Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/7B0E744E994111F09D282143C4F9AE02.roa
File:                     7B0E744E994111F09D282143C4F9AE02.roa (raw, json)
Hash identifier:          RIRYfr61sHgifDiH6nHo4HSm1yDt5mAbyC1X19pS+Qs=
Subject key identifier:   2B:6C:E9:94:D1:79:FC:88:CE:54:E4:B6:A4:99:66:E6:EF:0E:13:2D
Certificate issuer:       /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
Certificate serial:       04F5
Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/7B0E744E994111F09D282143C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:47:57 +0000
ROA not before:           Mon 03 Nov 2025 00:14:38 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147040
IP address blocks:        103.173.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl
                          rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609E6, serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
        Validity
            Not Before: Nov  3 00:14:38 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45fad-a6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:78:93:78:db:0f:fb:b3:5e:03:97:f4:4d:
                    b8:33:82:32:38:cb:8c:bd:74:ca:1e:73:04:c8:d4:
                    f1:6c:e4:c4:61:f5:25:e7:2f:4f:7f:f5:ca:df:02:
                    a6:05:db:9a:9d:11:27:f4:84:6b:e6:82:79:95:83:
                    9c:72:3d:b1:b4:47:3a:c9:62:15:27:3b:c2:03:44:
                    8e:e4:85:39:30:a6:7e:d3:76:e7:da:3e:d4:05:2a:
                    e9:d2:df:a4:3b:cc:ca:80:61:87:9e:69:4d:c0:18:
                    f6:60:03:01:5a:3b:51:5d:74:d5:dc:cc:26:45:0a:
                    2d:50:bc:9f:a6:26:a2:b2:be:73:32:65:bc:3b:d6:
                    f8:54:36:0a:a4:f1:63:7a:5e:97:d2:02:9f:7c:5e:
                    dd:48:1a:83:b7:29:e1:70:84:ff:07:cf:2a:82:24:
                    a5:67:ee:54:71:a2:64:87:22:2b:ef:46:dd:34:25:
                    7c:9e:fd:31:00:3e:82:f6:5f:32:5b:a1:0c:4b:d9:
                    7c:be:be:02:b9:e4:1d:3b:5c:fc:c3:1b:19:5a:3f:
                    b2:c6:40:c5:c4:07:e1:47:e2:7f:0a:dd:1d:01:95:
                    6d:02:2b:cd:56:2b:07:60:e0:39:ff:f5:f6:e1:00:
                    b1:2f:3e:b4:fc:86:62:75:fc:d3:30:ea:0e:7e:f1:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6C:E9:94:D1:79:FC:88:CE:54:E4:B6:A4:99:66:E6:EF:0E:13:2D
            X509v3 Authority Key Identifier:
                keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/7B0E744E994111F09D282143C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:33:fc:88:4c:19:31:14:7f:99:b9:0e:c0:db:b2:cc:2d:93:
         c5:ca:37:88:29:d0:57:40:eb:87:7c:17:e5:1a:55:4e:b2:4d:
         82:73:ec:22:ba:a8:73:ff:41:f2:94:9f:00:2b:98:4c:5a:7c:
         e3:e8:7b:0a:97:da:fe:b4:2d:5e:98:df:3d:b0:d5:4c:c4:6f:
         6d:3e:e1:4d:dd:9e:90:ea:c4:b4:e2:15:4a:89:8f:bc:e7:f9:
         97:13:ba:1d:d3:4f:fa:73:f3:55:da:42:7d:d5:0c:9c:8e:ce:
         1b:95:c9:f9:ee:16:30:8a:8d:9b:25:3b:26:22:7b:ec:ed:d1:
         94:85:0e:bc:be:d9:db:e6:0b:d4:43:12:af:3d:e4:fe:e8:28:
         eb:02:6d:23:96:fc:d6:56:6b:c1:f6:e3:91:db:c2:ed:2d:47:
         73:44:0d:26:de:52:54:2d:b6:27:23:d9:78:5c:16:b1:7b:dd:
         cc:53:de:d8:73:7f:03:60:fc:89:b3:26:82:41:f2:c7:9f:59:
         38:d5:65:ab:c6:8f:a2:70:f4:ac:5b:74:16:0d:6c:3e:9b:84:
         ea:2a:41:da:8f:d5:6f:d8:a3:d1:b3:77:3a:ec:1e:04:0e:43:
         2d:f7:3c:de:a8:4d:d2:6c:ff:03:6b:85:b8:71:11:a3:4a:11:
         03:58:7d:42
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA5RTYxMTAvBgNVBAUTKDRFNENCNEI5MTUxRTdCQUUxMTJCRUM1MzU5QzMxQzk1
NTgwRUUwMzEwHhcNMjUxMTAzMDAxNDM4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWZhZC1hNmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5R4k3jbD/uzXgOX9E24M4IyOMuMvXTKHnMEyNTxbOTEYfUl5y9Pf/XK3wKm
BduanREn9IRr5oJ5lYOccj2xtEc6yWIVJzvCA0SO5IU5MKZ+03bn2j7UBSrp0t+k
O8zKgGGHnmlNwBj2YAMBWjtRXXTV3MwmRQotULyfpiaisr5zMmW8O9b4VDYKpPFj
el6X0gKffF7dSBqDtynhcIT/B88qgiSlZ+5UcaJkhyIr70bdNCV8nv0xAD6C9l8y
W6EMS9l8vr4CueQdO1z8wxsZWj+yxkDFxAfhR+J/Ct0dAZVtAivNVisHYOA5//X2
4QCxLz60/IZidfzTMOoOfvEnnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCts6ZTR
efyIzlTktqSZZubvDhMtMB8GA1UdIwQYMBaAFE5MtLkVHnuuESvsU1nDHJVYDuAx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDlFNi9CNjE2Qzg2QTRG
NzcxMUVDOUYwOTQ1NkVDNEY5QUUwMi9Ua3kwdVJVZWU2NFJLLXhUV2NNY2xWZ080
REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RreTB1UlVlZTY0UksteFRXY01jbFZnTzRERS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjA5RTYvQjYxNkM4NkE0Rjc3MTFFQzlGMDk0NTZFQzRGOUFFMDIvN0IwRTc0NEU5
OTQxMTFGMDlEMjgyMTQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ61yMA0GCSqGSIb3DQEBCwUAA4IBAQAjM/yITBkxFH+ZuQ7A27LM
LZPFyjeIKdBXQOuHfBflGlVOsk2Cc+wiuqhz/0HylJ8AK5hMWnzj6HsKl9r+tC1e
mN89sNVMxG9tPuFN3Z6Q6sS04hVKiY+85/mXE7od00/6c/NV2kJ91Qycjs4blcn5
7hYwio2bJTsmInvs7dGUhQ68vtnb5gvUQxKvPeT+6CjrAm0jlvzWVmvB9uOR28Lt
LUdzRA0m3lJULbYnI9l4XBaxe93MU97Yc38DYPyJsyaCQfLHn1k41WWrxo+icPSs
W3QWDWw+m4TqKkHaj9Vv2KPRs3c67B4EDkMt9zzeqE3SbP8Da4W4cRGjShEDWH1C
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:04 2026 by rpki-client