Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/47620F428FBB11EF8DDB8746C4F9AE02.roa
File:                     47620F428FBB11EF8DDB8746C4F9AE02.roa (raw, json)
Hash identifier:          J8fq57XN7vQJ2L4+yTAT2Y4PP+ynsI4ubh+NWiJOhRY=
Subject key identifier:   28:BC:BF:1E:72:F9:50:7B:37:5E:7C:F8:FA:6D:A0:8C:56:53:41:31
Certificate issuer:       /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial:       0202
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/47620F428FBB11EF8DDB8746C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:36:12 +0000
ROA not before:           Mon 19 May 2025 03:13:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     197537
IP address blocks:        103.69.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
                          rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
        Validity
            Not Before: May 19 03:13:53 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3ec6c-5f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:1e:9f:20:e2:e8:2c:87:1a:67:6d:cc:b9:
                    e8:c5:25:27:24:f7:89:44:d0:4f:f6:c6:5e:b8:75:
                    2b:2f:94:fe:bc:38:15:b6:fc:bf:5b:75:13:8d:57:
                    04:e3:27:48:22:11:49:0c:76:31:43:82:86:1c:66:
                    41:b7:5e:1a:54:0a:07:7b:f3:fc:ee:db:9d:99:63:
                    4f:e7:a2:d7:c8:d1:b4:02:e4:c5:5e:03:3d:c5:93:
                    dc:4a:c8:fc:a1:d1:a0:cb:59:c1:24:a4:83:9b:6e:
                    6a:ae:5e:df:ec:3b:1d:1b:f0:48:95:0d:98:6a:c7:
                    31:18:da:9a:b6:61:fd:5d:f3:31:59:6a:3e:f4:3b:
                    3d:fa:5b:07:2e:21:9c:9a:c1:30:ad:1b:c9:38:f8:
                    f2:78:08:70:ff:fe:59:5f:0c:a5:6a:e7:a1:75:c7:
                    39:a1:f0:56:d1:0d:06:da:14:b4:bd:ee:98:c0:2b:
                    43:c5:cc:c1:5c:6c:ff:f4:ed:8a:48:0d:34:a6:22:
                    91:fe:36:18:0d:65:bf:66:75:31:ec:db:14:fd:2c:
                    f6:de:a2:bc:ff:71:88:0b:87:ee:08:bf:4a:ce:04:
                    8b:9b:5d:b3:37:ae:57:9b:4e:34:47:f6:2b:af:0d:
                    32:7f:45:1f:9b:6b:f8:db:8c:1c:32:88:6f:15:31:
                    c9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BC:BF:1E:72:F9:50:7B:37:5E:7C:F8:FA:6D:A0:8C:56:53:41:31
            X509v3 Authority Key Identifier:
                keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/47620F428FBB11EF8DDB8746C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:55:a9:f7:9b:8d:c4:df:ec:be:2e:e7:fd:6b:e3:0b:81:6f:
         6f:e8:af:e3:9e:26:54:3f:22:a1:34:91:54:e7:8a:fe:fe:0d:
         a6:77:d1:b4:0e:53:d7:52:25:0b:ce:b5:2c:19:fa:90:aa:7e:
         b3:ac:7f:15:74:56:de:e8:1a:d5:d9:01:cf:d5:8b:a2:93:42:
         29:f3:c1:a4:cf:02:5c:a8:d8:67:4c:08:6e:e3:e0:0a:4a:f4:
         ff:fd:70:ca:7e:2c:4d:ec:48:a2:7a:e2:0b:ef:a7:cc:6e:cc:
         9e:28:f2:20:aa:fc:45:ed:5c:16:02:e4:0a:7b:82:91:86:a3:
         93:43:f3:05:36:c3:b3:84:00:15:b2:4c:b7:50:a5:8f:af:1b:
         f8:f7:88:65:e0:5e:0a:e3:d6:d6:cd:97:db:f7:fd:e7:1c:b5:
         d0:7c:bc:3d:68:25:db:3c:f3:80:73:8d:9b:97:2f:b4:bd:a7:
         27:e6:44:89:c8:f2:35:99:59:93:8f:55:65:ee:74:be:58:14:
         5c:c3:54:20:30:2e:b6:01:f2:fa:02:b3:66:80:00:c8:c6:4c:
         3e:75:96:4d:98:82:82:77:cd:9e:fd:d4:bd:9e:f2:c4:65:5b:
         cd:c6:17:95:6b:87:46:6d:df:29:2c:a7:0f:05:d6:0b:a6:e4:
         1b:80:f0:91
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix
MDZBMTQxQ0EwHhcNMjUwNTE5MDMxMzUzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWM2Yy01ZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArMwenyDi6CyHGmdtzLnoxSUnJPeJRNBP9sZeuHUrL5T+vDgVtvy/W3UTjVcE
4ydIIhFJDHYxQ4KGHGZBt14aVAoHe/P87tudmWNP56LXyNG0AuTFXgM9xZPcSsj8
odGgy1nBJKSDm25qrl7f7DsdG/BIlQ2YascxGNqatmH9XfMxWWo+9Ds9+lsHLiGc
msEwrRvJOPjyeAhw//5ZXwylauehdcc5ofBW0Q0G2hS0ve6YwCtDxczBXGz/9O2K
SA00piKR/jYYDWW/ZnUx7NsU/Sz23qK8/3GIC4fuCL9KzgSLm12zN65Xm040R/Yr
rw0yf0Ufm2v424wcMohvFTHJLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCi8vx5y
+VB7N158+PptoIxWU0ExMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx
QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDIzN0IvQUE4NkIxMUUzMUIwMTFFRTlBNTBENzYxQzRGOUFFMDIvNDc2MjBGNDI4
RkJCMTFFRjhEREI4NzQ2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0VdMA0GCSqGSIb3DQEBCwUAA4IBAQDIVan3m43E3+y+Luf9a+ML
gW9v6K/jniZUPyKhNJFU54r+/g2md9G0DlPXUiULzrUsGfqQqn6zrH8VdFbe6BrV
2QHP1Yuik0Ip88GkzwJcqNhnTAhu4+AKSvT//XDKfixN7EiieuIL76fMbsyeKPIg
qvxF7VwWAuQKe4KRhqOTQ/MFNsOzhAAVsky3UKWPrxv494hl4F4K49bWzZfb9/3n
HLXQfLw9aCXbPPOAc42bly+0vacn5kSJyPI1mVmTj1Vl7nS+WBRcw1QgMC62AfL6
ArNmgADIxkw+dZZNmIKCd82e/dS9nvLEZVvNxheVa4dGbd8pLKcPBdYLpuQbgPCR
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:29 2026 by rpki-client