Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/039A4408614511F0B95C3C38C4F9AE02.roa
File:                     039A4408614511F0B95C3C38C4F9AE02.roa (raw, json)
Hash identifier:          ui+G6/PG/zN3KIP4zZsPKAuoPMyNoDO6ihyKtKXhFfo=
Subject key identifier:   84:63:EF:33:6C:8A:32:2F:8E:A0:91:9E:65:EB:60:C9:CD:BF:03:B6
Certificate issuer:       /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Certificate serial:       0AA3
Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/039A4408614511F0B95C3C38C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:00:52 +0000
ROA not before:           Fri 02 Jan 2026 19:16:25 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        103.103.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
                          rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2723 (0xaa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
        Validity
            Not Before: Jan  2 19:16:25 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a462b4-093d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:10:85:5b:a5:66:34:d5:64:70:3d:6f:1a:
                    59:37:b9:88:72:84:ce:bf:55:9f:04:c3:0d:83:4e:
                    f6:16:59:d5:d1:8a:34:96:d8:92:2a:b0:13:05:c6:
                    b5:0b:89:94:cc:00:aa:d8:eb:78:4e:ea:2c:6b:25:
                    81:32:83:1a:72:27:a1:02:9b:f0:c9:6d:07:7d:95:
                    16:da:63:0d:d9:02:73:bf:34:be:dd:a0:a5:0a:0d:
                    3c:1c:bc:70:d1:07:28:e5:ca:78:21:24:8b:ac:ea:
                    70:b0:58:64:9c:00:4c:be:3b:79:84:e1:0c:a8:4e:
                    92:84:8d:53:15:5d:51:69:e3:d6:eb:5a:80:ef:76:
                    e7:82:82:b1:0a:06:e0:d4:6c:93:c6:4f:dd:13:dc:
                    11:c7:ed:02:50:24:39:77:07:e4:1e:1f:bb:4e:ca:
                    28:36:ee:22:63:f0:10:06:8b:63:9e:02:1d:81:43:
                    44:6a:7d:74:ca:b0:7d:c4:2c:d9:70:74:c6:8e:95:
                    54:e8:f4:29:ce:dd:d7:05:fc:af:7d:31:8f:04:9b:
                    d9:ea:38:f0:6e:7b:f1:6c:e6:b9:45:03:66:29:ed:
                    81:69:d3:68:93:fc:d3:e2:65:b2:a3:8c:45:af:dc:
                    9d:75:63:df:80:09:94:dd:5e:13:b8:a0:d1:e7:94:
                    28:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:63:EF:33:6C:8A:32:2F:8E:A0:91:9E:65:EB:60:C9:CD:BF:03:B6
            X509v3 Authority Key Identifier:
                keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/039A4408614511F0B95C3C38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:01:6b:93:f0:39:1a:63:76:33:50:6f:ec:99:67:13:6f:
         f4:05:df:31:e8:ed:2a:02:9c:92:92:54:09:89:d7:c1:ec:8b:
         d0:74:9c:84:10:c4:fc:d2:10:95:77:52:06:67:9e:7b:21:d9:
         61:72:e5:7c:0c:b4:fd:2a:43:6f:d3:62:c7:87:63:6c:a8:1a:
         c8:12:f0:44:e6:83:20:03:b0:f9:f8:d8:a6:e3:a6:61:5c:79:
         5a:33:b6:62:92:6b:1d:78:9a:9f:4d:0e:38:d9:7c:f1:5a:05:
         25:4f:89:50:6a:d7:05:19:88:cb:e1:04:f6:6d:08:94:77:93:
         32:5f:98:24:06:6f:bb:45:c4:e6:d2:ce:f1:69:24:3f:e7:a5:
         bd:04:aa:02:83:de:60:f5:a7:c7:17:c0:38:74:33:01:8c:92:
         e0:02:0a:77:64:45:a9:7e:06:2b:20:12:e7:60:5a:27:cc:8a:
         9a:be:9a:48:c7:f9:62:fc:9f:28:b2:71:34:c7:86:38:e3:b1:
         e4:c2:00:06:ad:97:dc:eb:3b:ac:13:d1:96:36:ea:68:fc:45:
         e9:6f:38:ec:1f:e3:46:10:c6:e6:7f:f7:43:0b:3d:94:05:63:
         50:05:e4:de:2f:be:bd:b8:22:88:1d:71:db:b7:7e:d8:33:31:
         f6:87:fc:89
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3
MkM0QkRFMjMwHhcNMjYwMTAyMTkxNjI1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjJiNC0wOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvdkQhVulZjTVZHA9bxpZN7mIcoTOv1WfBMMNg072FlnV0Yo0ltiSKrATBca1
C4mUzACq2Ot4TuosayWBMoMaciehApvwyW0HfZUW2mMN2QJzvzS+3aClCg08HLxw
0Qco5cp4ISSLrOpwsFhknABMvjt5hOEMqE6ShI1TFV1RaePW61qA73bngoKxCgbg
1GyTxk/dE9wRx+0CUCQ5dwfkHh+7TsooNu4iY/AQBotjngIdgUNEan10yrB9xCzZ
cHTGjpVU6PQpzt3XBfyvfTGPBJvZ6jjwbnvxbOa5RQNmKe2BadNok/zT4mWyo4xF
r9yddWPfgAmU3V4TuKDR55QomQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIRj7zNs
ijIvjqCRnmXrYMnNvwO2MB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0
NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz
aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTIwM0MvNDZDODhDODI3NDc3MTFFQTgzNjU0RjREQzRGOUFFMDIvMDM5QTQ0MDg2
MTQ1MTFGMEI5NUMzQzM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ2eMMA0GCSqGSIb3DQEBCwUAA4IBAQArdAFrk/A5GmN2M1Bv7Jln
E2/0Bd8x6O0qApySklQJidfB7IvQdJyEEMT80hCVd1IGZ557IdlhcuV8DLT9KkNv
02LHh2NsqBrIEvBE5oMgA7D5+Nim46ZhXHlaM7ZikmsdeJqfTQ442XzxWgUlT4lQ
atcFGYjL4QT2bQiUd5MyX5gkBm+7RcTm0s7xaSQ/56W9BKoCg95g9afHF8A4dDMB
jJLgAgp3ZEWpfgYrIBLnYFonzIqavppIx/li/J8osnE0x4Y447HkwgAGrZfc6zus
E9GWNupo/EXpbzjsH+NGEMbmf/dDCz2UBWNQBeTeL769uCKIHXHbt37YMzH2h/yJ
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:53 2026 by rpki-client