Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa
File:                     718673B6BB7F11EC9E187F19C4F9AE02.roa (raw, json)
Hash identifier:          vBsafuWlA5fDTGa/5s57fr9OWMHZTtKdoWY5g838LV8=
Subject key identifier:   B7:25:F0:F5:AE:0C:0C:B8:83:15:6C:8C:48:B0:85:E8:84:31:C2:0C
Certificate issuer:       /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504
Certificate serial:       03E7
Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:04:04 +0000
ROA not before:           Thu 04 Dec 2025 23:38:04 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45809
IP address blocks:        103.70.24.0/22 maxlen: 24
                          2001:dce:7::/48 maxlen: 48
                          2001:dce:8::/48 maxlen: 48
                          2001:dce:9::/48 maxlen: 48
                          2001:dce:a::/48 maxlen: 48
                          2001:dce:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl
                          rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504
        Validity
            Not Before: Dec  4 23:38:04 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45563-4b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:85:7e:99:a6:88:38:be:87:c4:2d:75:3d:
                    8e:5d:d2:e2:19:f9:23:77:8c:e2:75:d2:8f:ae:f7:
                    e5:15:74:40:aa:9a:e8:62:af:75:30:2f:38:eb:b7:
                    94:1a:4b:1c:fc:a3:65:4c:54:8d:0d:6a:1c:c3:47:
                    64:ce:32:44:3d:5b:19:cc:21:ae:ec:51:92:78:d4:
                    66:58:11:0c:6e:b1:bc:14:3a:c1:c9:e4:23:fc:b1:
                    0c:78:6d:3c:56:17:29:8d:12:b3:f6:cc:03:49:29:
                    70:4f:e4:fa:86:a2:df:71:28:01:99:d0:b0:ef:cd:
                    4c:25:56:dd:ec:68:58:fc:c6:ab:0b:c1:ff:c8:8a:
                    c0:27:f0:78:d9:1c:4b:85:82:63:b5:eb:04:43:af:
                    46:c5:24:76:6a:16:bb:05:aa:77:69:83:c5:69:f8:
                    a5:6e:15:73:08:da:a0:21:bd:1f:fe:00:30:41:46:
                    b0:62:00:fd:04:37:13:7c:ad:1c:fd:a0:08:c4:1b:
                    8a:6c:9b:ac:67:e7:ee:6b:d9:33:83:62:50:96:93:
                    cb:d2:9f:64:c6:78:7b:cd:9c:7a:44:76:51:09:e9:
                    22:82:57:38:a2:8b:0a:50:70:1d:c1:45:05:f4:46:
                    bc:6f:de:19:70:a1:3c:ca:2c:95:c0:fb:31:5e:ea:
                    3f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:25:F0:F5:AE:0C:0C:B8:83:15:6C:8C:48:B0:85:E8:84:31:C2:0C
            X509v3 Authority Key Identifier:
                keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.24.0/22
                IPv6:
                  2001:dce:7::-2001:dce:a:ffff:ffff:ffff:ffff:ffff
                  2001:dce:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:9f:80:d0:f8:99:77:d9:72:cf:36:13:60:c2:52:0e:78:
         70:e0:d4:f0:7e:82:b4:96:09:f9:a4:42:7b:c9:18:47:3d:3e:
         c8:e9:3d:84:75:32:13:f9:2a:bb:09:65:3f:a0:ea:8c:eb:22:
         68:25:fb:99:32:1c:ff:16:c5:d3:4e:55:c3:7b:bc:e3:a9:16:
         de:d2:9e:4d:f9:99:10:3f:2a:bf:2c:bb:b1:5f:23:d6:d3:8c:
         93:9b:76:4e:30:24:5f:14:63:1a:5d:71:ef:3b:00:3f:cb:d3:
         d9:d3:a6:1a:76:3d:e4:30:66:89:4e:db:4b:cb:44:1e:9c:8f:
         77:ae:ef:f3:d6:3d:78:98:ce:04:d4:fc:6c:b8:12:c8:40:df:
         8e:fc:d3:49:f4:d1:60:44:7a:45:cb:cb:b0:b0:67:9e:4f:88:
         a0:b0:d7:b8:6d:83:ff:cd:c1:37:64:43:0c:9c:13:40:33:95:
         5f:31:8d:b6:2d:24:fe:e4:c4:a9:9e:97:a7:40:06:32:36:9c:
         97:ba:da:25:db:13:31:29:f3:11:81:df:db:f8:1a:3c:27:ec:
         61:a8:13:7c:e0:99:9d:ea:4a:d7:7e:e2:4f:38:67:20:1b:6b:
         ca:30:56:f3:ac:d4:9b:79:80:89:c4:66:6f:d2:98:c2:57:01:
         da:ef:64:cd
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0
REQ3MDM1MDQwHhcNMjUxMjA0MjMzODA0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTU2My00YjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjaFfpmmiDi+h8QtdT2OXdLiGfkjd4ziddKPrvflFXRAqproYq91MC8467eU
Gksc/KNlTFSNDWocw0dkzjJEPVsZzCGu7FGSeNRmWBEMbrG8FDrByeQj/LEMeG08
VhcpjRKz9swDSSlwT+T6hqLfcSgBmdCw781MJVbd7GhY/MarC8H/yIrAJ/B42RxL
hYJjtesEQ69GxSR2aha7Bap3aYPFafilbhVzCNqgIb0f/gAwQUawYgD9BDcTfK0c
/aAIxBuKbJusZ+fua9kzg2JQlpPL0p9kxnh7zZx6RHZRCekiglc4oosKUHAdwUUF
9Ea8b94ZcKE8yiyVwPsxXuo/mQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFLcl8PWu
DAy4gxVsjEiwheiEMcIMMB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC
N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU5M0IvMTAzQzdEMUNCQjdBMTFFQzgyOUVFODBEQzRGOUFFMDIvNzE4NjczQjZC
QjdGMTFFQzlFMTg3RjE5QzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAM
BAIAATAGAwQCZ0YYMCMEAgACMB0wEgMHACABDc4ABwMHACABDc4ACgMHACABDc4g
ADANBgkqhkiG9w0BAQsFAAOCAQEAL/CfgND4mXfZcs82E2DCUg54cODU8H6CtJYJ
+aRCe8kYRz0+yOk9hHUyE/kquwllP6DqjOsiaCX7mTIc/xbF005Vw3u846kW3tKe
TfmZED8qvyy7sV8j1tOMk5t2TjAkXxRjGl1x7zsAP8vT2dOmGnY95DBmiU7bS8tE
HpyPd67v89Y9eJjOBNT8bLgSyEDfjvzTSfTRYER6RcvLsLBnnk+IoLDXuG2D/83B
N2RDDJwTQDOVXzGNti0k/uTEqZ6Xp0AGMjacl7raJdsTMSnzEYHf2/gaPCfsYagT
fOCZnepK137iTzhnIBtryjBW86zUm3mAicRmb9KYwlcB2u9kzQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:45 2026 by rpki-client