Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/A7493DA6145611ECAA3B5769C4F9AE02.roa
File:                     A7493DA6145611ECAA3B5769C4F9AE02.roa (raw, json)
Hash identifier:          9No5R6QsEqMvq6ApWij+X8OuZMaVXyEFFrhes/cBm9k=
Subject key identifier:   EE:52:81:3F:5C:AB:EC:FB:FF:DA:EA:31:C9:B0:6C:A3:8E:37:D4:C0
Certificate issuer:       /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
Certificate serial:       0584
Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/A7493DA6145611ECAA3B5769C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:41:24 +0000
ROA not before:           Tue 30 Sep 2025 23:56:07 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147022
IP address blocks:        103.173.30.0/23 maxlen: 24
                          2001:df7:8b80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl
                          rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
        Validity
            Not Before: Sep 30 23:56:07 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a433f4-3445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:b8:a4:fa:5d:15:98:9c:d4:9b:ce:53:10:
                    72:91:3e:c1:c3:e6:6a:51:96:a8:79:73:54:36:9f:
                    ca:70:9d:a8:0c:a7:d0:8f:74:93:e2:bf:e6:ec:17:
                    3c:61:ff:63:86:00:68:a4:fc:ce:90:51:c5:77:9f:
                    eb:6d:2f:6d:1d:c3:1f:a5:01:b0:6e:4e:2b:0d:5c:
                    28:0b:61:56:4a:b6:5e:6d:c1:b1:5f:9e:65:b1:30:
                    58:f1:c7:45:0f:68:a9:a8:65:89:42:b8:74:10:b5:
                    69:ab:13:84:01:d3:12:b6:0c:ab:af:97:73:b9:22:
                    b0:ac:32:c1:7f:71:e4:cf:1b:dc:62:7c:22:a3:e4:
                    9f:4f:b8:23:32:59:d2:56:08:e2:b5:91:70:c2:69:
                    0b:94:65:49:f9:23:e2:00:35:7c:9c:e1:c4:35:3d:
                    6c:fd:77:85:f3:5a:80:81:a9:11:e3:7d:5c:35:30:
                    08:4f:45:8e:19:f4:c6:21:02:62:b4:85:0e:ce:af:
                    15:83:d8:bc:b2:21:6d:35:55:b1:11:67:d2:b7:d7:
                    04:64:2f:99:cb:05:c9:c3:63:2a:95:e6:48:07:71:
                    36:a1:b4:46:ec:63:2c:06:cc:48:99:a6:f2:99:da:
                    2e:c9:42:b4:08:ef:35:01:5f:f0:f9:c1:a6:b0:95:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:52:81:3F:5C:AB:EC:FB:FF:DA:EA:31:C9:B0:6C:A3:8E:37:D4:C0
            X509v3 Authority Key Identifier:
                keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/A7493DA6145611ECAA3B5769C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.30.0/23
                IPv6:
                  2001:df7:8b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:ed:b1:ab:87:7a:15:62:93:de:35:9a:37:0c:a3:77:85:27:
         18:11:81:31:1e:6a:30:ae:8d:db:94:de:7c:c2:ff:fe:92:a9:
         b9:47:12:c3:d7:59:ac:44:bb:9a:58:d9:f5:05:d8:b3:35:ca:
         61:ff:b3:5e:be:d5:c7:53:20:b7:e8:a2:70:2b:38:bd:ba:b3:
         b4:81:47:5c:22:d2:12:25:06:94:15:0b:da:26:f5:7d:92:b0:
         61:41:8e:0f:e7:ef:0d:d2:d5:13:10:af:69:34:43:3d:3c:1b:
         97:e5:5d:a4:50:a2:72:6c:94:82:7a:15:5f:0a:33:17:8e:08:
         15:de:ac:d6:9b:e5:21:f1:81:cf:93:c0:14:70:81:b6:9c:39:
         95:a2:39:2f:c8:92:bd:65:a0:d6:16:62:6a:df:12:73:2c:38:
         c6:3b:2b:5d:ab:bc:67:9a:82:0e:17:fd:88:cc:f7:2a:ee:b2:
         6d:f9:85:d0:52:ed:7c:cc:06:78:e1:f9:64:63:98:12:78:4c:
         b0:1f:1f:16:9e:a0:58:6e:f0:49:a8:8a:ce:65:de:22:06:e3:
         8a:8b:66:96:16:e7:55:97:2d:0a:1d:c5:cc:68:02:b6:cb:43:
         7a:3f:1c:8d:7a:93:b3:94:c0:b0:10:57:1e:08:13:94:b6:03:
         ca:39:8a:6d
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ1MUMxMTAvBgNVBAUTKDNGRDUzMTYwMjU3REIwMUIyRUUwRUYwMTNDMUUyRDQy
RUIxQTI4OEQwHhcNMjUwOTMwMjM1NjA3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzNmNC0zNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs7C4pPpdFZic1JvOUxBykT7Bw+ZqUZaoeXNUNp/KcJ2oDKfQj3ST4r/m7Bc8
Yf9jhgBopPzOkFHFd5/rbS9tHcMfpQGwbk4rDVwoC2FWSrZebcGxX55lsTBY8cdF
D2ipqGWJQrh0ELVpqxOEAdMStgyrr5dzuSKwrDLBf3HkzxvcYnwio+SfT7gjMlnS
VgjitZFwwmkLlGVJ+SPiADV8nOHENT1s/XeF81qAgakR431cNTAIT0WOGfTGIQJi
tIUOzq8Vg9i8siFtNVWxEWfSt9cEZC+ZywXJw2MqleZIB3E2obRG7GMsBsxImaby
mdouyUK0CO81AV/w+cGmsJVVeQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFO5SgT9c
q+z7/9rqMcmwbKOON9TAMB8GA1UdIwQYMBaAFD/VMWAlfbAbLuDvATweLULrGiiN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDUxQy9CRDMxMjcxNjE0
NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNCc3U0TzhCUEI0dFF1c2FL
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A5VXhZQ1Y5c0JzdTRPOEJQQjR0UXVzYUtJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUQ1MUMvQkQzMTI3MTYxNDU0MTFFQ0E0Njg3MjY4QzRGOUFFMDIvQTc0OTNEQTYx
NDU2MTFFQ0FBM0I1NzY5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ60eMA8EAgACMAkDBwAgAQ33i4AwDQYJKoZIhvcNAQELBQADggEB
AEftsauHehVik941mjcMo3eFJxgRgTEeajCujduU3nzC//6SqblHEsPXWaxEu5pY
2fUF2LM1ymH/s16+1cdTILfoonArOL26s7SBR1wi0hIlBpQVC9om9X2SsGFBjg/n
7w3S1RMQr2k0Qz08G5flXaRQonJslIJ6FV8KMxeOCBXerNab5SHxgc+TwBRwgbac
OZWiOS/Ikr1loNYWYmrfEnMsOMY7K12rvGeagg4X/YjM9yrusm35hdBS7XzMBnjh
+WRjmBJ4TLAfHxaeoFhu8Emois5l3iIG44qLZpYW51WXLQodxcxoArbLQ3o/HI16
k7OUwLAQVx4IE5S2A8o5im0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:52 2026 by rpki-client