Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/500ACD668F7311EF9A3C6933C4F9AE02.roa
File:                     500ACD668F7311EF9A3C6933C4F9AE02.roa (raw, json)
Hash identifier:          38rkI7gMo/qjTlbkGMmtXPcgiB8tmI+DAly1LTV/zOY=
Subject key identifier:   1C:BC:1C:D7:4E:CD:FC:B6:2E:C5:84:63:36:8E:C7:81:01:F9:9D:0D
Certificate issuer:       /CN=A915FCB7/serialNumber=F371AFDB402A3B5C351DACA6B2CE0F4A4D1A8380
Certificate serial:       014C
Authority key identifier: F3:71:AF:DB:40:2A:3B:5C:35:1D:AC:A6:B2:CE:0F:4A:4D:1A:83:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/500ACD668F7311EF9A3C6933C4F9AE02.roa
Signing time:             Wed 01 Jul 2026 07:31:36 +0000
ROA not before:           Wed 01 Jul 2026 07:31:36 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     142118
IP address blocks:        103.166.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.crl
                          rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FCB7, serialNumber=F371AFDB402A3B5C351DACA6B2CE0F4A4D1A8380
        Validity
            Not Before: Jul  1 07:31:36 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a44c257-1889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:d8:b6:64:1a:7d:bf:11:a2:e0:33:43:47:
                    77:08:74:2e:16:9c:98:40:68:7b:0b:9d:fe:fc:09:
                    40:eb:8d:cc:be:a8:8c:22:d4:3c:07:ea:9e:54:42:
                    6e:7b:a2:f3:7c:f1:06:a3:d4:2c:7d:79:27:1c:e9:
                    9c:17:f4:3d:bb:b6:1d:c6:d1:19:78:79:02:af:31:
                    47:0d:62:3c:00:04:8d:ff:04:df:f2:bc:aa:bd:21:
                    9f:84:ec:45:71:56:68:e0:e0:f4:82:11:a9:6f:1f:
                    6b:5c:ab:0c:ba:06:11:be:16:5f:bb:a1:29:38:74:
                    e3:58:20:c9:ec:a3:ae:b4:77:30:80:59:cf:45:2c:
                    ba:37:43:cb:e1:a9:01:08:23:46:24:2c:fb:44:19:
                    29:ac:a6:da:a5:78:f7:53:31:df:0d:cb:eb:63:4e:
                    e0:d1:f8:7d:33:51:11:c0:d3:d7:22:7a:38:18:81:
                    44:96:9d:c7:c1:5d:a5:23:4b:bf:77:b7:26:81:0b:
                    06:f9:6f:80:48:6a:84:20:ea:9a:ab:b2:02:ad:c3:
                    fb:43:e8:c5:73:9d:0c:72:92:57:2c:52:b8:72:64:
                    d6:a3:fb:f4:3f:7b:a5:69:15:9f:9a:c6:a5:10:7f:
                    28:e6:49:83:00:50:87:f4:e3:00:0e:87:d7:1a:a9:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BC:1C:D7:4E:CD:FC:B6:2E:C5:84:63:36:8E:C7:81:01:F9:9D:0D
            X509v3 Authority Key Identifier:
                keyid:F3:71:AF:DB:40:2A:3B:5C:35:1D:AC:A6:B2:CE:0F:4A:4D:1A:83:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/500ACD668F7311EF9A3C6933C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:48:57:6c:51:b4:8f:7b:88:49:cf:91:9f:23:2f:e2:a3:67:
         19:18:3b:f7:df:cd:20:c6:e1:23:a3:3a:83:ea:46:de:80:fd:
         bc:86:c3:ff:31:cc:8d:cc:ae:c2:7d:3d:a6:ab:c1:20:2b:da:
         a0:bc:d9:78:60:25:9c:1f:1d:85:5d:a4:82:cf:19:b0:e8:34:
         79:3d:2e:59:04:33:af:6d:86:ba:c9:ce:ac:d7:b6:3d:bc:72:
         53:b6:be:51:c0:97:af:bc:9f:df:45:c0:3d:00:ff:d1:71:eb:
         86:3b:51:83:02:d5:78:0b:2e:c5:b5:1b:a2:d4:d4:e3:f0:16:
         10:8e:70:db:7e:be:7d:03:ae:07:d9:4f:f6:44:5b:48:47:76:
         90:f0:5c:8d:63:98:9b:ae:48:cf:e7:55:d4:9d:45:ac:27:03:
         ee:e7:d3:97:76:a5:41:43:fd:48:02:f4:3a:e8:4b:8d:b0:91:
         89:15:41:ce:bd:c5:51:2d:81:bb:30:28:f5:1f:4e:69:38:80:
         f8:e9:2c:89:51:a0:69:28:df:9e:50:92:c8:0d:24:74:9e:45:
         49:4d:e6:91:15:df:f5:5a:57:b4:14:cb:89:0d:ac:6b:a6:f6:
         bb:ad:c8:e4:20:42:f3:82:2e:0d:e6:b6:1f:ec:d3:f7:15:81:
         3f:6c:be:c7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZDQjcxMTAvBgNVBAUTKEYzNzFBRkRCNDAyQTNCNUMzNTFEQUNBNkIyQ0UwRjRB
NEQxQTgzODAwHhcNMjYwNzAxMDczMTM2WhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0YzI1Ny0xODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxY/YtmQafb8RouAzQ0d3CHQuFpyYQGh7C53+/AlA643MvqiMItQ8B+qeVEJu
e6LzfPEGo9QsfXknHOmcF/Q9u7YdxtEZeHkCrzFHDWI8AASN/wTf8ryqvSGfhOxF
cVZo4OD0ghGpbx9rXKsMugYRvhZfu6EpOHTjWCDJ7KOutHcwgFnPRSy6N0PL4akB
CCNGJCz7RBkprKbapXj3UzHfDcvrY07g0fh9M1ERwNPXIno4GIFElp3HwV2lI0u/
d7cmgQsG+W+ASGqEIOqaq7ICrcP7Q+jFc50McpJXLFK4cmTWo/v0P3ulaRWfmsal
EH8o5kmDAFCH9OMADofXGqk6nQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBy8HNdO
zfy2LsWEYzaOx4EB+Z0NMB8GA1UdIwQYMBaAFPNxr9tAKjtcNR2sprLOD0pNGoOA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkNCNy82RjRCMzIxNjhG
NzIxMUVGQjc1QjEwMzBDNEY5QUUwMi84M0d2MjBBcU8xdzFIYXltc3M0UFNrMGFn
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgzR3YyMEFxTzF3MUhheW1zczRQU2swYWc0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZDQjcvNkY0QjMyMTY4RjcyMTFFRkI3NUIxMDMwQzRGOUFFMDIvNTAwQUNENjY4
RjczMTFFRjlBM0M2OTMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6aAMA0GCSqGSIb3DQEBCwUAA4IBAQAmSFdsUbSPe4hJz5GfIy/i
o2cZGDv3380gxuEjozqD6kbegP28hsP/McyNzK7CfT2mq8EgK9qgvNl4YCWcHx2F
XaSCzxmw6DR5PS5ZBDOvbYa6yc6s17Y9vHJTtr5RwJevvJ/fRcA9AP/RceuGO1GD
AtV4Cy7FtRui1NTj8BYQjnDbfr59A64H2U/2RFtIR3aQ8FyNY5ibrkjP51XUnUWs
JwPu59OXdqVBQ/1IAvQ66EuNsJGJFUHOvcVRLYG7MCj1H05pOID46SyJUaBpKN+e
UJLIDSR0nkVJTeaRFd/1Wle0FMuJDaxrpva7rcjkIELzgi4N5rYf7NP3FYE/bL7H
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:40 2026 by rpki-client