Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/C454E4B4D94F11EBAB5C652FC4F9AE02.roa
File:                     C454E4B4D94F11EBAB5C652FC4F9AE02.roa (raw, json)
Hash identifier:          pf2kSPbXQIEyCz4CgLJz/AXm9yHa62K7QSZVc4GF6zU=
Subject key identifier:   4F:27:1D:A4:55:A9:FB:2D:30:97:ED:6F:67:87:5A:12:CE:85:EB:28
Certificate issuer:       /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Certificate serial:       0627
Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/C454E4B4D94F11EBAB5C652FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:58:57 +0000
ROA not before:           Fri 16 May 2025 23:33:58 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137441
IP address blocks:        103.166.60.0/23 maxlen: 23
                          103.166.60.0/24 maxlen: 24
                          103.166.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
                          rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
        Validity
            Not Before: May 16 23:33:58 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58991-c1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:4c:53:ce:08:1c:27:f9:a4:4c:be:91:7c:
                    76:e9:69:a1:69:9e:31:e0:2d:cf:fe:c8:60:95:e4:
                    5b:a9:05:7d:af:67:a4:29:90:af:03:ff:23:09:23:
                    28:d3:cf:ad:75:ee:6f:ac:01:25:24:4f:34:e0:56:
                    31:6e:5c:91:06:c7:8f:9c:20:96:6f:55:8f:4f:a8:
                    7c:66:a5:79:ca:88:22:3d:84:e1:80:df:19:a5:60:
                    6d:a2:36:22:18:84:96:59:84:60:a5:ec:74:89:e3:
                    d2:ec:f7:a4:1c:95:d1:65:9c:a5:21:ba:ba:49:a7:
                    af:23:1b:08:5b:91:fe:50:7a:32:c3:cf:d2:2f:99:
                    da:8d:2c:84:30:fe:e8:bf:cb:69:04:b6:48:b1:73:
                    27:0e:aa:43:eb:42:80:38:81:b5:b2:c7:da:33:2f:
                    bd:cb:d4:15:66:2a:8e:f1:f5:53:6f:9d:c8:6c:30:
                    a0:25:f8:26:08:b9:31:ca:f4:ee:02:04:c8:c6:20:
                    03:7b:b3:4e:1d:dc:40:db:a4:8c:89:82:38:f4:bb:
                    10:5b:9b:05:bb:ce:8d:85:a6:e9:7c:b4:8a:73:00:
                    37:91:b7:dc:84:42:0a:a0:4a:92:fc:15:18:f0:f1:
                    67:d9:a2:96:9b:48:49:bf:7a:bd:0e:46:a5:17:fd:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:27:1D:A4:55:A9:FB:2D:30:97:ED:6F:67:87:5A:12:CE:85:EB:28
            X509v3 Authority Key Identifier:
                keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/C454E4B4D94F11EBAB5C652FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:46:aa:dd:e9:57:e4:08:17:37:e8:09:15:2a:39:1c:65:10:
         c7:d4:6a:b8:c3:b5:40:8f:22:f5:7f:f8:df:7e:cf:ea:c2:23:
         31:63:b2:6c:29:9d:1e:d7:16:b7:b0:70:11:df:dd:75:bf:f5:
         4e:1d:5f:a4:0d:9a:fd:c5:13:62:b6:a9:9f:3b:14:29:55:c7:
         9b:89:10:ed:1e:28:a2:d9:1b:90:59:d4:48:eb:0f:bd:86:1a:
         a4:4a:39:73:b5:4b:48:6e:08:90:1b:6e:d8:f8:9b:b3:ca:b0:
         b0:1a:d0:8d:d3:6e:54:7f:ea:78:6e:13:f1:99:c1:6f:89:cd:
         0b:57:bf:24:21:20:01:b8:21:0c:c3:ec:7e:3a:ea:e8:0b:3a:
         b6:f8:a2:d8:5e:6d:33:e0:05:fa:35:e6:c4:4a:04:45:c7:6e:
         bc:f1:a5:20:ed:52:cc:d1:0f:c4:c3:5f:8c:4d:1e:b1:6d:11:
         76:e4:71:90:cb:bc:cf:2f:06:83:89:1b:61:de:9b:9d:ee:ef:
         6a:1d:f5:dd:8f:11:ab:d4:6a:55:bd:aa:ab:bb:45:ab:9b:c7:
         82:da:76:1e:f0:90:25:2e:73:ce:69:09:01:33:13:8c:1a:6d:
         cb:25:70:fe:e2:fa:5a:b2:35:bc:29:6d:ef:8d:30:6a:60:62:
         35:92:e3:cf
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw
QzhGQzQ1RTIwHhcNMjUwNTE2MjMzMzU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODk5MS1jMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArKBMU84IHCf5pEy+kXx26WmhaZ4x4C3P/shgleRbqQV9r2ekKZCvA/8jCSMo
08+tde5vrAElJE804FYxblyRBsePnCCWb1WPT6h8ZqV5yogiPYThgN8ZpWBtojYi
GISWWYRgpex0iePS7PekHJXRZZylIbq6SaevIxsIW5H+UHoyw8/SL5najSyEMP7o
v8tpBLZIsXMnDqpD60KAOIG1ssfaMy+9y9QVZiqO8fVTb53IbDCgJfgmCLkxyvTu
AgTIxiADe7NOHdxA26SMiYI49LsQW5sFu86NhabpfLSKcwA3kbfchEIKoEqS/BUY
8PFn2aKWm0hJv3q9DkalF/22EQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE8nHaRV
qfstMJftb2eHWhLOhesoMB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5
NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODRGMkQvQ0ZCRUQzNzBEOTREMTFFQkJFNUQzMTJGQzRGOUFFMDIvQzQ1NEU0QjRE
OTRGMTFFQkFCNUM2NTJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6Y8MA0GCSqGSIb3DQEBCwUAA4IBAQBRRqrd6VfkCBc36AkVKjkc
ZRDH1Gq4w7VAjyL1f/jffs/qwiMxY7JsKZ0e1xa3sHAR3911v/VOHV+kDZr9xRNi
tqmfOxQpVcebiRDtHiii2RuQWdRI6w+9hhqkSjlztUtIbgiQG27Y+JuzyrCwGtCN
025Uf+p4bhPxmcFvic0LV78kISABuCEMw+x+OuroCzq2+KLYXm0z4AX6NebESgRF
x2688aUg7VLM0Q/Ew1+MTR6xbRF25HGQy7zPLwaDiRth3pud7u9qHfXdjxGr1GpV
vaqru0Wrm8eC2nYe8JAlLnPOaQkBMxOMGm3LJXD+4vpasjW8KW3vjTBqYGI1kuPP
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:00 2026 by rpki-client