Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa
File:                     B4D9927A014E11EB9E13483FC4F9AE02.roa (raw, json)
Hash identifier:          b1PlRjXuvw+bPWKNzR8yhRB1i2vQr1i31nAKPCd+jB4=
Subject key identifier:   80:4D:4F:CB:77:50:BA:C4:60:CC:ED:2B:1F:5D:A8:1E:16:28:C3:25
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       331C
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:10:58 +0000
ROA not before:           Wed 30 Apr 2025 15:52:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6453
IP address blocks:        59.163.231.0/24 maxlen: 24
                          115.108.48.0/20 maxlen: 24
                          115.112.168.0/23 maxlen: 23
                          203.199.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13084 (0x331c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Apr 30 15:52:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48f42-a3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:c5:3c:db:b3:59:be:71:ce:aa:c7:74:bc:
                    41:63:9c:e9:3b:72:b6:00:94:0f:83:98:ac:0b:97:
                    07:17:48:14:d8:98:29:69:ec:ab:de:a5:81:8a:e3:
                    16:56:5b:02:27:51:7a:ec:0d:d3:c2:7f:39:45:50:
                    8a:da:bd:45:32:e8:27:96:91:44:8d:58:91:f3:85:
                    1a:7f:dc:fe:f4:a2:c9:13:19:a8:2a:77:b0:74:cb:
                    0b:38:f3:26:48:5f:46:de:40:fe:08:61:ed:79:e6:
                    13:be:9e:aa:47:0e:c3:ec:1c:f8:a8:ec:34:69:44:
                    43:82:32:aa:63:e6:a3:26:70:e3:13:5c:b9:f3:d4:
                    36:d0:b8:9a:e6:c2:a2:37:72:6f:45:20:a7:1c:87:
                    97:ea:7c:df:aa:33:d1:68:eb:bf:a0:c2:eb:05:c2:
                    06:57:0f:f9:b2:92:78:f5:c9:c0:f1:bd:2c:19:ba:
                    8a:fd:96:1e:ad:5a:0c:fb:3e:7c:30:53:4d:c6:a9:
                    42:aa:80:57:2c:2b:9e:61:ee:82:f4:a5:90:20:76:
                    d0:ab:3e:e8:8e:e8:71:f6:8d:d8:e8:a2:98:3c:bd:
                    15:a3:f5:59:d4:b0:c7:94:04:3e:b7:0a:d8:96:aa:
                    69:09:41:05:fe:59:ec:06:47:bb:93:9b:f7:3f:6a:
                    04:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4D:4F:CB:77:50:BA:C4:60:CC:ED:2B:1F:5D:A8:1E:16:28:C3:25
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.163.231.0/24
                  115.108.48.0/20
                  115.112.168.0/23
                  203.199.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:bf:05:81:39:e8:29:d5:84:b5:c9:85:e6:53:24:2e:7b:c6:
         6e:bb:aa:06:18:94:3b:20:b2:42:b3:8d:6d:7a:71:0b:90:ad:
         bc:82:61:c3:06:d2:b4:2a:85:58:28:91:99:2b:ff:04:51:29:
         25:88:ea:f5:6c:35:8e:d7:58:d6:7c:0e:75:be:7d:ca:1c:c1:
         72:49:af:32:5d:b0:b8:4f:18:f0:9f:0b:e5:d2:d4:39:c4:f3:
         d2:4a:79:16:40:07:ec:97:28:f4:62:df:c2:ef:52:a5:44:15:
         1d:0f:01:cf:c7:3a:78:9a:4c:aa:37:e2:1f:77:1f:cf:f5:f9:
         e6:fc:e4:94:bb:27:76:ed:e6:79:00:cb:37:c6:6f:7f:d2:83:
         20:d3:9d:35:98:75:f2:24:93:54:67:0a:ec:33:c4:65:0b:98:
         50:64:72:c0:e6:6b:d2:58:f6:fb:30:8c:e5:40:02:f2:d7:02:
         0b:fc:0c:a7:0e:fb:7a:93:e7:87:4e:06:1b:23:ba:d5:a8:6b:
         05:f0:b3:32:9a:f9:45:18:73:98:d3:4a:a0:98:61:ff:b2:97:
         37:16:47:21:dc:0a:d2:c7:98:1a:87:4f:bb:6f:7d:fa:7e:cf:
         87:97:c3:14:4a:21:f5:e8:5c:3f:db:ff:67:75:ba:39:ec:8a:
         28:ba:0e:07
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICMxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjUwNDMwMTU1MjM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGY0Mi1hM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJjFPNuzWb5xzqrHdLxBY5zpO3K2AJQPg5isC5cHF0gU2Jgpaeyr3qWBiuMW
VlsCJ1F67A3Twn85RVCK2r1FMugnlpFEjViR84Uaf9z+9KLJExmoKnewdMsLOPMm
SF9G3kD+CGHteeYTvp6qRw7D7Bz4qOw0aURDgjKqY+ajJnDjE1y589Q20Lia5sKi
N3JvRSCnHIeX6nzfqjPRaOu/oMLrBcIGVw/5spJ49cnA8b0sGbqK/ZYerVoM+z58
MFNNxqlCqoBXLCueYe6C9KWQIHbQqz7ojuhx9o3Y6KKYPL0Vo/VZ1LDHlAQ+twrY
lqppCUEF/lnsBke7k5v3P2oEjQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFIBNT8t3
ULrEYMztKx9dqB4WKMMlMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvQjREOTkyN0Ew
MTRFMTFFQjlFMTM0ODNGQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQAO6PnAwQEc2wwAwQBc3CoAwQAy8fzMA0GCSqGSIb3DQEBCwUAA4IB
AQBzvwWBOegp1YS1yYXmUyQue8Zuu6oGGJQ7ILJCs41tenELkK28gmHDBtK0KoVY
KJGZK/8EUSkliOr1bDWO11jWfA51vn3KHMFySa8yXbC4Txjwnwvl0tQ5xPPSSnkW
QAfslyj0Yt/C71KlRBUdDwHPxzp4mkyqN+Ifdx/P9fnm/OSUuyd27eZ5AMs3xm9/
0oMg0501mHXyJJNUZwrsM8RlC5hQZHLA5mvSWPb7MIzlQALy1wIL/AynDvt6k+eH
TgYbI7rVqGsF8LMymvlFGHOY00qgmGH/spc3Fkch3ArSx5gah0+7b336fs+Hl8MU
SiH16Fw/2/9ndbo57Iooug4H
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:21 2026 by rpki-client