Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa
File:                     800F1868BEB311EAAFE28B42C4F9AE02.roa (raw, json)
Hash identifier:          L48BeJIxpvIFiGKT1Su56vXjEs2Cv30+BovfIMH3wVc=
Subject key identifier:   58:A8:7C:87:43:BE:51:05:24:73:C5:52:F0:55:B5:EA:43:18:42:CE
Certificate issuer:       /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
Certificate serial:       0A73
Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:01:23 +0000
ROA not before:           Thu 02 Oct 2025 20:21:17 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140583
IP address blocks:        103.152.0.0/24 maxlen: 24
                          103.157.17.0/24 maxlen: 24
                          2001:df3:7880::/48 maxlen: 48
                          2407:3dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl
                          rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2675 (0xa73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
        Validity
            Not Before: Oct  2 20:21:17 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a446b3-6264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:6d:58:f2:1e:af:1e:8b:e4:3f:32:75:f6:
                    ca:08:19:0a:03:16:fc:39:06:3f:2d:22:3c:77:00:
                    19:6d:58:1d:51:2e:63:aa:60:c2:26:a5:4c:f8:ab:
                    a8:78:23:2a:38:91:88:6c:05:05:b8:6a:6c:d5:8f:
                    1e:a3:5f:4a:b4:71:b9:af:05:34:9e:c5:a4:86:9e:
                    88:c2:4d:11:7a:16:cc:17:ff:da:2b:80:a1:82:ab:
                    b4:2d:e2:9d:fb:e2:b6:c4:bc:7e:8c:17:2f:45:a6:
                    bb:66:e0:be:44:62:cb:ef:68:58:19:46:d6:75:17:
                    e0:aa:cd:7c:29:f7:89:c7:25:c0:ad:a0:15:58:f2:
                    bc:fc:76:3f:fb:e0:0a:d3:2b:46:aa:86:6c:ad:17:
                    8e:97:7f:2e:c4:05:14:5a:f9:6c:bd:94:2c:e2:ef:
                    cd:43:8a:8f:ab:ec:d1:61:fa:ab:64:15:fc:b6:56:
                    bd:6c:6c:9b:6f:74:c2:f4:69:c4:32:c2:29:5c:44:
                    15:62:95:94:f5:1e:8e:a5:e6:f8:80:bb:df:5b:ba:
                    4e:c3:6e:b8:dd:f8:78:4c:11:29:61:7d:e7:24:c0:
                    d8:c1:b5:e7:c5:5c:d4:4b:b0:64:ea:a0:54:70:8d:
                    33:83:3a:b6:61:5a:2d:ac:7b:c4:c6:12:c0:0b:68:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A8:7C:87:43:BE:51:05:24:73:C5:52:F0:55:B5:EA:43:18:42:CE
            X509v3 Authority Key Identifier:
                keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.0.0/24
                  103.157.17.0/24
                IPv6:
                  2001:df3:7880::/48
                  2407:3dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:54:d7:5e:a3:ac:8b:a0:6a:19:56:ce:e7:b2:83:a6:e0:cc:
         e6:fc:d6:4d:5d:e0:9a:5e:a6:79:97:a0:8d:44:d1:44:23:f5:
         aa:cd:c5:2b:a2:b9:73:e4:c1:12:8e:96:81:3a:0d:30:d7:21:
         a0:a3:8b:ff:14:b2:1e:85:4e:8b:89:20:a1:4a:49:43:f3:a0:
         14:87:78:bb:7c:ba:ef:b7:f4:fb:7b:17:44:e8:0b:f5:83:32:
         f7:b1:52:e7:c8:7a:7e:b5:c8:ce:2d:a4:72:5c:83:7e:24:72:
         8c:70:d2:32:06:2a:fc:5b:3a:d6:84:08:20:f0:ff:42:3c:a2:
         ea:1a:53:57:77:46:09:d1:06:08:5d:f9:61:ff:c1:43:f1:46:
         61:9b:43:61:17:00:ae:84:15:6b:b0:53:4c:fa:05:6f:bf:3e:
         39:37:e1:d2:80:54:4d:1b:94:49:c7:24:a3:1c:a9:38:63:40:
         43:f6:56:60:18:0d:27:33:a2:b4:b7:df:6e:28:a3:a4:3d:80:
         94:ab:81:e5:4f:8b:45:5c:22:ec:8b:02:fc:81:0b:82:d1:37:
         d4:a4:99:5b:b1:e6:fa:f4:76:9e:91:b2:ed:31:96:0f:04:4e:
         2b:45:ce:86:ac:a5:06:cd:32:f8:32:fc:47:38:91:e2:6b:1f:
         7e:ed:ba:41
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgICCnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjY4M0MxMTAvBgNVBAUTKEE2QzUwNDlERkZDMjY0MjcxRjRBNzdBNUFFRUFFNDc3
RDdFRUVBRjMwHhcNMjUxMDAyMjAyMTE3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDZiMy02MjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA18FtWPIerx6L5D8ydfbKCBkKAxb8OQY/LSI8dwAZbVgdUS5jqmDCJqVM+Kuo
eCMqOJGIbAUFuGps1Y8eo19KtHG5rwU0nsWkhp6Iwk0RehbMF//aK4Chgqu0LeKd
++K2xLx+jBcvRaa7ZuC+RGLL72hYGUbWdRfgqs18KfeJxyXAraAVWPK8/HY/++AK
0ytGqoZsrReOl38uxAUUWvlsvZQs4u/NQ4qPq+zRYfqrZBX8tla9bGybb3TC9GnE
MsIpXEQVYpWU9R6Opeb4gLvfW7pOw2643fh4TBEpYX3nJMDYwbXnxVzUS7Bk6qBU
cI0zgzq2YVotrHvExhLAC2i+cwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFiofIdD
vlEFJHPFUvBVtepDGELOMB8GA1UdIwQYMBaAFKbFBJ3/wmQnH0p3pa7q5HfX7urz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjgzQy9FMEI1ODAyRTgw
N0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pDY2ZTbmVscnVya2Q5ZnU2
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BzVUVuZl9DWkNjZlNuZWxydXJrZDlmdTZ2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjY4M0MvRTBCNTgwMkU4MDdCMTFFQTgyNDQ2MTI1QzRGOUFFMDIvODAwRjE4NjhC
RUIzMTFFQUFGRTI4QjQyQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS
BAIAATAMAwQAZ5gAAwQAZ50RMBYEAgACMBADBwAgAQ3zeIADBQAkBz3AMA0GCSqG
SIb3DQEBCwUAA4IBAQChVNdeo6yLoGoZVs7nsoOm4Mzm/NZNXeCaXqZ5l6CNRNFE
I/WqzcUrorlz5MESjpaBOg0w1yGgo4v/FLIehU6LiSChSklD86AUh3i7fLrvt/T7
exdE6Av1gzL3sVLnyHp+tcjOLaRyXIN+JHKMcNIyBir8WzrWhAgg8P9CPKLqGlNX
d0YJ0QYIXflh/8FD8UZhm0NhFwCuhBVrsFNM+gVvvz45N+HSgFRNG5RJxySjHKk4
Y0BD9lZgGA0nM6K0t99uKKOkPYCUq4HlT4tFXCLsiwL8gQuC0TfUpJlbseb69Hae
kbLtMZYPBE4rRc6GrKUGzTL4MvxHOJHiax9+7bpB
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:09 2026 by rpki-client