Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3E6BCA6A912511EBB0270738C4F9AE02.roa
File:                     3E6BCA6A912511EBB0270738C4F9AE02.roa (raw, json)
Hash identifier:          Ao9zWwI+JS8jM2pTbLQ3SkMR5CIaLK49WfPwFqwXdM4=
Subject key identifier:   3C:CD:30:CA:76:B0:E4:29:8B:77:43:16:B4:64:6A:44:F3:55:9F:36
Certificate issuer:       /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
Certificate serial:       06C3
Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3E6BCA6A912511EBB0270738C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:46:23 +0000
ROA not before:           Tue 30 Mar 2021 06:57:52 +0000
ROA not after:            Wed 01 Mar 2028 00:00:00 +0000
asID:                     134819
IP address blocks:        103.230.164.0/24 maxlen: 24
                          2001:df7:8400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl
                          rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731 (0x6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CF83, serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
        Validity
            Not Before: Mar 30 06:57:52 2021 GMT
            Not After : Mar  1 00:00:00 2028 GMT
        Subject: CN=69a40aef-fcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:38:8f:b4:ca:8c:45:53:fe:a5:6d:19:39:1e:
                    22:d0:77:58:f4:0e:12:c4:64:5b:59:02:ef:ad:80:
                    f9:66:77:a9:32:17:83:4b:7e:cb:a2:0f:21:76:f6:
                    8a:62:d4:dd:17:fd:f9:1a:04:15:9e:29:c8:27:99:
                    83:10:cd:b8:b9:e5:58:d4:93:d7:d7:7a:82:0e:74:
                    17:59:66:36:c2:3c:2b:1c:36:45:b9:04:9f:58:80:
                    b5:9a:af:c7:d2:39:7a:8c:e3:73:06:7e:3b:1c:75:
                    c5:c2:e8:17:14:83:39:77:e9:c1:56:7f:89:09:f5:
                    b6:d0:b7:c3:eb:95:3d:96:36:15:7e:9a:18:c3:ce:
                    0d:1e:9d:a9:62:ac:f5:a2:a5:05:c4:d8:cd:39:6e:
                    5f:0e:32:e2:fc:94:92:e3:51:6a:bc:07:5c:38:cd:
                    e0:5c:dc:57:05:9d:a6:41:eb:4d:af:9e:57:87:a3:
                    26:43:d5:b7:32:41:ff:f4:1e:08:01:1b:43:b1:4e:
                    16:cc:3b:9c:c7:e3:0e:29:46:3c:e1:e1:44:02:c5:
                    ff:29:67:7a:bb:0d:66:ad:48:0b:4d:83:3c:80:b2:
                    f9:3a:f5:a6:4d:45:ee:d3:10:62:c7:26:de:7a:9d:
                    57:94:a3:87:0d:ed:aa:cc:36:4f:18:23:56:a8:2b:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CD:30:CA:76:B0:E4:29:8B:77:43:16:B4:64:6A:44:F3:55:9F:36
            X509v3 Authority Key Identifier:
                keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3E6BCA6A912511EBB0270738C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.164.0/24
                IPv6:
                  2001:df7:8400::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:c8:86:59:17:44:26:f9:43:d0:68:6e:72:61:73:00:58:4a:
         96:13:2a:61:c7:b6:ca:42:5a:e1:f6:5f:f6:93:67:89:37:c8:
         7a:f8:dd:7b:0d:33:d8:0f:e6:49:4a:6e:48:3e:61:ff:18:7a:
         0a:07:8b:6a:2c:33:c4:89:b3:10:e0:46:6b:d3:40:82:68:be:
         a1:58:ce:77:8e:49:ac:5f:52:94:35:53:75:88:30:b9:3b:fc:
         3a:64:ef:9f:bc:03:4d:96:32:d4:87:de:2d:b0:5e:57:31:76:
         04:e6:b4:e5:11:f4:e6:4c:a3:42:d2:d7:9c:a8:2d:3c:52:15:
         6b:93:b7:05:a1:26:fc:3b:15:2a:12:49:87:bc:3d:4a:3c:db:
         ef:f9:6d:07:4c:cd:88:a2:06:ff:50:58:f6:6d:68:c8:7b:77:
         8e:a2:0b:7d:56:18:6e:59:e9:0e:87:da:71:72:fd:26:69:0c:
         e5:75:5d:6a:92:0a:e0:55:e0:af:ad:b0:ff:e3:31:56:19:88:
         52:32:f3:54:c3:a5:89:8f:03:76:3b:36:a4:0f:6d:48:2f:3a:
         38:a2:c6:b8:15:0e:89:93:0e:95:11:63:02:fd:7e:70:9f:71:
         36:19:2a:49:2b:33:cf:dc:af:26:93:06:a2:26:fe:89:4e:05:
         52:ee:7b:0b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUNGODMxMTAvBgNVBAUTKEY1NUFBQzQ2OEFGMTY0QTU5MzlENzJFQUZERDNBNDcz
M0E3OTk2MDkwHhcNMjEwMzMwMDY1NzUyWhcNMjgwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGFlZi1mY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9ziPtMqMRVP+pW0ZOR4i0HdY9A4SxGRbWQLvrYD5ZnepMheDS37Log8hdvaK
YtTdF/35GgQVninIJ5mDEM24ueVY1JPX13qCDnQXWWY2wjwrHDZFuQSfWIC1mq/H
0jl6jONzBn47HHXFwugXFIM5d+nBVn+JCfW20LfD65U9ljYVfpoYw84NHp2pYqz1
oqUFxNjNOW5fDjLi/JSS41FqvAdcOM3gXNxXBZ2mQetNr55Xh6MmQ9W3MkH/9B4I
ARtDsU4WzDucx+MOKUY84eFEAsX/KWd6uw1mrUgLTYM8gLL5OvWmTUXu0xBixybe
ep1XlKOHDe2qzDZPGCNWqCs8TQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDzNMMp2
sOQpi3dDFrRkakTzVZ82MB8GA1UdIwQYMBaAFPVarEaK8WSlk51y6v3TpHM6eZYJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0Y4My9BMzk5NjEwNjkx
MjMxMUVCOTBEMTVDMzZDNEY5QUUwMi85VnFzUm9yeFpLV1RuWExxX2RPa2N6cDVs
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlWcXNSb3J4WktXVG5YTHFfZE9rY3pwNWxnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUNGODMvQTM5OTYxMDY5MTIzMTFFQjkwRDE1QzM2QzRGOUFFMDIvM0U2QkNBNkE5
MTI1MTFFQkIwMjcwNzM4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ+akMA8EAgACMAkDBwAgAQ33hAAwDQYJKoZIhvcNAQELBQADggEB
AA7IhlkXRCb5Q9BobnJhcwBYSpYTKmHHtspCWuH2X/aTZ4k3yHr43XsNM9gP5klK
bkg+Yf8YegoHi2osM8SJsxDgRmvTQIJovqFYzneOSaxfUpQ1U3WIMLk7/Dpk75+8
A02WMtSH3i2wXlcxdgTmtOUR9OZMo0LS15yoLTxSFWuTtwWhJvw7FSoSSYe8PUo8
2+/5bQdMzYiiBv9QWPZtaMh7d46iC31WGG5Z6Q6H2nFy/SZpDOV1XWqSCuBV4K+t
sP/jMVYZiFIy81TDpYmPA3Y7NqQPbUgvOjiixrgVDomTDpURYwL9fnCfcTYZKkkr
M8/cryaTBqIm/olOBVLuews=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:09:58 2026 by rpki-client