Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/BAC363F00DDD11EBAF7D927FC4F9AE02.roa
File:                     BAC363F00DDD11EBAF7D927FC4F9AE02.roa (raw, json)
Hash identifier:          U7Xb+WB2Zy8rYE3wkWAyIpelmLIP9RIDmbOk5JFzEG4=
Subject key identifier:   4B:66:0D:28:54:E7:7F:2F:BA:E9:52:D1:C5:3E:32:50:5E:77:A9:39
Certificate issuer:       /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Certificate serial:       0827
Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/BAC363F00DDD11EBAF7D927FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:24:52 +0000
ROA not before:           Tue 22 Jul 2025 22:03:29 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        103.117.141.0/24 maxlen: 24
                          103.144.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
                          rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087 (0x827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
        Validity
            Not Before: Jul 22 22:03:29 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a43014-1ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:ee:c0:64:ce:75:63:a2:85:cc:12:62:1c:
                    a1:3e:b9:71:76:1e:79:c5:5a:0a:3b:fb:ac:80:eb:
                    50:7a:c5:50:41:12:a6:40:e8:53:63:da:08:26:5a:
                    1d:75:12:d5:9f:ef:98:28:db:64:ee:05:12:ce:a1:
                    96:21:c3:04:98:1e:32:2e:f6:1f:f3:95:7b:b6:1b:
                    a8:ff:0e:19:4e:76:53:59:cd:0d:5b:08:71:c9:6d:
                    1c:7c:46:72:8f:b3:9f:e0:35:ac:53:63:8a:ce:39:
                    be:9d:0c:34:fa:eb:b4:a9:73:86:9c:d8:68:80:d3:
                    bd:8b:27:16:90:04:d1:f5:4b:0e:3d:2f:d6:65:6d:
                    be:6c:24:a6:df:53:48:99:10:e3:77:a3:2e:c0:89:
                    0b:38:4d:0c:c0:50:3d:bf:18:27:b6:12:da:d6:7f:
                    de:a8:af:92:f6:5a:02:ae:c9:03:e7:b0:60:d1:97:
                    d0:ab:a0:be:b2:76:47:18:77:9f:34:10:c3:90:7c:
                    96:32:50:45:64:99:c3:92:e6:10:d7:67:d3:34:36:
                    b3:ef:a0:cc:14:74:09:4b:a8:ec:2f:e2:80:0a:91:
                    4f:0b:d5:cf:6c:68:98:a6:f7:08:3d:10:0a:70:60:
                    60:c4:07:ac:6f:37:19:9c:52:ec:bc:e3:b3:69:da:
                    91:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:66:0D:28:54:E7:7F:2F:BA:E9:52:D1:C5:3E:32:50:5E:77:A9:39
            X509v3 Authority Key Identifier:
                keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/BAC363F00DDD11EBAF7D927FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.141.0/24
                  103.144.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:65:9a:de:4b:c4:f7:fe:c1:49:76:2a:76:9f:47:20:48:30:
         2a:89:aa:0d:0e:68:2d:fc:27:59:52:8c:1c:a1:1b:1f:25:15:
         39:c7:41:ac:6a:90:40:7c:ad:ed:c8:c2:17:2b:77:09:0d:8a:
         10:7e:a9:63:df:8d:dd:11:bf:c1:c1:d5:27:8b:f8:10:f7:e0:
         68:ef:a5:c1:7d:04:ac:33:42:08:6d:1b:d5:6e:9c:30:9e:06:
         6d:54:0b:33:f8:e9:3d:3e:75:c7:4a:a7:f8:ef:f7:2f:a6:f7:
         48:98:cc:07:28:8b:e8:58:fa:40:6b:4f:96:c6:82:c7:9c:07:
         26:b3:2b:e4:5f:00:75:db:1f:b8:c5:46:db:5f:c1:10:98:4c:
         c8:44:e7:20:4c:cb:ee:32:8f:a5:38:38:70:65:02:8b:da:75:
         dd:24:22:9d:31:01:02:b9:88:b9:2a:16:01:f2:b2:76:04:50:
         33:19:c5:bc:7d:17:43:62:3f:49:d4:59:d0:98:e5:7c:5d:1d:
         d3:d7:42:e8:5f:3d:c4:7c:6d:de:5a:43:c7:c2:cf:0b:d2:79:
         95:7f:97:14:5f:18:fa:8c:cf:37:f5:ce:88:c3:f0:61:c6:56:
         7e:38:c9:0d:ee:9a:8d:75:af:1e:f4:6c:9f:a7:77:74:5c:96:
         0f:b3:51:ff
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZEOTYxMTAvBgNVBAUTKENEOEJCRTcwNkNDRDlCNTUzMkNGM0VCMUQ1RkJCRDdE
M0UzRUJFQTQwHhcNMjUwNzIyMjIwMzI5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzAxNC0xZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApQruwGTOdWOihcwSYhyhPrlxdh55xVoKO/usgOtQesVQQRKmQOhTY9oIJlod
dRLVn++YKNtk7gUSzqGWIcMEmB4yLvYf85V7thuo/w4ZTnZTWc0NWwhxyW0cfEZy
j7Of4DWsU2OKzjm+nQw0+uu0qXOGnNhogNO9iycWkATR9UsOPS/WZW2+bCSm31NI
mRDjd6MuwIkLOE0MwFA9vxgnthLa1n/eqK+S9loCrskD57Bg0ZfQq6C+snZHGHef
NBDDkHyWMlBFZJnDkuYQ12fTNDaz76DMFHQJS6jsL+KACpFPC9XPbGiYpvcIPRAK
cGBgxAesbzcZnFLsvOOzadqRjQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEtmDShU
538vuulS0cU+MlBed6k5MB8GA1UdIwQYMBaAFM2LvnBszZtVMs8+sdX7vX0+Pr6k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQ5Ni83NTY2RjUyNjBE
REIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0xVXl6ejZ4MWZ1OWZUNC12
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZdS1jR3pObTFVeXp6NngxZnU5ZlQ0LXZxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZEOTYvNzU2NkY1MjYwRERCMTFFQkFGN0IxMDdDQzRGOUFFMDIvQkFDMzYzRjAw
REREMTFFQkFGN0Q5MjdGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ3WNAwQAZ5CLMA0GCSqGSIb3DQEBCwUAA4IBAQBjZZreS8T3/sFJ
dip2n0cgSDAqiaoNDmgt/CdZUowcoRsfJRU5x0GsapBAfK3tyMIXK3cJDYoQfqlj
343dEb/BwdUni/gQ9+Bo76XBfQSsM0IIbRvVbpwwngZtVAsz+Ok9PnXHSqf47/cv
pvdImMwHKIvoWPpAa0+WxoLHnAcmsyvkXwB12x+4xUbbX8EQmEzIROcgTMvuMo+l
ODhwZQKL2nXdJCKdMQECuYi5KhYB8rJ2BFAzGcW8fRdDYj9J1FnQmOV8XR3T10Lo
Xz3EfG3eWkPHws8L0nmVf5cUXxj6jM839c6Iw/BhxlZ+OMkN7pqNda8e9Gyfp3d0
XJYPs1H/
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:23 2026 by rpki-client