Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/B492147E047B11EBBA181F4FC4F9AE02.roa
File:                     B492147E047B11EBBA181F4FC4F9AE02.roa (raw, json)
Hash identifier:          0ZctJGOGr8V49Vrfxq/lUVmvk/WtRWnujAySxgKwvsM=
Subject key identifier:   58:76:FC:3A:5B:19:58:93:BA:4A:A9:69:36:4D:79:C2:7D:CF:1F:6B
Certificate issuer:       /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Certificate serial:       2151
Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/B492147E047B11EBBA181F4FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:14:02 +0000
ROA not before:           Mon 14 Apr 2025 16:23:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     10143
IP address blocks:        103.55.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl
                          rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8529 (0x2151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
        Validity
            Not Before: Apr 14 16:23:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4035a-7730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:da:67:99:2f:93:6f:90:5b:5a:83:d7:ca:
                    ad:34:ac:c3:04:23:b6:71:0d:6b:fe:e0:26:f1:81:
                    96:54:60:ff:54:6e:ed:53:8a:03:52:28:20:24:31:
                    e3:00:14:52:6e:fc:4e:a1:41:88:2d:fb:e9:e7:96:
                    7b:4a:98:1f:b2:0f:b7:fb:0f:af:75:be:e6:a0:2b:
                    12:87:06:2e:43:5e:55:66:da:7c:ac:c0:e2:d6:17:
                    11:b1:1b:08:e9:b5:41:a9:fc:b6:3b:2f:ef:92:75:
                    a3:1c:10:8e:00:ca:36:1a:f8:a4:c9:0a:af:29:c7:
                    04:7d:3c:c4:97:a8:09:7d:3b:bd:3d:b5:fe:33:91:
                    82:d0:b9:4e:0d:13:bc:b5:08:24:29:4f:b4:f1:ea:
                    3a:32:3e:73:3e:a3:d4:6c:88:40:5a:84:c8:96:db:
                    2d:87:44:a2:8e:94:71:02:41:f2:d0:ea:7d:b8:48:
                    b7:71:11:53:92:85:53:8c:d5:80:f5:db:be:2e:45:
                    67:d1:cb:be:93:17:58:22:cd:ca:d2:f8:39:de:22:
                    a1:00:49:dc:4f:64:e2:0f:e4:07:a4:f3:73:e8:33:
                    03:ed:61:33:05:49:2d:33:de:0c:55:2a:7d:16:3a:
                    e0:44:f0:62:02:18:48:23:df:51:92:7f:e5:14:10:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:76:FC:3A:5B:19:58:93:BA:4A:A9:69:36:4D:79:C2:7D:CF:1F:6B
            X509v3 Authority Key Identifier:
                keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/B492147E047B11EBBA181F4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:c6:67:fd:55:d9:18:f3:f5:10:3f:05:d3:5e:79:d2:0d:4a:
         90:48:fc:05:88:cf:38:aa:29:5e:fe:7c:af:f5:a3:18:6e:0d:
         71:b4:eb:cb:79:80:54:d6:d4:82:ab:c0:14:6a:14:d6:9e:0c:
         93:85:2b:fd:68:bb:5b:ca:b6:30:2a:09:11:7a:9b:07:cc:ee:
         f5:a2:66:03:57:f2:47:3a:43:de:26:6f:5d:22:54:5a:9a:68:
         3d:f4:50:e7:c0:a4:ed:40:03:16:02:c3:04:ed:51:06:08:a5:
         72:8f:92:44:3f:9e:21:52:08:2a:5e:9f:9e:63:8e:7f:10:92:
         b8:7c:32:37:7c:ab:00:07:9f:31:04:1e:76:b1:75:41:fe:be:
         a7:8d:18:ea:d7:16:31:36:e0:c0:97:b3:b9:8c:b2:a7:36:ad:
         98:df:ba:56:75:f2:f6:9e:d0:1f:a8:76:b6:ad:2a:63:81:8d:
         ed:a4:91:12:0b:35:90:c9:24:77:dd:34:ca:67:fe:a7:3f:80:
         fa:bc:0e:5e:78:a1:bb:2a:d0:0b:46:7c:16:9c:57:d8:c3:37:
         8a:29:b5:42:ea:ea:98:bd:41:1f:9e:3d:05:eb:ab:1a:e8:7d:
         83:7d:cf:6e:d1:3a:5a:64:e6:ed:d1:6c:97:df:ac:aa:b9:16:
         a2:71:79:32
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg5MEQxMTAvBgNVBAUTKDhEMzc4OTRCMDk0MUVDRkQ0RDZCMDVFMUUxNENBQjg1
Njk4N0IwNUQwHhcNMjUwNDE0MTYyMzM5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDM1YS03NzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIzaZ5kvk2+QW1qD18qtNKzDBCO2cQ1r/uAm8YGWVGD/VG7tU4oDUiggJDHj
ABRSbvxOoUGILfvp55Z7Spgfsg+3+w+vdb7moCsShwYuQ15VZtp8rMDi1hcRsRsI
6bVBqfy2Oy/vknWjHBCOAMo2GvikyQqvKccEfTzEl6gJfTu9PbX+M5GC0LlODRO8
tQgkKU+08eo6Mj5zPqPUbIhAWoTIltsth0SijpRxAkHy0Op9uEi3cRFTkoVTjNWA
9du+LkVn0cu+kxdYIs3K0vg53iKhAEncT2TiD+QHpPNz6DMD7WEzBUktM94MVSp9
FjrgRPBiAhhII99Rkn/lFBALAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFh2/Dpb
GViTukqpaTZNecJ9zx9rMB8GA1UdIwQYMBaAFI03iUsJQez9TWsF4eFMq4Vph7Bd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODkwRC8yMUI3QTgwRUZG
RkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQMU5hd1hoNFV5cmhXbUhz
RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pUZUpTd2xCN1AxTmF3WGg0VXlyaFdtSHNGMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTg5MEQvMjFCN0E4MEVGRkZDMTFFNTg2QjREOTY0QzRGOUFFMDIvQjQ5MjE0N0Uw
NDdCMTFFQkJBMTgxRjRGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZzfUMA0GCSqGSIb3DQEBCwUAA4IBAQA6xmf9VdkY8/UQPwXTXnnS
DUqQSPwFiM84qile/nyv9aMYbg1xtOvLeYBU1tSCq8AUahTWngyThSv9aLtbyrYw
KgkRepsHzO71omYDV/JHOkPeJm9dIlRammg99FDnwKTtQAMWAsME7VEGCKVyj5JE
P54hUggqXp+eY45/EJK4fDI3fKsAB58xBB52sXVB/r6njRjq1xYxNuDAl7O5jLKn
Nq2Y37pWdfL2ntAfqHa2rSpjgY3tpJESCzWQySR33TTKZ/6nP4D6vA5eeKG7KtAL
RnwWnFfYwzeKKbVC6uqYvUEfnj0F66sa6H2Dfc9u0TpaZObt0WyX36yquRaicXky
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:43 2026 by rpki-client