69:35:
                    28:b5:d3:5d:3a:de:b6:70:51:7c:a9:4f:1e:da:8c:
                    f7:fc:ee:50:66:b6:e5:cd:da:6d:78:b5:ca:a3:25:
                    fb:5d:15:00:d0:bd:6d:bb:6d:63:67:a8:af:48:7d:
                    52:1f:fe:7e:6a:c2:ae:d8:9b:e7:9d:44:49:77:63:
                    51:5e:f4:f9:4b:8a:d1:ba:8a:1f:bc:c4:b5:f5:e3:
                    a5:85:0f:1c:4c:c9:fb:4d:33:7f:5f:5b:70:c3:a0:
                    50:40:6c:28:a8:31:c2:31:f5:ff:10:39:10:12:34:
                    81:fe:64:3b:db:fd:b5:ee:5f:9f:a7:b4:a0:b2:f6:
                    27:25:d6:bf:7c:81:a1:e1:0c:56:9a:b9:46:22:60:
                    50:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:18:EF:40:E6:47:AD:B2:56:D9:A1:82:A3:36:5A:A3:3F:F5:EC
            X509v3 Authority Key Identifier:
                keyid:04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:b4:cc:4b:44:03:55:f5:d3:11:25:57:7b:c4:93:0d:b2:52:
         fc:dc:15:85:a3:5d:3a:f0:73:eb:d8:d9:27:08:b3:17:83:d3:
         3e:07:ea:cf:b5:96:91:7d:4f:84:01:31:d4:62:99:4f:9f:69:
         6e:fa:04:04:6a:0b:ff:c7:7d:82:4f:a3:a4:a5:7b:9b:e8:3c:
         c7:85:6a:91:42:1a:02:c4:70:06:d2:e7:9b:7e:88:52:1a:9a:
         55:a2:ef:a6:23:46:e3:ff:92:8c:fa:07:47:80:2f:f6:2d:20:
         73:04:d5:b6:80:85:6b:40:ca:52:1f:d6:da:97:ea:2a:48:57:
         4a:57:28:6c:3c:35:e5:f3:73:d0:a1:69:f2:57:72:86:52:6d:
         20:83:c7:55:24:34:6c:bb:a4:96:b6:b6:fa:45:da:c2:33:ac:
         62:8b:30:e2:b3:bd:3d:fa:d9:8d:e2:01:f3:cf:73:ee:e9:d1:
         2f:24:db:90:60:f0:5b:6f:05:f0:14:27:6c:f5:2c:48:dd:29:
         a9:6d:e0:e5:b4:ee:94:93:fe:d1:0f:40:f4:3b:b5:a7:a4:00:
         9c:47:42:66:ce:a7:d8:c4:b9:b1:ea:c2:67:6e:83:a3:08:ec:
         41:60:0c:04:72:b8:95:aa:eb:09:96:65:49:1d:36:8a:ca:f2:
         d7:9d:78:d7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M1OUYxMTAvBgNVBAUTKDA0QkRCQjYwRjZBNjYwRDFEMkQwMTI3MzQ5MEZDRjA5
Q0MzNTlCNzMwHhcNMjYwNjMwMjEyNDUwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0MzQyMi02MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxfscQ0sCQS/j67H8GpMRMdV2RGijVdFGai0DwYh17VtWhSIbKcSjlBVQOaPI
e1LfhAJ3o1T40ZBp7jsAhFgrDDshg6QSbAyh3HDxgX4JIS13c7xCMpAFgx8UMH2V
+Dd4SLcSOajIDiGa7tT6R+KM6ZunwfwqaTUotdNdOt62cFF8qU8e2oz3/O5QZrbl
zdpteLXKoyX7XRUA0L1tu21jZ6ivSH1SH/5+asKu2JvnnURJd2NRXvT5S4rRuoof
vMS19eOlhQ8cTMn7TTN/X1tww6BQQGwoqDHCMfX/EDkQEjSB/mQ72/217l+fp7Sg
svYnJda/fIGh4QxWmrlGImBQawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH+oGO9A
5ketslbZoYKjNlqjP/XsMB8GA1UdIwQYMBaAFAS9u2D2pmDR0tASc0kPzwnMNZtz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzU5Ri80MjVFODkwMkMx
NDQxMUVBOTFGMDNBNkZDNEY5QUUwMi9CTDI3WVBhbVlOSFMwQkp6U1FfUENjdzFt
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JMMjdZUGFtWU5IUzBCSnpTUV9QQ2N3MW0zTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0M1OUYvNDI1RTg5MDJDMTQ0MTFFQTkxRjAzQTZGQzRGOUFFMDIvMTI0ODJCQTIw
NUEyMTFFRDgxRTQ0RjZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5fUMA0GCSqGSIb3DQEBCwUAA4IBAQABtMxLRANV9dMRJVd7xJMN
slL83BWFo1068HPr2NknCLMXg9M+B+rPtZaRfU+EATHUYplPn2lu+gQEagv/x32C
T6OkpXub6DzHhWqRQhoCxHAG0uebfohSGppVou+mI0bj/5KM+gdHgC/2LSBzBNW2
gIVrQMpSH9bal+oqSFdKVyhsPDXl83PQoWnyV3KGUm0gg8dVJDRsu6SWtrb6RdrC
M6xiizDis709+tmN4gHzz3Pu6dEvJNuQYPBbbwXwFCds9SxI3SmpbeDltO6Uk/7R
D0D0O7WnpACcR0JmzqfYxLmx6sJnboOjCOxBYAwEcriVqusJlmVJHTaKyvLXnXjX
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:56:12 2026 by rpki-client