Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/CB6BD978592811E9AD7CEF21C4F9AE02.roa
File:                     CB6BD978592811E9AD7CEF21C4F9AE02.roa (raw, json)
Hash identifier:          Q2AEf6i72VsxMPqUwVozRq1rBCIiecpepY5TE7lgfJc=
Subject key identifier:   3F:45:6E:EA:16:34:22:D5:A2:15:C2:A0:BE:FC:E4:A7:CE:CA:16:05
Certificate issuer:       /CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
Certificate serial:       1051
Authority key identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/CB6BD978592811E9AD7CEF21C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:32:28 +0000
ROA not before:           Wed 03 Dec 2025 07:45:48 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138601
IP address blocks:        103.134.88.0/22 maxlen: 24
                          103.244.247.0/24 maxlen: 24
                          123.176.56.0/24 maxlen: 24
                          123.176.58.0/24 maxlen: 24
                          202.129.193.0/24 maxlen: 24
                          2404:61c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl
                          rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4177 (0x1051)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F46B, serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
        Validity
            Not Before: Dec  3 07:45:48 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a45c0c-0ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:53:c6:93:f9:62:a2:d3:38:38:60:9b:2c:7e:
                    e8:3d:49:dd:80:d4:52:a3:15:19:06:ed:22:83:80:
                    8d:90:94:9e:a8:ff:71:cb:b3:ab:8e:bf:27:e6:f3:
                    2e:bb:22:80:43:19:f5:8b:b9:d4:cb:d5:eb:89:72:
                    f4:ce:7d:21:7f:5c:58:98:e9:2e:dc:16:ef:54:18:
                    9c:6e:97:4b:d9:82:e4:f8:b9:38:89:06:70:56:ba:
                    cc:96:1d:e1:32:84:a5:11:57:5e:5a:5f:38:c7:90:
                    ed:fe:97:d8:6a:84:51:6a:3b:22:e0:df:84:45:46:
                    5b:17:af:ee:ed:7a:8f:72:dc:7c:08:f5:30:04:44:
                    1c:5c:c5:1d:34:c5:67:b7:66:80:9e:c8:69:60:3b:
                    95:5c:4b:e5:94:60:10:30:ad:74:cf:b3:eb:de:d3:
                    a7:2a:c1:32:3e:15:85:5b:b4:bf:99:e3:9b:ca:22:
                    77:9e:cd:ab:96:51:7c:47:be:57:99:60:e2:88:34:
                    09:08:e3:06:36:f6:6a:50:b1:bc:c4:b7:c8:f5:38:
                    42:4f:3b:5c:45:bc:6e:ba:f8:6b:16:33:0d:09:1d:
                    fb:4b:fa:5c:a7:33:d1:c6:70:7d:3a:f4:9f:01:a3:
                    ee:c7:00:20:f9:56:5f:eb:af:03:eb:7d:0f:c3:cc:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:45:6E:EA:16:34:22:D5:A2:15:C2:A0:BE:FC:E4:A7:CE:CA:16:05
            X509v3 Authority Key Identifier:
                keyid:14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/CB6BD978592811E9AD7CEF21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.88.0/22
                  103.244.247.0/24
                  123.176.56.0/24
                  123.176.58.0/24
                  202.129.193.0/24
                IPv6:
                  2404:61c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:77:60:da:c2:04:47:68:9f:d0:b4:c1:e4:92:cd:56:c7:94:
         8b:46:d3:2b:f6:f9:e6:e8:e9:ec:92:42:bc:61:e9:3d:ed:c9:
         a9:c5:b6:e2:f0:30:b1:fa:48:f6:e2:8d:36:13:88:9b:7c:a1:
         8c:da:00:bc:cf:92:ba:a4:6c:d3:8e:90:16:3e:c2:7f:1a:a9:
         b2:55:64:f4:89:a4:0b:16:45:03:4a:e0:fb:37:05:d4:a8:f5:
         0d:aa:11:e3:d4:a0:5a:62:ea:4e:99:f7:7e:3e:05:80:8e:80:
         c6:ed:2f:72:68:bb:e5:83:23:17:eb:d3:80:c7:5b:f0:52:84:
         10:9d:ae:c0:f3:5b:75:a4:26:b9:4b:03:08:93:6a:df:77:cd:
         ea:b3:3b:4e:b0:c6:0f:0c:cb:cc:57:1f:91:27:45:3f:e6:61:
         c1:5e:71:cf:0f:e8:6f:12:d4:fa:81:23:46:0a:0e:4e:2c:4b:
         35:49:23:45:f8:92:68:50:ba:4a:11:49:76:96:09:91:cd:49:
         34:f5:89:32:d3:18:08:5e:10:ef:b9:0c:90:70:d0:96:52:31:
         77:0b:39:c6:cc:25:8f:cc:d2:80:00:b3:95:0c:c2:ee:22:12:
         ff:27:6f:6c:be:27:17:99:93:fa:ee:d1:c1:df:4a:d3:33:23:
         86:47:f9:fd
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgICEFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY0NkIxMTAvBgNVBAUTKDE0QkZBQjc5NDI2RTNEMjJCRUMzRkM2MUVFNDMyRkVB
MDgyNzI5NDYwHhcNMjUxMjAzMDc0NTQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWMwYy0wY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAplPGk/liotM4OGCbLH7oPUndgNRSoxUZBu0ig4CNkJSeqP9xy7Orjr8n5vMu
uyKAQxn1i7nUy9XriXL0zn0hf1xYmOku3BbvVBicbpdL2YLk+Lk4iQZwVrrMlh3h
MoSlEVdeWl84x5Dt/pfYaoRRajsi4N+ERUZbF6/u7XqPctx8CPUwBEQcXMUdNMVn
t2aAnshpYDuVXEvllGAQMK10z7Pr3tOnKsEyPhWFW7S/meObyiJ3ns2rllF8R75X
mWDiiDQJCOMGNvZqULG8xLfI9ThCTztcRbxuuvhrFjMNCR37S/pcpzPRxnB9OvSf
AaPuxwAg+VZf668D630Pw8zFmwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFD9FbuoW
NCLVohXCoL785KfOyhYFMB8GA1UdIwQYMBaAFBS/q3lCbj0ivsP8Ye5DL+oIJylG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjQ2Qi81NkVFQkFFODU5
MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVKdVBTSy13X3hoN2tNdjZnZ25L
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZMLXJlVUp1UFNLLXdfeGg3a012NmdnbktVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUY0NkIvNTZFRUJBRTg1OTI4MTFFOTlGRkY3QTIxQzRGOUFFMDIvQ0I2QkQ5Nzg1
OTI4MTFFOUFEN0NFRjIxQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk
BAIAATAeAwQCZ4ZYAwQAZ/T3AwQAe7A4AwQAe7A6AwQAyoHBMA0EAgACMAcDBQAk
BGHAMA0GCSqGSIb3DQEBCwUAA4IBAQCrd2DawgRHaJ/QtMHkks1Wx5SLRtMr9vnm
6OnskkK8Yek97cmpxbbi8DCx+kj24o02E4ibfKGM2gC8z5K6pGzTjpAWPsJ/Gqmy
VWT0iaQLFkUDSuD7NwXUqPUNqhHj1KBaYupOmfd+PgWAjoDG7S9yaLvlgyMX69OA
x1vwUoQQna7A81t1pCa5SwMIk2rfd83qsztOsMYPDMvMVx+RJ0U/5mHBXnHPD+hv
EtT6gSNGCg5OLEs1SSNF+JJoULpKEUl2lgmRzUk09Yky0xgIXhDvuQyQcNCWUjF3
CznGzCWPzNKAALOVDMLuIhL/J29svicXmZP67tHB30rTMyOGR/n9
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:06 2026 by rpki-client