Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/3D93BEB65E6611EEA526DB11C4F9AE02.roa
File:                     3D93BEB65E6611EEA526DB11C4F9AE02.roa (raw, json)
Hash identifier:          peVyEzO9gNc8ebAUe7uR3/+3YYWj5qCyfYGMzhFmq1o=
Subject key identifier:   63:43:17:39:DE:AB:C0:E7:57:9A:E3:51:EB:D8:1B:88:65:40:BA:F5
Certificate issuer:       /CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
Certificate serial:       0241
Authority key identifier: 69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/3D93BEB65E6611EEA526DB11C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:32:07 +0000
ROA not before:           Tue 07 Jan 2025 03:06:25 +0000
ROA not after:            Fri 31 Mar 2028 00:00:00 +0000
asID:                     141400
IP address blocks:        163.233.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl
                          rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91105F6, serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
        Validity
            Not Before: Jan  7 03:06:25 2025 GMT
            Not After : Mar 31 00:00:00 2028 GMT
        Subject: CN=69a3dd67-1527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e3:a5:31:07:d6:89:c5:62:98:c4:13:32:e2:
                    31:3e:c2:84:b6:a4:50:09:22:72:36:d0:e9:b5:fa:
                    4a:f0:6a:1a:66:9a:85:de:f9:12:ad:7d:95:d8:47:
                    15:bb:3d:e6:97:22:6d:eb:4e:2c:40:fa:71:e1:52:
                    de:17:24:75:ff:6f:f7:78:af:8a:f1:29:27:c7:00:
                    f7:e2:10:64:45:0b:c8:7e:15:a5:a3:c3:d0:d4:eb:
                    5c:57:6c:2c:ca:2d:3c:5f:18:8e:ec:9b:be:61:7a:
                    08:2a:c6:9d:aa:46:2b:71:5a:13:cb:c0:fa:9d:e1:
                    03:b9:35:e8:d7:aa:d6:7b:35:5d:fb:7d:d5:03:16:
                    32:e7:dd:04:38:5c:43:b6:12:d1:28:70:a8:2c:c3:
                    c2:fe:c4:d8:3a:33:bd:5e:f5:56:bb:ce:90:c3:9c:
                    61:22:e8:40:61:c9:b2:11:ba:12:57:23:d5:2f:70:
                    f4:4f:38:4c:25:1d:b7:ef:c3:59:2b:ec:d0:16:d7:
                    3b:e1:49:fd:c9:d7:ae:d7:06:fa:83:c1:8e:84:ec:
                    11:92:e4:86:39:60:28:f2:ba:ef:f2:33:46:4c:f1:
                    8c:f7:36:7c:5e:a9:49:08:ad:81:7f:cd:21:69:5d:
                    16:a9:ce:d1:13:10:2f:cf:68:65:00:f6:b1:78:73:
                    d7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:43:17:39:DE:AB:C0:E7:57:9A:E3:51:EB:D8:1B:88:65:40:BA:F5
            X509v3 Authority Key Identifier:
                keyid:69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/3D93BEB65E6611EEA526DB11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.233.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:b3:a6:a7:ed:d6:96:e7:e5:a3:db:08:ec:ba:19:50:3d:5d:
         0b:46:65:1f:93:74:c4:bd:0c:3d:ea:bf:7f:f6:74:b6:08:1f:
         95:3a:36:30:54:8a:25:7e:1b:06:1b:e6:89:69:4d:29:65:ba:
         30:26:3e:f0:cc:4a:86:82:ac:ce:d9:91:31:10:78:d3:63:8b:
         1c:75:d9:f5:69:0f:52:84:40:5f:b9:cf:1d:4e:7c:21:7e:61:
         59:ee:8e:90:32:2d:7e:b4:9a:a9:37:8a:ef:49:45:98:58:80:
         00:80:1e:56:6c:07:02:c8:8d:f2:88:7d:87:40:a3:26:80:44:
         84:5a:5f:95:57:72:7f:17:5e:57:30:a1:e8:7e:4e:88:f7:03:
         3d:a7:97:ec:7b:58:44:1c:f8:4a:c3:78:be:ba:10:71:a5:31:
         b7:f6:6b:34:93:2a:79:e3:f5:30:79:31:6e:e9:a3:54:6c:00:
         fe:d1:16:f8:4a:41:0e:85:7b:ee:c7:9c:2d:47:dc:d4:50:77:
         69:8e:c9:e9:1e:8c:53:db:72:f0:4f:bd:ed:c2:d3:ef:5e:58:
         87:69:8a:8d:ad:ff:aa:59:46:1a:95:6b:28:77:91:64:e4:58:
         05:f5:e1:91:34:a0:df:21:08:3f:f2:9d:64:fa:d3:17:28:b7:
         58:98:8b:34
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA1RjYxMTAvBgNVBAUTKDY5QzU2RTI2RDc2NEYxQUU0RjQ2ODYyOEU1NzUzMUQz
NzM0QUMwMjcwHhcNMjUwMTA3MDMwNjI1WhcNMjgwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZGQ2Ny0xNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk+OlMQfWicVimMQTMuIxPsKEtqRQCSJyNtDptfpK8GoaZpqF3vkSrX2V2EcV
uz3mlyJt604sQPpx4VLeFyR1/2/3eK+K8SknxwD34hBkRQvIfhWlo8PQ1OtcV2ws
yi08XxiO7Ju+YXoIKsadqkYrcVoTy8D6neEDuTXo16rWezVd+33VAxYy590EOFxD
thLRKHCoLMPC/sTYOjO9XvVWu86Qw5xhIuhAYcmyEboSVyPVL3D0TzhMJR2378NZ
K+zQFtc74Un9ydeu1wb6g8GOhOwRkuSGOWAo8rrv8jNGTPGM9zZ8XqlJCK2Bf80h
aV0Wqc7RExAvz2hlAPaxeHPXuwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFGNDFzne
q8DnV5rjUevYG4hlQLr1MB8GA1UdIwQYMBaAFGnFbibXZPGuT0aGKOV1MdNzSsAn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDVGNi9FODIwMDI2QUIz
RkIxMUVEQkJEQjMwMjJDNEY5QUUwMi9hY1Z1SnRkazhhNVBSb1lvNVhVeDAzTkt3
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FjVnVKdGRrOGE1UFJvWW81WFV4MDNOS3dDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA1RjYvRTgyMDAyNkFCM0ZCMTFFREJCREIzMDIyQzRGOUFFMDIvM0Q5M0JFQjY1
RTY2MTFFRUE1MjZEQjExQzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAo+kwDQYJKoZIhvcNAQELBQADggEBAAOzpqft1pbn5aPbCOy6GVA9
XQtGZR+TdMS9DD3qv3/2dLYIH5U6NjBUiiV+GwYb5olpTSllujAmPvDMSoaCrM7Z
kTEQeNNjixx12fVpD1KEQF+5zx1OfCF+YVnujpAyLX60mqk3iu9JRZhYgACAHlZs
BwLIjfKIfYdAoyaARIRaX5VXcn8XXlcwoeh+Toj3Az2nl+x7WEQc+ErDeL66EHGl
Mbf2azSTKnnj9TB5MW7po1RsAP7RFvhKQQ6Fe+7HnC1H3NRQd2mOyekejFPbcvBP
ve3C0+9eWIdpio2t/6pZRhqVayh3kWTkWAX14ZE0oN8hCD/ynWT60xcot1iYizQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:40 2026 by rpki-client