Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/C80572DEF70911ED9D4B561AC4F9AE02.roa
File:                     C80572DEF70911ED9D4B561AC4F9AE02.roa (raw, json)
Hash identifier:          NqQKBASAXdv1LlkB9yqcFqDG6FI2OUjfgdiKy6gJA/0=
Subject key identifier:   EA:F5:7C:93:46:FF:17:D9:82:95:11:36:50:AD:C6:B2:FB:BF:DB:2C
Certificate issuer:       /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial:       0212
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/C80572DEF70911ED9D4B561AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:35:19 +0000
ROA not before:           Tue 03 Jun 2025 04:01:05 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135654
IP address blocks:        103.137.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
                          rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
        Validity
            Not Before: Jun  3 04:01:05 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3de27-7782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:a2:d1:1a:bd:24:2a:ce:3c:51:30:fb:83:
                    cd:34:0e:96:c3:c6:af:19:32:70:f1:dc:dd:9e:4e:
                    d1:9b:1b:55:cf:94:d5:8f:2f:5a:15:7e:de:81:a8:
                    64:b3:8b:ff:9c:4c:45:29:99:85:1c:93:4a:f4:46:
                    98:b2:0f:bb:60:cc:a0:96:f9:86:15:01:88:80:1a:
                    13:21:c6:5b:23:54:da:a9:15:74:e8:76:d5:b2:9a:
                    ac:8f:cf:a5:2f:f2:60:7a:26:a0:1a:7e:ce:a5:e6:
                    52:1d:e0:6c:b8:7a:f9:68:25:29:c5:92:79:02:2f:
                    ed:0e:6d:a7:4a:b2:ea:01:7f:32:68:a1:8e:3b:83:
                    f4:6c:33:15:30:dc:09:14:f9:04:20:d4:73:96:70:
                    f2:d9:06:2e:ce:30:07:27:a9:0f:62:4f:cf:92:2c:
                    4c:d2:ef:e2:4c:0d:18:ab:96:85:df:a2:c3:76:a2:
                    4f:aa:99:4a:76:41:3a:1e:48:eb:2e:5b:55:7f:18:
                    05:12:6f:79:02:1a:30:9f:ab:ca:ca:9d:c0:ce:ea:
                    5a:aa:3f:25:f3:3c:e9:2d:e4:12:47:2a:39:a4:da:
                    47:f9:bb:4c:25:40:04:e0:1d:67:11:c4:96:fd:e0:
                    71:88:7c:90:a1:8a:18:b3:f4:f4:c2:86:d3:21:6b:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F5:7C:93:46:FF:17:D9:82:95:11:36:50:AD:C6:B2:FB:BF:DB:2C
            X509v3 Authority Key Identifier:
                keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/C80572DEF70911ED9D4B561AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:bf:d4:f1:a5:ab:95:b4:50:6f:6a:ed:59:e8:b2:12:fb:fe:
         da:51:c5:52:4d:a9:b5:50:40:fc:b9:46:90:c9:0a:75:4b:ee:
         d0:93:d6:da:8d:e7:a7:bd:52:3a:8b:83:88:d1:02:23:6b:f5:
         9e:a8:70:b3:92:ec:bd:84:33:68:27:e1:f4:76:94:db:b3:45:
         bb:de:5c:de:70:84:ba:f2:20:f4:52:ad:13:7a:1c:aa:18:dc:
         76:40:86:00:96:c5:3f:88:f8:00:ac:0e:a3:bc:ba:f8:92:86:
         32:1f:c9:a5:b6:81:4b:a8:6c:a3:b1:ed:29:59:57:4b:d8:8b:
         c1:09:72:b0:71:1d:0d:ae:80:3d:5b:14:6e:0f:a8:da:da:8d:
         33:38:85:78:71:e3:64:0b:7e:7a:07:ce:eb:98:dc:66:1e:5f:
         9f:6e:59:d6:1d:25:96:8d:2d:5b:23:17:09:4a:c1:3a:85:b1:
         36:92:13:f9:2b:6e:66:9a:aa:42:e8:00:d2:9b:58:35:96:b7:
         d6:0c:96:55:43:2c:ed:2d:ad:f5:85:62:d0:af:11:aa:24:7d:
         5a:90:cc:11:34:66:d5:e1:30:84:5a:52:8d:12:3c:3c:07:83:
         f5:8e:cb:a4:77:9f:5f:33:ae:23:72:35:39:61:2d:9d:e5:8d:
         11:69:97:3f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY0OEQxMTAvBgNVBAUTKEYxN0I1MzIxQTU4RDc5RTIzMDUzMUM1QUEwRjBCMjRF
MUQ4MTIxQTMwHhcNMjUwNjAzMDQwMTA1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZGUyNy03NzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnyOi0Rq9JCrOPFEw+4PNNA6Ww8avGTJw8dzdnk7RmxtVz5TVjy9aFX7egahk
s4v/nExFKZmFHJNK9EaYsg+7YMyglvmGFQGIgBoTIcZbI1TaqRV06HbVspqsj8+l
L/JgeiagGn7OpeZSHeBsuHr5aCUpxZJ5Ai/tDm2nSrLqAX8yaKGOO4P0bDMVMNwJ
FPkEINRzlnDy2QYuzjAHJ6kPYk/PkixM0u/iTA0Yq5aF36LDdqJPqplKdkE6Hkjr
LltVfxgFEm95Ahown6vKyp3Azupaqj8l8zzpLeQSRyo5pNpH+btMJUAE4B1nEcSW
/eBxiHyQoYoYs/T0wobTIWsQtwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOr1fJNG
/xfZgpURNlCtxrL7v9ssMB8GA1UdIwQYMBaAFPF7UyGljXniMFMcWqDwsk4dgSGj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjQ4RC9DM0VFRTJBOEVG
RTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVlSXdVeHhhb1BDeVRoMkJJ
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhYdFRJYVdOZWVJd1V4eGFvUEN5VGgyQklhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTY0OEQvQzNFRUUyQThFRkUyMTFFREEzQzZDMTQ3QzRGOUFFMDIvQzgwNTcyREVG
NzA5MTFFRDlENEI1NjFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4nkMA0GCSqGSIb3DQEBCwUAA4IBAQBhv9TxpauVtFBvau1Z6LIS
+/7aUcVSTam1UED8uUaQyQp1S+7Qk9bajeenvVI6i4OI0QIja/WeqHCzkuy9hDNo
J+H0dpTbs0W73lzecIS68iD0Uq0TehyqGNx2QIYAlsU/iPgArA6jvLr4koYyH8ml
toFLqGyjse0pWVdL2IvBCXKwcR0NroA9WxRuD6ja2o0zOIV4ceNkC356B87rmNxm
Hl+fblnWHSWWjS1bIxcJSsE6hbE2khP5K25mmqpC6ADSm1g1lrfWDJZVQyztLa31
hWLQrxGqJH1akMwRNGbV4TCEWlKNEjw8B4P1jsukd59fM64jcjU5YS2d5Y0RaZc/
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:43 2026 by rpki-client