Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/412DD396EE3B11EC8EE6DA63C4F9AE02.roa
File:                     412DD396EE3B11EC8EE6DA63C4F9AE02.roa (raw, json)
Hash identifier:          xUdGjut85J8auqIyCk2ULhlxGhkzVM/KegV60so15Xw=
Subject key identifier:   B1:D1:46:D0:6F:2B:69:4C:A7:44:A8:7F:15:B7:E3:11:C6:F1:DF:C4
Certificate issuer:       /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Certificate serial:       0358
Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/412DD396EE3B11EC8EE6DA63C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:52:28 +0000
ROA not before:           Thu 25 Dec 2025 00:21:15 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     149027
IP address blocks:        103.176.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
                          rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
        Validity
            Not Before: Dec 25 00:21:15 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4368c-a42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:f6:0d:31:7b:40:13:f7:58:3d:46:23:86:
                    65:aa:a8:00:b4:f7:a3:5b:73:68:9c:6d:4f:f0:29:
                    ff:a0:62:a2:8b:92:cf:76:e6:07:df:a0:ce:56:7f:
                    fa:96:f8:b3:0c:22:84:d4:cc:b1:c8:70:86:0c:0c:
                    c1:28:c9:73:1f:60:4e:c6:58:e6:a4:7c:2e:7d:9f:
                    1c:2d:25:41:d5:e4:3b:c0:6f:fd:f0:24:0c:98:c4:
                    18:cf:3c:c3:36:c4:5a:23:05:93:21:d3:ba:9e:d3:
                    20:5b:47:cc:a2:3d:8e:69:17:4c:29:d3:0b:b2:e4:
                    66:71:68:c5:90:f1:73:cd:51:4c:4e:6f:db:f9:68:
                    4a:90:0e:c7:73:7f:02:f1:83:58:6e:5e:0c:af:a1:
                    8e:63:04:b9:34:9f:ab:d1:ee:a0:1e:ea:60:d5:ec:
                    bb:73:90:cd:53:61:25:e3:af:3d:67:5d:9b:50:57:
                    46:7f:3d:0e:59:70:23:ca:52:11:f3:f8:df:d8:07:
                    13:6c:99:10:81:cd:01:94:30:fa:20:fc:30:47:ee:
                    cc:71:ca:a8:8a:de:a4:a7:8f:fc:7f:83:9f:3a:7a:
                    49:e0:8b:91:8c:4b:53:34:70:23:e6:88:73:fc:6a:
                    b1:49:d5:c8:b3:2c:cd:06:a9:6f:38:81:8b:c5:ca:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D1:46:D0:6F:2B:69:4C:A7:44:A8:7F:15:B7:E3:11:C6:F1:DF:C4
            X509v3 Authority Key Identifier:
                keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/412DD396EE3B11EC8EE6DA63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a8:51:d5:2b:2f:e4:0a:8b:ff:e3:de:3f:2e:9d:fe:6d:16:
         02:c9:5f:b6:9a:bd:3a:e5:c3:67:86:9f:af:a5:97:d2:3a:53:
         95:59:cf:01:8d:9e:95:73:db:d1:21:3a:9a:c8:da:7f:cc:bc:
         43:8e:33:76:99:1f:8e:ca:05:e0:51:e3:49:71:f2:fa:14:a5:
         e9:4c:77:57:7a:de:13:af:8c:95:67:b5:47:49:26:bc:d6:d7:
         18:27:fc:d5:21:ab:92:b8:c9:5d:49:1f:71:3c:0e:9f:6c:8b:
         c4:06:e4:7a:70:8f:fb:3d:74:15:d2:f1:e3:3f:e3:d2:2c:34:
         50:74:9c:10:b9:67:19:ae:55:4d:1f:b5:6f:61:90:c2:74:71:
         ed:2d:f5:7b:37:68:13:81:85:ba:98:35:0a:35:f5:b9:4e:c2:
         f0:3d:53:02:78:56:12:d1:2b:99:33:5d:40:ab:fc:fe:ed:bf:
         95:f6:a1:32:6b:bd:f7:5a:18:12:15:33:aa:90:a3:40:06:85:
         0a:24:9f:bf:c4:2d:90:84:8d:d3:20:bd:1e:6a:7a:e0:27:07:
         1e:ee:7c:1b:45:ec:71:6a:99:fe:69:eb:cf:44:bb:1b:01:22:
         08:38:a1:f4:c2:c8:ad:6a:63:35:8a:2c:2a:c2:27:a4:0c:f5:
         fe:95:c2:65
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc1RjExMTAvBgNVBAUTKDUyNUVBMjZCNkE2MTdFNUFBRkMwNTQyM0NDRTU4OERF
MTlFQzU4NDcwHhcNMjUxMjI1MDAyMTE1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzY4Yy1hNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArw32DTF7QBP3WD1GI4ZlqqgAtPejW3NonG1P8Cn/oGKii5LPduYH36DOVn/6
lvizDCKE1MyxyHCGDAzBKMlzH2BOxljmpHwufZ8cLSVB1eQ7wG/98CQMmMQYzzzD
NsRaIwWTIdO6ntMgW0fMoj2OaRdMKdMLsuRmcWjFkPFzzVFMTm/b+WhKkA7Hc38C
8YNYbl4Mr6GOYwS5NJ+r0e6gHupg1ey7c5DNU2El4689Z12bUFdGfz0OWXAjylIR
8/jf2AcTbJkQgc0BlDD6IPwwR+7Mccqoit6kp4/8f4OfOnpJ4IuRjEtTNHAj5ohz
/GqxSdXIsyzNBqlvOIGLxco8+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLHRRtBv
K2lMp0SofxW34xHG8d/EMB8GA1UdIwQYMBaAFFJeomtqYX5ar8BUI8zliN4Z7FhH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVGMS9DQjY2MzMwQUVF
MkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJwaGZscXZ3RlFqek9XSTNobnNX
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VsNmlhMnBoZmxxdndGUWp6T1dJM2huc1dFYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTc1RjEvQ0I2NjMzMEFFRTJDMTFFQzk1NkIyQzRGQzRGOUFFMDIvNDEyREQzOTZF
RTNCMTFFQzhFRTZEQTYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7DiMA0GCSqGSIb3DQEBCwUAA4IBAQChqFHVKy/kCov/494/Lp3+
bRYCyV+2mr065cNnhp+vpZfSOlOVWc8BjZ6Vc9vRITqayNp/zLxDjjN2mR+OygXg
UeNJcfL6FKXpTHdXet4Tr4yVZ7VHSSa81tcYJ/zVIauSuMldSR9xPA6fbIvEBuR6
cI/7PXQV0vHjP+PSLDRQdJwQuWcZrlVNH7VvYZDCdHHtLfV7N2gTgYW6mDUKNfW5
TsLwPVMCeFYS0SuZM11Aq/z+7b+V9qEya733WhgSFTOqkKNABoUKJJ+/xC2QhI3T
IL0eanrgJwce7nwbRexxapn+aevPRLsbASIIOKH0wsitamM1iiwqwiekDPX+lcJl
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:39:51 2026 by rpki-client