Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/6EA165728E8F11EEA8A9EE68C4F9AE02.roa
File:                     6EA165728E8F11EEA8A9EE68C4F9AE02.roa (raw, json)
Hash identifier:          8RfREkb1TfRtm9mZNRjcCr0gSCyT+B9RHPPp4JceAOY=
Subject key identifier:   6A:52:5A:48:70:6D:ED:5A:13:3F:DA:C2:53:74:8D:21:89:A2:1C:C8
Certificate issuer:       /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial:       0AF2
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/6EA165728E8F11EEA8A9EE68C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:38:52 +0000
ROA not before:           Thu 04 Sep 2025 20:00:10 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     58895
IP address blocks:        103.104.96.0/23 maxlen: 24
                          103.193.18.0/24 maxlen: 24
                          203.109.40.0/24 maxlen: 24
                          203.109.41.0/24 maxlen: 24
                          203.109.42.0/24 maxlen: 24
                          203.109.43.0/24 maxlen: 24
                          2401:f8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
                          rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2802 (0xaf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
        Validity
            Not Before: Sep  4 20:00:10 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a45d8c-da2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3d:cb:72:96:ee:90:49:38:f5:97:87:88:bb:
                    a3:71:4a:e6:b0:42:0a:9e:6a:0a:97:69:76:04:d6:
                    cd:8b:96:90:ce:a7:55:f6:ea:6c:ba:b9:05:16:b8:
                    04:54:84:09:15:7f:25:43:46:39:e9:26:b2:5c:02:
                    3f:0b:dc:f6:9b:bc:72:f8:44:18:1c:23:54:87:37:
                    24:f0:43:6f:cc:3d:15:7c:cd:9f:4e:f5:00:17:97:
                    e3:10:13:fc:e8:75:18:c2:be:e6:16:5a:31:f5:6b:
                    10:dc:c8:26:da:83:dd:f8:c9:f0:c7:79:73:42:2b:
                    5a:e1:62:20:56:64:00:7b:97:81:70:97:c8:fc:a9:
                    0e:3f:40:39:7e:bc:48:65:d0:a1:2d:67:56:91:13:
                    38:74:c8:27:e6:31:aa:11:58:76:69:8f:6e:d7:33:
                    9b:f7:e1:a3:df:dd:99:ac:5f:0b:1d:b1:77:83:b3:
                    40:1a:d5:4d:8c:14:4c:21:e0:04:05:a2:0f:81:08:
                    b5:b5:0e:64:88:c3:b7:15:f4:d8:25:76:ef:f9:f4:
                    60:a9:dc:99:b0:72:20:88:b8:14:25:2d:5b:a9:ed:
                    19:0d:c6:0c:05:81:ac:c0:7e:8e:75:e0:f7:7f:e1:
                    1d:2e:71:93:25:44:90:5a:56:7c:df:c3:a8:15:33:
                    e5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:52:5A:48:70:6D:ED:5A:13:3F:DA:C2:53:74:8D:21:89:A2:1C:C8
            X509v3 Authority Key Identifier:
                keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/6EA165728E8F11EEA8A9EE68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.96.0/23
                  103.193.18.0/24
                  203.109.40.0/22
                IPv6:
                  2401:f8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:a6:d8:3f:6c:a6:22:b9:bd:c2:23:23:e7:94:b8:e9:4d:72:
         3e:8d:ff:50:6a:fa:50:b0:b4:d7:8a:98:8c:d1:4b:04:80:83:
         86:81:93:6a:e3:e3:a9:d7:d2:c0:dc:df:80:f4:85:33:5f:4a:
         87:e5:96:ef:5c:43:11:f5:61:af:c7:0a:3e:a8:91:58:ba:ab:
         42:12:d9:bc:ab:f2:80:66:86:8b:7e:12:6a:e3:93:eb:45:7d:
         1e:3a:a7:99:9c:7d:86:3f:b4:ff:9b:fa:92:1e:6b:ab:16:fc:
         68:32:ba:e1:04:c2:01:a6:38:74:ba:82:07:06:15:d7:03:c2:
         0c:e2:0b:9f:91:72:0c:21:7f:71:e7:b3:79:12:57:c3:99:ec:
         26:e1:d0:9e:02:1e:f4:3b:ae:84:cc:39:54:d0:2e:c4:93:c3:
         49:54:60:50:20:11:86:08:08:79:cf:31:6c:a1:54:92:99:91:
         46:12:e2:a1:fd:76:89:e0:33:85:ba:48:5e:51:95:77:48:cc:
         45:82:0e:f4:1f:39:b7:9a:f4:36:d0:83:cc:7a:a1:ff:a3:9d:
         d2:4e:4b:a9:59:b4:be:2f:cf:da:df:08:ee:f5:4f:46:81:b9:
         1c:a3:49:36:5c:55:48:fc:27:60:d0:6e:32:50:98:82:3b:00:
         b6:a2:8d:a0
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI3N0MxMTAvBgNVBAUTKDcwNzBDNTU2NUNDMkZFNDU2QzMxNjA0MDhCNkU3RkI2
ODBDMDhDMTkwHhcNMjUwOTA0MjAwMDEwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWQ4Yy1kYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqD3LcpbukEk49ZeHiLujcUrmsEIKnmoKl2l2BNbNi5aQzqdV9upsurkFFrgE
VIQJFX8lQ0Y56SayXAI/C9z2m7xy+EQYHCNUhzck8ENvzD0VfM2fTvUAF5fjEBP8
6HUYwr7mFlox9WsQ3Mgm2oPd+Mnwx3lzQita4WIgVmQAe5eBcJfI/KkOP0A5frxI
ZdChLWdWkRM4dMgn5jGqEVh2aY9u1zOb9+Gj392ZrF8LHbF3g7NAGtVNjBRMIeAE
BaIPgQi1tQ5kiMO3FfTYJXbv+fRgqdyZsHIgiLgUJS1bqe0ZDcYMBYGswH6OdeD3
f+EdLnGTJUSQWlZ838OoFTPlKwIDAQABo4ICezCCAncwHQYDVR0OBBYEFGpSWkhw
be1aEz/awlN0jSGJohzIMB8GA1UdIwQYMBaAFHBwxVZcwv5FbDFgQItuf7aAwIwZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjc3Qy8yODE0Rjc3QTY5
QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19rVnNNV0JBaTI1X3RvREFq
QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NIREZWbHpDX2tWc01XQkFpMjVfdG9EQWpCay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUI3N0MvMjgxNEY3N0E2OUI1MTFFQUJBNjAxNzUyQzRGOUFFMDIvNkVBMTY1NzI4
RThGMTFFRUE4QTlFRTY4QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQBZ2hgAwQAZ8ESAwQCy20oMA0EAgACMAcDBQAkAfjAMA0GCSqGSIb3
DQEBCwUAA4IBAQAnptg/bKYiub3CIyPnlLjpTXI+jf9QavpQsLTXipiM0UsEgIOG
gZNq4+Op19LA3N+A9IUzX0qH5ZbvXEMR9WGvxwo+qJFYuqtCEtm8q/KAZoaLfhJq
45PrRX0eOqeZnH2GP7T/m/qSHmurFvxoMrrhBMIBpjh0uoIHBhXXA8IM4gufkXIM
IX9x57N5ElfDmewm4dCeAh70O66EzDlU0C7Ek8NJVGBQIBGGCAh5zzFsoVSSmZFG
EuKh/XaJ4DOFukheUZV3SMxFgg70Hzm3mvQ20IPMeqH/o53STkupWbS+L8/a3wju
9U9Ggbkco0k2XFVI/Cdg0G4yUJiCOwC2oo2g
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:21 2026 by rpki-client