Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/6199B5668DE011ECB9F9C06EC4F9AE02.roa
File:                     6199B5668DE011ECB9F9C06EC4F9AE02.roa (raw, json)
Hash identifier:          gXnStk1MwegllJpHCk0mKvppBMmur0BRxsppyW6UBsI=
Subject key identifier:   0A:E4:BB:A2:E9:8A:38:F6:80:AD:A5:AD:EE:D9:E6:AA:B9:83:27:5D
Certificate issuer:       /CN=A914E950/serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
Certificate serial:       0451
Authority key identifier: D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/6199B5668DE011ECB9F9C06EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:49:45 +0000
ROA not before:           Sun 05 Oct 2025 00:56:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132727
IP address blocks:        103.73.228.0/24 maxlen: 24
                          103.73.229.0/24 maxlen: 24
                          103.73.230.0/24 maxlen: 24
                          103.73.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl
                          rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1105 (0x451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E950, serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
        Validity
            Not Before: Oct  5 00:56:45 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a435e9-5560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:79:89:68:a7:0c:4a:4e:a6:c7:07:8b:6b:
                    90:b0:98:fe:8b:5c:16:75:aa:95:fd:37:c8:ea:79:
                    f4:58:64:56:71:80:89:60:62:e5:3d:6a:24:1d:2b:
                    89:dd:67:90:61:74:32:bf:97:7f:29:c0:e8:87:4b:
                    f9:55:f7:05:1f:c6:db:db:a3:2f:a6:81:af:3b:04:
                    ed:e5:4d:48:89:9d:c9:79:db:7e:ff:6b:19:70:52:
                    85:b7:58:65:92:af:2f:20:0b:94:c0:82:11:4f:bc:
                    19:86:6f:c7:18:c4:d9:03:fd:05:01:f5:68:bf:59:
                    50:98:90:79:ca:c9:b6:fe:15:7d:ef:ff:74:e6:b3:
                    63:d6:4e:c9:fc:25:05:16:b3:4e:e9:06:45:48:8a:
                    2a:7f:08:25:6c:c1:6b:5e:79:47:2a:ac:15:f2:34:
                    fa:77:ba:ad:ec:2f:a1:b4:fb:fe:b8:78:f2:bf:3e:
                    96:68:8f:be:6a:db:8d:61:c1:70:6f:87:48:d7:b4:
                    0b:25:7a:09:22:4c:13:32:bf:43:d5:7f:49:a2:4d:
                    ef:71:66:9e:ca:03:df:b3:1c:54:1b:69:e0:0c:58:
                    be:5e:a2:ee:92:73:d7:d4:da:51:6d:5d:b8:a3:54:
                    e5:fa:e2:8c:f9:83:35:47:ed:f5:a1:d7:b6:c2:03:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E4:BB:A2:E9:8A:38:F6:80:AD:A5:AD:EE:D9:E6:AA:B9:83:27:5D
            X509v3 Authority Key Identifier:
                keyid:D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/6199B5668DE011ECB9F9C06EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:a7:12:08:04:21:97:45:58:7a:05:85:c7:91:f7:f9:91:9a:
         3a:a2:0e:2a:97:d0:59:35:f2:46:25:7e:5b:0a:9b:79:b9:39:
         fa:e9:24:fa:4d:66:32:d4:0d:66:48:32:66:76:5f:a6:23:d5:
         6b:f9:e1:7b:c9:79:10:9e:fb:18:5e:1c:78:72:4b:0d:1c:26:
         13:4f:92:25:93:4b:7b:2d:41:6c:09:df:05:d8:3d:3c:4e:1a:
         ec:78:69:8a:d5:bd:3b:11:ae:7a:2b:1a:e8:e1:59:e7:95:76:
         94:a7:1c:23:39:89:bb:09:cc:9a:dc:b8:d9:dd:45:91:26:05:
         58:87:82:d4:ad:ba:00:bf:6e:aa:6b:88:7b:21:2d:69:9b:09:
         07:50:d7:96:a9:69:9c:98:99:11:ac:2e:3f:2b:7e:8f:98:9e:
         38:d3:3d:69:fd:55:13:65:c6:30:6f:97:87:82:8f:e0:0e:63:
         b2:56:5b:49:38:1b:46:08:33:4f:58:16:73:46:aa:7f:78:4a:
         1d:60:04:c8:22:86:4f:04:94:1b:f5:29:3a:72:4a:fa:49:97:
         c7:8f:e0:8b:af:94:1b:ac:de:f9:22:57:d7:9a:16:f0:cc:87:
         19:0e:9d:02:af:51:d2:74:cb:67:c9:d3:7d:99:3d:e5:c0:d9:
         6a:51:ef:45
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU5NTAxMTAvBgNVBAUTKEQ4NzVFNjNDNzM1MDhERDg5RjZBQ0RDQzA2MDE0NEEw
OEMwODY2REMwHhcNMjUxMDA1MDA1NjQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzVlOS01NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1f15iWinDEpOpscHi2uQsJj+i1wWdaqV/TfI6nn0WGRWcYCJYGLlPWokHSuJ
3WeQYXQyv5d/KcDoh0v5VfcFH8bb26MvpoGvOwTt5U1IiZ3Jedt+/2sZcFKFt1hl
kq8vIAuUwIIRT7wZhm/HGMTZA/0FAfVov1lQmJB5ysm2/hV97/905rNj1k7J/CUF
FrNO6QZFSIoqfwglbMFrXnlHKqwV8jT6d7qt7C+htPv+uHjyvz6WaI++atuNYcFw
b4dI17QLJXoJIkwTMr9D1X9Jok3vcWaeygPfsxxUG2ngDFi+XqLuknPX1NpRbV24
o1Tl+uKM+YM1R+31ode2wgOEoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFArku6Lp
ijj2gK2lre7Z5qq5gyddMB8GA1UdIwQYMBaAFNh15jxzUI3Yn2rNzAYBRKCMCGbc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTk1MC9DQkYwNkYzMDhE
REMxMUVDQTE0MDBDNjlDNEY5QUUwMi8ySFhtUEhOUWpkaWZhczNNQmdGRW9Jd0la
dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJIWG1QSE5RamRpZmFzM01CZ0ZFb0l3SVp0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU5NTAvQ0JGMDZGMzA4RERDMTFFQ0ExNDAwQzY5QzRGOUFFMDIvNjE5OUI1NjY4
REUwMTFFQ0I5RjlDMDZFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ0nkMA0GCSqGSIb3DQEBCwUAA4IBAQBwpxIIBCGXRVh6BYXHkff5
kZo6og4ql9BZNfJGJX5bCpt5uTn66ST6TWYy1A1mSDJmdl+mI9Vr+eF7yXkQnvsY
Xhx4cksNHCYTT5Ilk0t7LUFsCd8F2D08ThrseGmK1b07Ea56Kxro4VnnlXaUpxwj
OYm7Ccya3LjZ3UWRJgVYh4LUrboAv26qa4h7IS1pmwkHUNeWqWmcmJkRrC4/K36P
mJ440z1p/VUTZcYwb5eHgo/gDmOyVltJOBtGCDNPWBZzRqp/eEodYATIIoZPBJQb
9Sk6ckr6SZfHj+CLr5QbrN75IlfXmhbwzIcZDp0Cr1HSdMtnydN9mT3lwNlqUe9F
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:52 2026 by rpki-client