Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa
File:                     F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (raw, json)
Hash identifier:          WN4BlerUnjkJI10IF9VqKFEGkz0wyD5uEhdsLHHMXfE=
Subject key identifier:   73:F2:D0:1E:3C:E0:EF:6A:D2:D9:9B:E9:73:93:08:74:79:BD:15:9F
Certificate issuer:       /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
Certificate serial:       0262
Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:58:42 +0000
ROA not before:           Fri 31 Oct 2025 02:16:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     140607
IP address blocks:        103.4.102.0/24 maxlen: 24
                          103.4.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl
                          rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
        Validity
            Not Before: Oct 31 02:16:45 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a41be1-9df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b5:dc:94:42:85:88:0d:37:d7:78:d8:b5:9c:
                    03:03:f4:db:8e:c5:c9:e1:a6:d0:b0:46:ce:22:9d:
                    e5:a0:46:6d:85:30:54:d1:c4:db:ac:f2:11:4f:15:
                    c4:2e:a4:6a:42:ab:17:37:97:17:2b:fb:8d:0b:d7:
                    1e:83:c3:61:91:77:2a:03:5c:54:d3:f5:fb:87:82:
                    16:1b:31:cc:19:7d:85:1e:f7:cf:9d:c4:d9:d3:44:
                    b0:72:84:b3:ae:27:30:6c:6d:c0:fa:9b:a4:87:05:
                    5b:9e:f8:f4:30:91:ba:ec:43:ed:17:57:75:c2:03:
                    19:e9:43:a4:d4:97:4d:10:97:77:60:ad:4e:3e:ba:
                    ea:99:93:b2:52:ba:57:6f:f9:6b:a4:bc:56:e0:16:
                    6f:da:fe:d1:f1:f1:d4:ef:a8:cb:fc:49:31:4f:5a:
                    60:85:79:cb:28:bc:b6:39:fe:7b:7c:b3:52:06:54:
                    53:b0:2c:17:83:9d:5d:9e:30:a3:4c:8b:0c:7d:a9:
                    06:23:e4:4f:c5:86:2b:f4:06:d9:e0:65:6d:d2:0f:
                    21:7c:6f:c8:ed:08:1b:e0:a0:e8:7e:e8:52:69:ef:
                    74:c6:91:6b:2a:9f:bb:b2:af:41:f2:a1:5b:80:72:
                    59:6a:4a:50:28:5c:8e:37:31:59:f2:1a:23:55:b8:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F2:D0:1E:3C:E0:EF:6A:D2:D9:9B:E9:73:93:08:74:79:BD:15:9F
            X509v3 Authority Key Identifier:
                keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:71:0d:e2:d9:a3:7c:da:37:64:aa:4d:b7:95:3a:a4:28:bf:
         2e:52:bb:c2:4a:a1:fd:d9:c1:41:14:b1:5c:d6:46:cd:3c:a1:
         ec:d8:7e:db:52:bc:67:db:9b:ad:9a:c6:06:59:35:01:50:00:
         19:c1:04:23:2e:96:49:6e:31:60:bc:06:ff:9f:e4:b3:d6:7b:
         4b:11:bf:eb:cb:45:29:0e:ed:aa:23:8c:4b:9d:5c:43:7b:39:
         15:77:10:e0:03:7e:29:96:94:9e:cf:16:5e:92:6a:da:24:4f:
         35:ef:03:49:1f:06:2d:4e:bb:c4:ff:f2:00:57:7e:25:68:ea:
         60:d9:49:97:ef:3f:32:de:1e:61:e4:69:47:37:ad:e9:d8:3c:
         15:8f:f8:95:ee:f9:0d:63:5f:b2:b5:67:fd:1a:07:1d:49:dd:
         cf:d7:44:1b:9a:c6:0d:e8:91:34:dc:6f:a0:98:ee:e7:0b:ae:
         a3:77:f0:d9:2f:9c:d2:65:60:9a:f5:a7:97:31:fd:4c:3f:d2:
         2e:72:6e:8a:ea:9c:e6:80:d0:b5:85:50:8c:29:39:7c:97:80:
         ec:22:26:1e:0a:33:06:a2:78:43:2b:2b:4f:cd:1f:ff:92:1b:
         29:7f:26:eb:e6:a5:80:41:d0:a7:1c:44:77:f0:58:ec:65:ec:
         0c:8a:58:99
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIwQzkxMTAvBgNVBAUTKDA3MzgxN0RCNTI5Q0RCRUIzRkY5MzhBRTVFRTA4NDg4
RTE3RTRFOTAwHhcNMjUxMDMxMDIxNjQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWJlMS05ZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAirXclEKFiA0313jYtZwDA/TbjsXJ4abQsEbOIp3loEZthTBU0cTbrPIRTxXE
LqRqQqsXN5cXK/uNC9ceg8NhkXcqA1xU0/X7h4IWGzHMGX2FHvfPncTZ00SwcoSz
ricwbG3A+pukhwVbnvj0MJG67EPtF1d1wgMZ6UOk1JdNEJd3YK1OPrrqmZOyUrpX
b/lrpLxW4BZv2v7R8fHU76jL/EkxT1pghXnLKLy2Of57fLNSBlRTsCwXg51dnjCj
TIsMfakGI+RPxYYr9AbZ4GVt0g8hfG/I7Qgb4KDofuhSae90xpFrKp+7sq9B8qFb
gHJZakpQKFyONzFZ8hojVbhYNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHPy0B48
4O9q0tmb6XOTCHR5vRWfMB8GA1UdIwQYMBaAFAc4F9tSnNvrP/k4rl7ghIjhfk6Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjBDOS8wQzc3OENCNDdE
MUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzItc18tVGl1WHVDRWlPRi1U
cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J6Z1gyMUtjMi1zXy1UaXVYdUNFaU9GLVRwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUIwQzkvMEM3NzhDQjQ3RDFBMTFFRDhFOEJFQjgyQzRGOUFFMDIvRjBGMDlFQUE3
RDFEMTFFREFFMENGOTE3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZwRmMA0GCSqGSIb3DQEBCwUAA4IBAQDTcQ3i2aN82jdkqk23lTqk
KL8uUrvCSqH92cFBFLFc1kbNPKHs2H7bUrxn25utmsYGWTUBUAAZwQQjLpZJbjFg
vAb/n+Sz1ntLEb/ry0UpDu2qI4xLnVxDezkVdxDgA34plpSezxZekmraJE817wNJ
HwYtTrvE//IAV34laOpg2UmX7z8y3h5h5GlHN63p2DwVj/iV7vkNY1+ytWf9Ggcd
Sd3P10QbmsYN6JE03G+gmO7nC66jd/DZL5zSZWCa9aeXMf1MP9Iucm6K6pzmgNC1
hVCMKTl8l4DsIiYeCjMGonhDKytPzR//khspfybr5qWAQdCnHER38FjsZewMiliZ
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:01 2026 by rpki-client