Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3F3A8E86912511EBB0270738C4F9AE02.roa
File:                     3F3A8E86912511EBB0270738C4F9AE02.roa (raw, json)
Hash identifier:          4HmlJOrOktHhks4+YpepePdHDFMb0c1U3s/JTxEQeu8=
Subject key identifier:   CC:3F:2D:9A:FC:41:07:08:8B:17:A3:2F:BB:54:44:19:0F:DA:95:3B
Certificate issuer:       /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
Certificate serial:       06C4
Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3F3A8E86912511EBB0270738C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:46:24 +0000
ROA not before:           Tue 30 Mar 2021 06:57:52 +0000
ROA not after:            Wed 01 Mar 2028 00:00:00 +0000
asID:                     134822
IP address blocks:        103.230.165.0/24 maxlen: 24
                          2001:df7:8401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl
                          rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CF83, serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
        Validity
            Not Before: Mar 30 06:57:52 2021 GMT
            Not After : Mar  1 00:00:00 2028 GMT
        Subject: CN=69a40af0-16fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:12:ce:4d:30:dd:99:2f:dd:b2:af:48:93:
                    94:6c:32:af:63:67:f6:3b:34:b2:cc:ca:9e:c8:cd:
                    8a:9f:ac:36:4a:92:30:b8:4b:82:62:57:e5:57:f2:
                    ce:d1:9a:c3:59:5e:9a:f3:5f:2e:e7:70:06:f7:9e:
                    d1:da:eb:85:63:95:bc:23:bd:21:2b:e3:5c:34:0b:
                    23:4a:27:0c:55:d3:5c:cc:94:75:51:c5:5e:82:2f:
                    15:f2:3e:0a:e0:80:a0:e4:d0:70:7f:01:e9:27:79:
                    f9:ca:7f:da:2b:fb:eb:80:e1:ef:1b:31:d4:ef:4c:
                    9b:b4:4d:d4:16:2f:66:a8:d8:e4:08:98:05:3d:ab:
                    7e:48:d9:0a:a3:92:46:f8:94:7d:b9:c2:67:d2:d6:
                    91:f3:1b:86:4e:f2:4a:92:0f:a5:ba:dd:8c:5b:5c:
                    c7:10:93:f4:00:2e:8c:2d:89:79:40:f8:fe:98:a8:
                    7d:97:8b:9b:15:bd:c4:89:9c:13:ac:00:fa:59:31:
                    3c:19:77:9d:3a:0c:fb:70:48:9d:24:a8:f3:c2:92:
                    95:a7:71:bc:e9:6f:e7:f6:d7:9a:74:90:51:0c:a0:
                    33:c0:6a:82:a9:4e:d0:1c:d2:a0:37:98:28:6e:30:
                    4d:50:50:9a:12:ac:4d:c4:82:7d:e8:ae:e3:e1:86:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3F:2D:9A:FC:41:07:08:8B:17:A3:2F:BB:54:44:19:0F:DA:95:3B
            X509v3 Authority Key Identifier:
                keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3F3A8E86912511EBB0270738C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.165.0/24
                IPv6:
                  2001:df7:8401::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:14:ac:b3:bc:1e:54:b4:5f:86:9c:ef:0d:b7:17:7e:f2:fe:
         7c:14:0d:f3:c5:4e:b0:80:ba:61:74:26:a7:ea:f1:d5:aa:62:
         83:eb:65:5e:f0:18:dd:e4:56:11:36:f4:86:9e:fe:08:2a:4a:
         73:ed:bc:e2:9f:11:04:5b:8a:a3:12:00:08:c2:3c:91:5f:bb:
         24:44:7a:e0:8b:d3:e4:fc:d4:da:dd:6c:01:8d:34:76:b7:02:
         c3:00:1b:d0:e4:9e:94:da:58:e3:3a:6f:6e:a4:8c:d5:55:d2:
         21:49:8a:cc:e4:72:51:f3:e7:9e:a2:c4:d7:d3:f5:5c:fd:dd:
         4c:a5:01:be:08:6f:5a:3b:7e:78:24:69:73:30:12:6a:7b:0b:
         49:73:95:9f:f1:92:b6:2f:e6:15:93:c2:11:8c:9c:a6:b5:8d:
         ca:eb:11:61:87:93:0d:90:8e:cb:47:8b:55:af:7a:71:ad:50:
         35:55:e8:f3:02:0a:90:07:21:77:26:3f:94:f7:af:0b:d3:73:
         8c:21:9a:cc:40:3e:7e:72:24:74:8e:88:cb:78:c6:f4:4d:fc:
         b4:f5:0c:cc:de:76:47:c5:a1:13:35:4d:9f:4b:51:2e:84:a5:
         8e:2d:a6:e0:31:39:e7:03:6e:3f:eb:bc:3d:b6:16:c1:e9:31:
         5a:3b:0b:2b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUNGODMxMTAvBgNVBAUTKEY1NUFBQzQ2OEFGMTY0QTU5MzlENzJFQUZERDNBNDcz
M0E3OTk2MDkwHhcNMjEwMzMwMDY1NzUyWhcNMjgwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGFmMC0xNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwB4Szk0w3Zkv3bKvSJOUbDKvY2f2OzSyzMqeyM2Kn6w2SpIwuEuCYlflV/LO
0ZrDWV6a818u53AG957R2uuFY5W8I70hK+NcNAsjSicMVdNczJR1UcVegi8V8j4K
4ICg5NBwfwHpJ3n5yn/aK/vrgOHvGzHU70ybtE3UFi9mqNjkCJgFPat+SNkKo5JG
+JR9ucJn0taR8xuGTvJKkg+lut2MW1zHEJP0AC6MLYl5QPj+mKh9l4ubFb3EiZwT
rAD6WTE8GXedOgz7cEidJKjzwpKVp3G86W/n9teadJBRDKAzwGqCqU7QHNKgN5go
bjBNUFCaEqxNxIJ96K7j4YZFYQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMw/LZr8
QQcIixejL7tURBkP2pU7MB8GA1UdIwQYMBaAFPVarEaK8WSlk51y6v3TpHM6eZYJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0Y4My9BMzk5NjEwNjkx
MjMxMUVCOTBEMTVDMzZDNEY5QUUwMi85VnFzUm9yeFpLV1RuWExxX2RPa2N6cDVs
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlWcXNSb3J4WktXVG5YTHFfZE9rY3pwNWxnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUNGODMvQTM5OTYxMDY5MTIzMTFFQjkwRDE1QzM2QzRGOUFFMDIvM0YzQThFODY5
MTI1MTFFQkIwMjcwNzM4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ+alMA8EAgACMAkDBwAgAQ33hAEwDQYJKoZIhvcNAQELBQADggEB
ANAUrLO8HlS0X4ac7w23F37y/nwUDfPFTrCAumF0Jqfq8dWqYoPrZV7wGN3kVhE2
9Iae/ggqSnPtvOKfEQRbiqMSAAjCPJFfuyREeuCL0+T81NrdbAGNNHa3AsMAG9Dk
npTaWOM6b26kjNVV0iFJiszkclHz556ixNfT9Vz93UylAb4Ib1o7fngkaXMwEmp7
C0lzlZ/xkrYv5hWTwhGMnKa1jcrrEWGHkw2QjstHi1WvenGtUDVV6PMCCpAHIXcm
P5T3rwvTc4whmsxAPn5yJHSOiMt4xvRN/LT1DMzedkfFoRM1TZ9LUS6EpY4tpuAx
OecDbj/rvD22FsHpMVo7Cys=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:10:39 2026 by rpki-client