Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/F648238E766911EC9EADC512C4F9AE02.roa
File:                     F648238E766911EC9EADC512C4F9AE02.roa (raw, json)
Hash identifier:          bDHpZrwcQl7ztwJNbDO8+8sOlvpdJJRh7RkBiAyPyW0=
Subject key identifier:   73:08:6A:32:F3:3C:B6:55:57:58:E1:36:70:97:78:20:52:B5:55:D4
Certificate issuer:       /CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164
Certificate serial:       0C77
Authority key identifier: B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/F648238E766911EC9EADC512C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:43:15 +0000
ROA not before:           Wed 24 Dec 2025 19:15:46 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137048
IP address blocks:        103.103.32.0/24 maxlen: 24
                          103.103.33.0/24 maxlen: 24
                          103.103.34.0/24 maxlen: 24
                          103.103.35.0/24 maxlen: 24
                          2401:ee40::/32 maxlen: 32
                          2401:ee40::/48 maxlen: 48
                          2401:ee40:1::/48 maxlen: 48
                          2401:ee40:2::/48 maxlen: 48
                          2401:ee40:3::/48 maxlen: 48
                          2401:ee40:4::/48 maxlen: 48
                          2401:ee40:5::/48 maxlen: 48
                          2401:ee40:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl
                          rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3191 (0xc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912147F, serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164
        Validity
            Not Before: Dec 24 19:15:46 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45083-21da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:50:ac:ed:00:ba:46:73:37:c0:ad:35:f7:
                    3d:8c:13:d5:36:1c:b1:9b:ff:f2:97:42:b2:01:26:
                    cb:8a:a8:c2:1a:3c:85:34:bb:22:26:4c:8c:e2:fa:
                    11:f7:c0:1f:4b:f9:ec:7d:b9:bf:73:22:41:6a:cc:
                    3b:fe:a7:01:2f:94:b5:ed:3a:70:71:7d:7f:be:f1:
                    20:eb:03:b1:7a:e3:ee:f0:67:02:8b:5c:62:f4:37:
                    d4:8f:59:f6:2b:cd:d4:17:fc:57:5e:fd:eb:5a:51:
                    61:73:40:f3:f9:f9:90:b1:8c:97:ee:4d:53:c9:d5:
                    5b:40:11:5b:7f:a3:6e:54:b2:91:f4:ca:5e:18:1c:
                    84:a3:5b:34:92:92:14:f1:ec:24:ea:ac:35:fe:97:
                    6e:75:a1:73:a1:64:ed:e7:d5:65:e2:e0:b7:a3:e3:
                    99:d5:2d:f7:9d:13:c8:8e:94:c9:fc:97:97:fb:3a:
                    0c:07:ff:ec:6f:98:54:bf:ad:53:a1:6a:e6:7a:84:
                    88:cc:9f:b9:6f:9e:76:a5:ca:33:3d:6e:40:12:06:
                    33:70:a1:b0:f7:42:62:e8:a5:ae:90:82:5f:5e:6b:
                    bf:b0:dc:be:c0:8a:2d:06:9b:26:aa:01:98:f6:68:
                    89:8c:fd:38:7c:bf:36:3e:09:af:c3:d3:a0:c6:ba:
                    e8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:08:6A:32:F3:3C:B6:55:57:58:E1:36:70:97:78:20:52:B5:55:D4
            X509v3 Authority Key Identifier:
                keyid:B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/F648238E766911EC9EADC512C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.32.0/22
                IPv6:
                  2401:ee40::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:18:1b:9d:d3:a2:e8:61:61:f4:cf:c0:c7:94:cd:46:e5:
         ef:78:20:4f:27:5f:4e:6d:56:d9:6e:9a:26:ba:82:87:66:62:
         3a:a7:74:6a:39:b1:3c:5d:56:e9:8e:3e:49:ee:0a:97:1f:83:
         97:2b:e5:89:33:de:54:30:7c:13:34:98:77:40:a0:b8:65:93:
         d5:80:a6:29:66:15:b5:58:bf:c8:7b:21:cb:00:38:c3:49:8c:
         bd:bd:57:33:b2:f3:40:87:c9:78:1b:0a:82:27:5b:7c:30:3f:
         1b:2c:b6:cf:f7:b5:6d:c6:8f:4e:8a:63:56:60:9a:59:8a:9e:
         33:31:3c:1f:1a:7e:df:93:02:0d:35:6f:1b:dc:24:b2:81:1d:
         44:cc:79:92:80:8e:41:dc:ff:17:22:8c:fc:ba:ae:86:23:b3:
         e1:04:8c:18:a5:11:e9:1e:ed:6d:18:e6:d1:ed:2d:f0:a3:67:
         1f:cc:92:58:06:e3:44:13:7c:28:24:31:b1:e8:21:fe:36:38:
         11:3d:e3:94:c6:f4:3f:a2:9e:e7:e4:c3:03:b4:17:9f:4c:90:
         6d:81:f2:88:f3:c7:9e:e2:07:3a:ed:32:f4:94:7e:5f:b0:40:
         81:48:f6:cd:db:f6:63:a8:e4:10:e7:ac:3d:e4:5d:e2:a0:ca:
         e2:af:b0:ab
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE0N0YxMTAvBgNVBAUTKEI2Rjc5N0Q4NEYyRTQ5QjhCQjMyMjIwNkI3OTQ2RDI3
OTE4Q0ExNjQwHhcNMjUxMjI0MTkxNTQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTA4My0yMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAryRQrO0AukZzN8CtNfc9jBPVNhyxm//yl0KyASbLiqjCGjyFNLsiJkyM4voR
98AfS/nsfbm/cyJBasw7/qcBL5S17TpwcX1/vvEg6wOxeuPu8GcCi1xi9DfUj1n2
K83UF/xXXv3rWlFhc0Dz+fmQsYyX7k1TydVbQBFbf6NuVLKR9MpeGByEo1s0kpIU
8ewk6qw1/pdudaFzoWTt59Vl4uC3o+OZ1S33nRPIjpTJ/JeX+zoMB//sb5hUv61T
oWrmeoSIzJ+5b552pcozPW5AEgYzcKGw90Ji6KWukIJfXmu/sNy+wIotBpsmqgGY
9miJjP04fL82Pgmvw9OgxrroxwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHMIajLz
PLZVV1jhNnCXeCBStVXUMB8GA1UdIwQYMBaAFLb3l9hPLkm4uzIiBreUbSeRjKFk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQ3Ri8xNjFBQUJFQzFD
RjcxMUVBQUQ2NjQ1MzJDNEY5QUUwMi90dmVYMkU4dVNiaTdNaUlHdDVSdEo1R01v
V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3R2ZVgyRTh1U2JpN01pSUd0NVJ0SjVHTW9XUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjE0N0YvMTYxQUFCRUMxQ0Y3MTFFQUFENjY0NTMyQzRGOUFFMDIvRjY0ODIzOEU3
NjY5MTFFQzlFQURDNTEyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2cgMA0EAgACMAcDBQAkAe5AMA0GCSqGSIb3DQEBCwUAA4IBAQBK
TRgbndOi6GFh9M/Ax5TNRuXveCBPJ19ObVbZbpomuoKHZmI6p3RqObE8XVbpjj5J
7gqXH4OXK+WJM95UMHwTNJh3QKC4ZZPVgKYpZhW1WL/IeyHLADjDSYy9vVczsvNA
h8l4GwqCJ1t8MD8bLLbP97Vtxo9OimNWYJpZip4zMTwfGn7fkwINNW8b3CSygR1E
zHmSgI5B3P8XIoz8uq6GI7PhBIwYpRHpHu1tGObR7S3wo2cfzJJYBuNEE3woJDGx
6CH+NjgRPeOUxvQ/op7n5MMDtBefTJBtgfKI88ee4gc67TL0lH5fsECBSPbN2/Zj
qOQQ56w95F3ioMrir7Cr
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:41 2026 by rpki-client