Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/F7307C08FFCA11EB93268E6DC4F9AE02.roa
File:                     F7307C08FFCA11EB93268E6DC4F9AE02.roa (raw, json)
Hash identifier:          WQIaqVFoy/1CzV1kGTg4Ebk30VYXx/UfKWebBcWk7kk=
Subject key identifier:   4C:6B:7F:F9:E5:99:6B:83:67:4E:8B:D2:55:56:2C:06:68:D7:22:CB
Certificate issuer:       /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Certificate serial:       05B6
Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/F7307C08FFCA11EB93268E6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:50:55 +0000
ROA not before:           Wed 30 Apr 2025 23:34:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142040
IP address blocks:        103.165.112.0/24 maxlen: 24
                          103.165.113.0/24 maxlen: 24
                          2407:4e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
                          rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1462 (0x5b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
        Validity
            Not Before: Apr 30 23:34:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3fdef-11bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:17:97:4e:a5:f2:0d:35:51:6a:cd:10:6c:60:
                    8b:19:c5:fe:4a:95:9d:4f:64:b1:ce:d4:47:a7:4b:
                    db:2d:a8:31:ab:09:ab:49:80:cb:0b:7c:fb:eb:b2:
                    e9:75:c1:89:65:0e:5d:e5:c1:06:63:fb:8d:47:c8:
                    59:36:cf:52:a8:9d:39:b8:3b:f7:67:1d:0a:cc:69:
                    01:ad:3e:ed:fb:0a:76:43:19:94:48:e4:22:64:48:
                    93:42:1c:83:04:d7:8c:0c:ae:90:f4:5a:11:48:3d:
                    b5:ed:87:fa:c0:e8:00:68:57:df:74:44:a8:56:af:
                    5f:c9:56:aa:fd:0c:cf:9a:0c:f3:db:22:91:70:33:
                    fb:d5:7b:6a:fd:25:28:da:fe:f5:a7:dc:55:53:bc:
                    95:af:ce:67:c3:4c:c6:e9:d9:72:ed:24:e9:07:9a:
                    fe:7a:d3:4b:c5:7b:21:87:02:96:f6:3c:ec:89:45:
                    09:5f:23:2d:ee:13:fa:45:af:36:b4:7d:51:db:2b:
                    25:e1:30:94:cf:5e:b4:2e:f4:51:92:df:06:4b:b9:
                    85:ab:2d:a9:44:e8:df:b2:f9:6a:ea:9a:15:2e:64:
                    e1:ea:d0:05:75:06:c8:7c:c0:83:81:1b:c2:0e:ea:
                    bc:6f:05:8b:d1:05:5f:80:d5:3c:f2:8f:bd:65:58:
                    5e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6B:7F:F9:E5:99:6B:83:67:4E:8B:D2:55:56:2C:06:68:D7:22:CB
            X509v3 Authority Key Identifier:
                keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/F7307C08FFCA11EB93268E6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.112.0/23
                IPv6:
                  2407:4e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:92:29:b5:64:1b:39:46:fd:ec:6b:f4:79:b4:5c:45:bd:bb:
         47:a2:3c:c1:60:41:4c:e6:cb:28:c8:b9:b0:85:50:ef:02:67:
         15:a6:00:45:c0:4a:b1:0f:f9:da:c8:17:6f:64:c6:11:81:8b:
         7c:b4:fc:28:63:7b:3b:ea:88:98:97:d3:38:a0:7d:0f:f9:0e:
         7c:d6:75:85:b6:71:12:b9:23:79:da:4f:48:3a:6a:fd:39:09:
         07:77:d2:ac:01:da:47:12:35:04:cd:ea:00:9b:91:46:44:73:
         f8:69:f0:d7:25:e2:84:17:ef:04:60:b0:95:8f:e6:a1:c8:1c:
         3c:df:19:16:5d:ec:43:a9:2d:3c:f0:22:48:e6:29:d9:24:0f:
         68:54:44:39:43:1a:24:1d:b1:1f:5a:6e:50:2e:99:77:11:a2:
         06:56:70:d5:b9:b0:a8:0e:7f:72:6f:2c:79:ac:71:c0:ee:2a:
         3c:c7:d4:a1:23:c2:9c:be:50:ff:41:4a:01:e8:a5:f4:df:be:
         54:64:bf:73:ae:08:49:61:e4:3b:13:e3:2d:77:86:1e:6d:22:
         21:83:bf:38:37:52:14:83:e1:71:a9:b2:8c:6c:46:4f:f9:1e:
         99:cc:a6:a2:48:7e:ae:6b:4b:3f:83:18:6b:d4:cf:9e:b5:fd:
         58:fd:2e:6a
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk0RjcxMTAvBgNVBAUTKDgyQjMxRkExRENFMEM0QkYyRjY2Mzk3Nzg2QTZDMDhF
NDdDNkI4RkUwHhcNMjUwNDMwMjMzNDU4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmRlZi0xMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjReXTqXyDTVRas0QbGCLGcX+SpWdT2SxztRHp0vbLagxqwmrSYDLC3z767Lp
dcGJZQ5d5cEGY/uNR8hZNs9SqJ05uDv3Zx0KzGkBrT7t+wp2QxmUSOQiZEiTQhyD
BNeMDK6Q9FoRSD217Yf6wOgAaFffdESoVq9fyVaq/QzPmgzz2yKRcDP71Xtq/SUo
2v71p9xVU7yVr85nw0zG6dly7STpB5r+etNLxXshhwKW9jzsiUUJXyMt7hP6Ra82
tH1R2ysl4TCUz160LvRRkt8GS7mFqy2pROjfsvlq6poVLmTh6tAFdQbIfMCDgRvC
Duq8bwWL0QVfgNU88o+9ZVhe3QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFExrf/nl
mWuDZ06L0lVWLAZo1yLLMB8GA1UdIwQYMBaAFIKzH6Hc4MS/L2Y5d4amwI5Hxrj+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTRGNy81OUZGMDVBQUZG
QzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hMOHZaamwzaHFiQWprZkd1
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dyTWZvZHpneEw4dlpqbDNocWJBamtmR3VQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjk0RjcvNTlGRjA1QUFGRkM4MTFFQkE4QTRBMDU3QzRGOUFFMDIvRjczMDdDMDhG
RkNBMTFFQjkzMjY4RTZEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6VwMA8EAgACMAkDBwAkB05AAAAwDQYJKoZIhvcNAQELBQADggEB
AEiSKbVkGzlG/exr9Hm0XEW9u0eiPMFgQUzmyyjIubCFUO8CZxWmAEXASrEP+drI
F29kxhGBi3y0/ChjezvqiJiX0zigfQ/5DnzWdYW2cRK5I3naT0g6av05CQd30qwB
2kcSNQTN6gCbkUZEc/hp8Ncl4oQX7wRgsJWP5qHIHDzfGRZd7EOpLTzwIkjmKdkk
D2hURDlDGiQdsR9ablAumXcRogZWcNW5sKgOf3JvLHmsccDuKjzH1KEjwpy+UP9B
SgHopfTfvlRkv3OuCElh5DsT4y13hh5tIiGDvzg3UhSD4XGpsoxsRk/5HpnMpqJI
fq5rSz+DGGvUz561/Vj9Lmo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:14 2026 by rpki-client