Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/00646A9CE0D511F08788B2A9556F56BC.roa
File:                     00646A9CE0D511F08788B2A9556F56BC.roa (raw, json)
Hash identifier:          DeXgdTifh854jBkbMFeU78ocUGYguPv8MU0j47e7vmI=
Subject key identifier:   24:D6:33:C9:3B:7D:78:30:43:C0:89:8C:DD:8C:BE:FF:26:17:29:5B
Certificate issuer:       /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Certificate serial:       021B
Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/00646A9CE0D511F08788B2A9556F56BC.roa
Signing time:             Sun 01 Mar 2026 10:59:29 +0000
ROA not before:           Wed 24 Dec 2025 14:29:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151041
IP address blocks:        103.114.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
                          rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
        Validity
            Not Before: Dec 24 14:29:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a41c11-f815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b8:0e:9a:44:2f:8f:67:95:aa:63:95:a8:50:
                    5d:8d:a0:2f:73:82:48:be:74:48:09:18:84:65:c1:
                    38:b5:c5:57:db:43:b3:09:60:8e:ee:a5:1d:12:bf:
                    f5:c0:61:9e:da:13:7a:07:56:bd:b1:05:b9:b6:14:
                    76:ff:d7:6d:93:28:72:48:a0:17:15:4c:81:c0:c7:
                    2a:45:05:30:f7:3f:de:3e:e6:68:46:b9:42:a8:0a:
                    45:41:12:29:a9:82:2c:c9:f5:26:5e:be:a9:1f:b3:
                    fc:f8:6b:f2:56:fb:93:40:fe:ef:c1:c6:df:08:7e:
                    42:e2:97:75:fd:5b:94:6f:65:92:24:de:4b:47:a8:
                    d8:8c:d0:dd:bf:c1:6d:91:73:fb:03:41:c3:40:73:
                    ec:c4:2c:9f:0d:69:bd:28:5d:fe:8e:e4:5e:65:6c:
                    f7:64:8d:52:bd:10:7e:d7:a0:6d:ed:de:f9:c2:97:
                    67:8f:5f:df:87:66:65:fd:29:57:f0:c6:ab:23:47:
                    48:ef:15:c0:5d:0a:74:92:25:19:37:6d:ed:91:a1:
                    e4:c0:ec:1f:cd:56:a2:bc:d5:01:bc:85:bc:93:29:
                    f1:98:2e:dd:ef:4f:dc:36:74:36:e3:85:20:99:f2:
                    55:48:51:ec:14:58:a4:2f:1e:e2:96:43:e4:d0:c1:
                    2b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D6:33:C9:3B:7D:78:30:43:C0:89:8C:DD:8C:BE:FF:26:17:29:5B
            X509v3 Authority Key Identifier:
                keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/00646A9CE0D511F08788B2A9556F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:ed:2e:84:e6:ac:c1:d7:f0:23:e6:7b:54:b0:c6:1c:85:
         c8:92:b5:45:bf:e6:20:2d:7a:e0:dc:2e:a8:c9:cd:c6:19:cd:
         17:68:80:93:03:a4:3d:a0:f2:b7:1a:1f:96:50:c7:8e:0c:7a:
         95:c6:7a:7e:96:53:09:2f:68:05:3f:5b:5e:78:20:a1:4f:fa:
         aa:8f:64:f5:74:b1:f0:cd:3f:2c:53:0e:2b:7d:72:63:b5:b4:
         a3:5e:de:be:e3:99:e2:6c:61:60:3e:09:a8:a9:59:bf:15:e5:
         e9:33:f2:8d:05:33:9d:c0:e1:16:9d:ea:f5:75:16:94:49:73:
         3f:4b:ba:d0:dc:d2:5e:e9:66:8b:ba:10:4f:51:ae:8d:90:28:
         5c:8b:2b:90:63:08:6a:6b:99:11:e6:6b:10:7c:f2:be:de:09:
         c1:e0:52:b5:c7:68:01:90:41:82:ea:28:21:73:5c:94:bf:4d:
         7e:d1:8a:60:f4:ca:74:a3:88:5d:df:3d:58:81:f5:35:11:41:
         e6:36:8d:7b:43:92:c4:00:a8:32:d5:10:cf:47:f0:f2:9b:05:
         23:59:63:b7:33:80:35:c6:51:45:79:01:b4:5b:a4:52:61:f1:
         8f:c1:b8:46:fc:24:5f:52:ea:2b:48:54:5e:4e:a2:de:e7:f0:
         19:02:68:f7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4
NDU0NzczNUMwHhcNMjUxMjI0MTQyOTQ5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWMxMS1mODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6LgOmkQvj2eVqmOVqFBdjaAvc4JIvnRICRiEZcE4tcVX20OzCWCO7qUdEr/1
wGGe2hN6B1a9sQW5thR2/9dtkyhySKAXFUyBwMcqRQUw9z/ePuZoRrlCqApFQRIp
qYIsyfUmXr6pH7P8+GvyVvuTQP7vwcbfCH5C4pd1/VuUb2WSJN5LR6jYjNDdv8Ft
kXP7A0HDQHPsxCyfDWm9KF3+juReZWz3ZI1SvRB+16Bt7d75wpdnj1/fh2Zl/SlX
8MarI0dI7xXAXQp0kiUZN23tkaHkwOwfzVaivNUBvIW8kynxmC7d70/cNnQ244Ug
mfJVSFHsFFikLx7ilkPk0MErdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCTWM8k7
fXgwQ8CJjN2Mvv8mFylbMB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5
NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTFBNzkvRDRDQTE1QzBGOTQ3MTFFRDg4QzE4NzQ2QzRGOUFFMDIvMDA2NDZBOUNF
MEQ1MTFGMDg3ODhCMkE5NTU2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3L/MA0GCSqGSIb3DQEBCwUAA4IBAQCqke0uhOaswdfwI+Z7VLDG
HIXIkrVFv+YgLXrg3C6oyc3GGc0XaICTA6Q9oPK3Gh+WUMeODHqVxnp+llMJL2gF
P1teeCChT/qqj2T1dLHwzT8sUw4rfXJjtbSjXt6+45nibGFgPgmoqVm/FeXpM/KN
BTOdwOEWner1dRaUSXM/S7rQ3NJe6WaLuhBPUa6NkChciyuQYwhqa5kR5msQfPK+
3gnB4FK1x2gBkEGC6ighc1yUv01+0Ypg9Mp0o4hd3z1YgfU1EUHmNo17Q5LEAKgy
1RDPR/DymwUjWWO3M4A1xlFFeQG0W6RSYfGPwbhG/CRfUuorSFReTqLe5/AZAmj3
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:04:54 2026 by rpki-client