Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
File:                     4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (raw, json)
Hash identifier:          Ap6oRfEzkjO35cGS8csTlKBBeSJXfY4G3zYl5UbaU18=
Subject key identifier:   DB:88:18:DB:3B:EF:AE:7B:3B:C7:7C:06:62:9C:75:D9:B0:EA:54:DC
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1A58
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:51:14 +0000
ROA not before:           Tue 20 Jan 2026 16:13:54 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135523
IP address blocks:        103.70.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6744 (0x1a58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Jan 20 16:13:54 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a51742-5a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:5c:9f:26:88:3f:1d:9e:06:99:78:d5:7e:
                    41:dd:b4:78:81:00:5c:ab:15:cf:ce:fd:80:7b:b0:
                    32:82:0a:d7:0a:f4:42:36:e6:51:27:0a:25:39:14:
                    0c:ef:c2:10:bf:c1:f6:9b:51:b8:a2:69:4f:2f:bf:
                    d0:59:3c:c4:a1:3b:60:c1:2b:c5:90:41:c8:31:4a:
                    9a:79:4f:84:7a:2a:b0:72:ef:ad:32:e8:3b:cb:1a:
                    92:4a:31:bd:f4:2b:11:e3:ea:41:3c:08:f4:53:73:
                    c6:65:0e:94:8d:c1:cd:05:28:c6:e4:51:b2:73:4d:
                    ad:3e:a0:5e:23:73:1f:a8:3f:61:47:33:cb:ff:f9:
                    37:33:96:ad:1b:d0:cd:b5:ff:44:53:eb:4d:64:fb:
                    e5:5a:e8:5e:b6:e0:cc:5e:ca:1a:d2:e2:c8:74:9b:
                    80:fb:dc:02:fd:86:58:31:b4:6f:c2:f7:b3:92:ab:
                    cb:07:34:0f:ad:8b:74:0e:42:3c:9a:cb:56:21:12:
                    25:3a:d4:cd:68:11:28:9d:38:25:cd:c4:4f:b4:b6:
                    f1:59:23:b4:f8:c4:3b:8d:d4:b1:56:6d:66:9f:88:
                    32:2b:49:0b:e0:31:7e:8c:1e:0d:a5:1f:73:83:ad:
                    25:39:32:11:e3:da:b5:a2:20:9c:2b:90:ca:3f:bc:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:88:18:DB:3B:EF:AE:7B:3B:C7:7C:06:62:9C:75:D9:B0:EA:54:DC
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:80:94:e4:0d:d2:ad:a0:3a:b9:e7:96:04:8c:b5:d0:96:6e:
         c0:a2:e9:5b:e5:40:4c:a6:56:2c:9b:8d:1e:ee:36:7c:72:d7:
         cb:07:9a:10:a2:bd:b3:7a:cc:bd:f9:2c:53:97:92:7c:5a:b1:
         24:15:c7:7b:eb:ff:1b:f1:3a:7b:d5:65:6e:dd:f5:70:27:93:
         b2:db:cd:0d:d8:c8:d2:50:fb:0a:7f:c0:d7:9a:55:d7:44:ef:
         cc:12:d7:c8:47:e6:25:5e:f3:d9:c2:53:89:da:39:02:a8:cf:
         5f:49:3e:39:09:0f:04:25:54:3e:8c:c2:45:18:03:db:27:86:
         65:93:2b:3d:ac:a0:c3:24:3d:bc:25:36:8e:f2:d9:ba:04:26:
         16:32:b7:86:31:56:1a:e0:45:a1:5c:c7:ac:1e:3b:34:04:05:
         41:9a:e3:5a:36:b6:fe:79:97:30:7b:9c:01:ca:b8:6b:45:25:
         f4:6d:db:1a:c9:5d:2a:30:b8:ae:d1:d3:8a:26:15:b3:f8:13:
         3b:d1:ed:0a:a4:bc:95:0c:6c:0a:90:4b:9a:6c:7e:3f:59:d4:
         f6:fe:59:40:6d:2d:58:e9:ef:12:8b:c3:bd:b9:86:db:2d:63:
         6d:d2:bf:e7:00:72:83:f9:0f:1d:06:e1:06:5d:ad:a4:d7:36:
         99:61:cb:3d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUzMTkxMTAvBgNVBAUTKDZDRkQ1NkE3N0VBRDlFMTU5QkNCMThFQjZERTg2Mjcz
NTA5MUI1NEEwHhcNMjYwMTIwMTYxMzU0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MTc0Mi01YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsP1cnyaIPx2eBpl41X5B3bR4gQBcqxXPzv2Ae7AyggrXCvRCNuZRJwolORQM
78IQv8H2m1G4omlPL7/QWTzEoTtgwSvFkEHIMUqaeU+Eeiqwcu+tMug7yxqSSjG9
9CsR4+pBPAj0U3PGZQ6UjcHNBSjG5FGyc02tPqBeI3MfqD9hRzPL//k3M5atG9DN
tf9EU+tNZPvlWuhetuDMXsoa0uLIdJuA+9wC/YZYMbRvwvezkqvLBzQPrYt0DkI8
mstWIRIlOtTNaBEonTglzcRPtLbxWSO0+MQ7jdSxVm1mn4gyK0kL4DF+jB4NpR9z
g60lOTIR49q1oiCcK5DKP7zWEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNuIGNs7
7657O8d8BmKcddmw6lTcMB8GA1UdIwQYMBaAFGz9Vqd+rZ4Vm8sY623oYnNQkbVK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMxOS84NjhERDY1NjhD
MjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5oV2J5eGpyYmVoaWMxQ1J0
VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JQMVdwMzZ0bmhXYnl4anJiZWhpYzFDUnRVby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEUzMTkvODY4REQ2NTY4QzI2MTFFN0JDMDZDNDRFQzRGOUFFMDIvNERGQjVGRTRC
NzkyMTFFRkE3MEU3QzRDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0b7MA0GCSqGSIb3DQEBCwUAA4IBAQArgJTkDdKtoDq555YEjLXQ
lm7Aoulb5UBMplYsm40e7jZ8ctfLB5oQor2zesy9+SxTl5J8WrEkFcd76/8b8Tp7
1WVu3fVwJ5Oy280N2MjSUPsKf8DXmlXXRO/MEtfIR+YlXvPZwlOJ2jkCqM9fST45
CQ8EJVQ+jMJFGAPbJ4Zlkys9rKDDJD28JTaO8tm6BCYWMreGMVYa4EWhXMesHjs0
BAVBmuNaNrb+eZcwe5wByrhrRSX0bdsayV0qMLiu0dOKJhWz+BM70e0KpLyVDGwK
kEuabH4/WdT2/llAbS1Y6e8Si8O9uYbbLWNt0r/nAHKD+Q8dBuEGXa2k1zaZYcs9
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:00 2026 by rpki-client