Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa
File:                     F3B716768F2F11EE86964D62C4F9AE02.roa (raw, json)
Hash identifier:          lzyN5MNSEZnDugz21KoEYtAxenHtxzzxEPsQqNcKc4k=
Subject key identifier:   18:5D:1D:FE:9B:BD:39:CB:FF:AF:0F:04:FD:E7:28:CD:7A:1F:BA:8A
Certificate issuer:       /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial:       02A8
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa
Signing time:             Sun 03 May 2026 02:34:08 +0000
ROA not before:           Sun 03 May 2026 02:34:08 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140721
IP address blocks:        103.152.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
                          rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
        Validity
            Not Before: May  3 02:34:08 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69f6b420-5921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:2c:1f:8a:e9:33:87:ff:6e:36:53:2e:22:
                    f2:89:20:0b:e9:b4:c2:6b:e0:da:90:3a:38:c6:7a:
                    69:3f:f4:fb:dd:a6:3d:a1:6e:00:0c:76:4d:17:60:
                    fc:33:4c:8b:16:ea:b0:6e:27:98:6a:71:dc:25:98:
                    79:31:53:cb:8c:94:ab:8c:85:63:38:00:16:a7:84:
                    a3:a2:a5:37:a9:c1:cc:21:20:ad:42:27:c3:f8:c3:
                    5d:bb:8b:f6:f8:1a:93:47:35:50:20:7e:fa:6d:c6:
                    f9:7b:37:60:bf:31:c1:5f:a0:58:67:ab:7f:90:3b:
                    e5:11:1c:d6:66:c4:ee:3a:22:ef:c8:e5:ef:f6:5f:
                    dc:f6:65:4f:50:1f:28:95:33:61:1c:4b:91:96:38:
                    36:2e:c8:ab:d0:a2:1c:e4:b6:dd:6a:47:2a:96:e5:
                    76:c3:a9:7e:64:03:4f:b8:85:56:de:58:0a:6b:42:
                    33:89:b0:73:b3:9a:f7:75:07:a3:88:7d:32:3f:4d:
                    47:ca:ad:98:64:93:17:82:19:47:e0:be:56:5e:aa:
                    49:cf:df:96:e1:3d:d0:44:f4:51:91:6b:ca:fd:24:
                    b4:2f:92:87:bd:45:2c:6c:93:a6:14:b8:74:e3:ed:
                    92:46:f4:3d:60:2b:4b:22:92:2a:7b:8c:d0:cc:98:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5D:1D:FE:9B:BD:39:CB:FF:AF:0F:04:FD:E7:28:CD:7A:1F:BA:8A
            X509v3 Authority Key Identifier:
                keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:b3:8d:8b:14:d8:be:14:cb:22:c5:4f:38:90:be:64:17:
         5f:86:ba:b2:a1:82:2d:e2:d0:8b:ee:a9:53:c0:f8:0d:6d:f5:
         8b:42:09:dc:7f:a8:6b:40:89:c9:24:1c:90:4c:73:f8:6f:b4:
         92:67:61:d5:3f:9b:54:dc:81:72:b4:fb:03:1a:e2:69:29:b6:
         0c:31:e2:e5:69:3b:6f:44:48:88:f4:ad:9f:a1:c4:f0:9e:32:
         d5:55:3f:45:3d:af:1f:49:0a:fc:9c:d2:5e:c5:6b:11:18:f2:
         18:c3:8b:3e:4c:18:16:37:20:1b:3d:56:bc:9e:40:be:98:15:
         69:f4:d7:f4:bd:be:62:01:4c:7d:c7:f7:d9:73:d5:28:0a:00:
         63:ee:25:da:ef:26:39:6a:c0:27:b7:76:6d:32:6b:a7:2e:4b:
         09:31:9e:20:be:3a:42:38:0a:b4:af:5a:ab:a7:85:bc:dd:41:
         f4:ad:36:8b:a6:ac:b8:cc:07:e2:2b:65:49:cb:c6:04:38:d0:
         4d:ab:1b:a8:ba:70:94:63:7e:6d:7f:86:4f:fc:8f:49:44:8b:
         8c:3b:db:c5:c5:78:02:8c:5b:0d:e8:0f:4f:c1:c9:1f:4e:28:
         1b:9d:1f:dd:71:5e:5c:1f:a5:e6:eb:96:b7:63:96:12:b1:42:
         4e:e3:39:0f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB
NjJDNEVEQTkwHhcNMjYwNTAzMDIzNDA4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY2YjQyMC01OTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2PksH4rpM4f/bjZTLiLyiSAL6bTCa+DakDo4xnppP/T73aY9oW4ADHZNF2D8
M0yLFuqwbieYanHcJZh5MVPLjJSrjIVjOAAWp4SjoqU3qcHMISCtQifD+MNdu4v2
+BqTRzVQIH76bcb5ezdgvzHBX6BYZ6t/kDvlERzWZsTuOiLvyOXv9l/c9mVPUB8o
lTNhHEuRljg2Lsir0KIc5LbdakcqluV2w6l+ZANPuIVW3lgKa0IzibBzs5r3dQej
iH0yP01Hyq2YZJMXghlH4L5WXqpJz9+W4T3QRPRRkWvK/SS0L5KHvUUsbJOmFLh0
4+2SRvQ9YCtLIpIqe4zQzJjlMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBhdHf6b
vTnL/68PBP3nKM16H7qKMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD
MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3
YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REUyQUUvQzcwRkVBMkE4QzIwMTFFREFERDVDODA5QzRGOUFFMDIvRjNCNzE2NzY4
RjJGMTFFRTg2OTY0RDYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5grMA0GCSqGSIb3DQEBCwUAA4IBAQBU6LONixTYvhTLIsVPOJC+
ZBdfhrqyoYIt4tCL7qlTwPgNbfWLQgncf6hrQInJJByQTHP4b7SSZ2HVP5tU3IFy
tPsDGuJpKbYMMeLlaTtvREiI9K2focTwnjLVVT9FPa8fSQr8nNJexWsRGPIYw4s+
TBgWNyAbPVa8nkC+mBVp9Nf0vb5iAUx9x/fZc9UoCgBj7iXa7yY5asAnt3ZtMmun
LksJMZ4gvjpCOAq0r1qrp4W83UH0rTaLpqy4zAfiK2VJy8YEONBNqxuounCUY35t
f4ZP/I9JRIuMO9vFxXgCjFsN6A9PwckfTigbnR/dcV5cH6Xm65a3Y5YSsUJO4zkP
-----END CERTIFICATE-----
Generated at Wed May 13 08:17:25 2026 by rpki-client