Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/EEC7D1CAA6C911EA8079FD17C4F9AE02.roa
File:                     EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (raw, json)
Hash identifier:          TBAaKtqT6P0ZL94ya5hEsalq4rRbeHQQPW8oTHhvKeU=
Subject key identifier:   E5:10:D6:AB:82:58:6B:95:C7:E7:B2:3F:9F:2A:B7:E3:16:C3:3F:8B
Certificate issuer:       /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
Certificate serial:       09C3
Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/EEC7D1CAA6C911EA8079FD17C4F9AE02.roa
Signing time:             Fri 08 May 2026 20:25:25 +0000
ROA not before:           Fri 08 May 2026 20:25:25 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     4049
IP address blocks:        103.151.48.0/24 maxlen: 24
                          2001:df3:a780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl
                          rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2499 (0x9c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
        Validity
            Not Before: May  8 20:25:25 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=69fe46b5-78b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:20:85:4c:4d:fe:f9:11:24:96:fc:71:5d:
                    65:57:b2:41:6d:3e:1d:16:9c:19:15:93:91:25:4d:
                    d9:c6:30:6b:3d:e8:c3:09:f9:7a:9d:31:fa:87:e3:
                    1f:bc:24:8f:21:84:43:9d:0a:18:d0:60:6b:08:9e:
                    c8:59:cf:74:d3:dd:86:53:b8:ec:df:55:b3:d2:cd:
                    8f:4a:0e:6a:b8:20:8e:e4:1d:ec:f9:9b:97:c7:93:
                    34:b7:1d:38:bb:67:10:3b:da:4f:5e:e2:a5:0a:d6:
                    62:c1:be:97:77:d2:5b:d0:41:73:1c:ea:7d:0f:1d:
                    66:08:08:ef:85:7d:91:d9:4e:9e:95:35:2d:45:2b:
                    59:74:f3:c5:a1:82:40:10:20:03:b3:66:09:34:12:
                    43:97:e4:f1:f0:5b:1e:17:b0:8e:01:85:dd:4f:14:
                    31:ad:cd:6c:6c:2e:ce:dc:d3:06:76:b1:e6:3e:6a:
                    88:5b:09:ce:b7:39:6b:b2:7d:d8:dd:a4:44:a2:44:
                    40:67:2e:ba:0b:81:2f:92:36:44:80:b6:1e:41:56:
                    d9:86:0d:56:76:02:57:48:62:32:ed:9c:f5:14:e3:
                    58:22:bf:12:56:7d:8f:89:dd:c1:11:b0:bb:c9:c9:
                    ad:61:12:fd:53:f0:d4:c3:a5:d8:fe:6d:a2:4c:1c:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:10:D6:AB:82:58:6B:95:C7:E7:B2:3F:9F:2A:B7:E3:16:C3:3F:8B
            X509v3 Authority Key Identifier:
                keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/EEC7D1CAA6C911EA8079FD17C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.48.0/24
                IPv6:
                  2001:df3:a780::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:84:aa:7c:a6:75:01:19:f2:c6:c4:21:2d:41:9e:ba:3f:2e:
         4b:9b:9b:75:56:36:33:80:f0:23:8d:76:0f:65:1c:3d:27:20:
         06:fd:4a:81:65:bb:47:8f:1f:0c:91:33:c4:f1:bd:bf:6f:03:
         b8:a0:76:36:c0:c7:6f:15:6f:96:56:28:23:03:ed:0e:c0:0c:
         00:a2:eb:7e:07:10:4c:24:50:90:9d:3c:66:dc:9d:3b:4c:fc:
         22:ef:8b:11:46:30:40:72:18:df:c3:25:6a:e5:e9:8f:74:9e:
         3a:a7:21:0c:87:30:87:7d:87:b4:ef:7a:40:50:14:72:ac:91:
         ae:99:1d:e6:f9:00:0f:b5:7e:67:c8:38:e4:ae:54:1d:53:f1:
         9e:1a:68:68:1f:23:b4:fe:d3:26:0b:c7:00:ba:28:07:95:77:
         7d:a1:04:a4:0e:48:47:09:70:ba:9b:b6:fe:eb:0f:3f:05:d1:
         b3:af:b8:c5:8f:37:6e:17:a2:22:66:85:27:e4:cf:37:22:7e:
         02:c6:ef:a7:1a:39:2c:7b:9c:17:bf:fc:74:5a:56:31:c8:63:
         eb:16:59:76:37:ae:5d:05:30:82:e2:b8:a8:94:f0:3d:78:59:
         96:02:e0:01:6e:67:6c:77:ec:ec:2d:9b:c3:a6:a2:5f:02:12:
         4e:e5:25:2b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI4MjQxMTAvBgNVBAUTKEJCREI3QkQwQjhFOTY1NkU3MUUxOTk0RTE5NjE4NzQ1
NzA4RkNFRjEwHhcNMjYwNTA4MjAyNTI1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZlNDZiNS03OGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2AghUxN/vkRJJb8cV1lV7JBbT4dFpwZFZORJU3ZxjBrPejDCfl6nTH6h+Mf
vCSPIYRDnQoY0GBrCJ7IWc90092GU7js31Wz0s2PSg5quCCO5B3s+ZuXx5M0tx04
u2cQO9pPXuKlCtZiwb6Xd9Jb0EFzHOp9Dx1mCAjvhX2R2U6elTUtRStZdPPFoYJA
ECADs2YJNBJDl+Tx8FseF7COAYXdTxQxrc1sbC7O3NMGdrHmPmqIWwnOtzlrsn3Y
3aREokRAZy66C4EvkjZEgLYeQVbZhg1WdgJXSGIy7Zz1FONYIr8SVn2Pid3BEbC7
ycmtYRL9U/DUw6XY/m2iTBwXXwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOUQ1quC
WGuVx+eyP58qt+MWwz+LMB8GA1UdIwQYMBaAFLvbe9C46WVuceGZThlhh0Vwj87x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjgyNC83MzRCQUQxNkE2
QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpXNXg0WmxPR1dHSFJYQ1B6
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U5dDcwTGpwWlc1eDRabE9HV0dIUlhDUHp2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUI4MjQvNzM0QkFEMTZBNkM3MTFFQUJEMzA1MDEwQzRGOUFFMDIvRUVDN0QxQ0FB
NkM5MTFFQTgwNzlGRDE3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ5cwMA8EAgACMAkDBwAgAQ3zp4AwDQYJKoZIhvcNAQELBQADggEB
AAiEqnymdQEZ8sbEIS1Bnro/Lkubm3VWNjOA8CONdg9lHD0nIAb9SoFlu0ePHwyR
M8Txvb9vA7igdjbAx28Vb5ZWKCMD7Q7ADACi634HEEwkUJCdPGbcnTtM/CLvixFG
MEByGN/DJWrl6Y90njqnIQyHMId9h7TvekBQFHKska6ZHeb5AA+1fmfIOOSuVB1T
8Z4aaGgfI7T+0yYLxwC6KAeVd32hBKQOSEcJcLqbtv7rDz8F0bOvuMWPN24XoiJm
hSfkzzcifgLG76caOSx7nBe//HRaVjHIY+sWWXY3rl0FMILiuKiU8D14WZYC4AFu
Z2x37Owtm8Omol8CEk7lJSs=
-----END CERTIFICATE-----
Generated at Wed May 13 04:00:36 2026 by rpki-client