Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/205773705AEA11EAA2FDF10EC4F9AE02.roa
File:                     205773705AEA11EAA2FDF10EC4F9AE02.roa (raw, json)
Hash identifier:          p8TokgOg6HmU/6RM9wAytMIKZuMQBZvoAENLDz5t8rc=
Subject key identifier:   F9:25:08:4F:5B:67:CE:8B:8B:67:8D:66:18:E6:70:9D:1C:82:A8:4D
Certificate issuer:       /CN=A916943B/serialNumber=9FE15A9A54BA5535D297458805C470362ED87173
Certificate serial:       0B1F
Authority key identifier: 9F:E1:5A:9A:54:BA:55:35:D2:97:45:88:05:C4:70:36:2E:D8:71:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/205773705AEA11EAA2FDF10EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:27:57 +0000
ROA not before:           Fri 18 Apr 2025 20:11:31 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     140088
IP address blocks:        103.148.102.0/24 maxlen: 24
                          103.148.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.crl
                          rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2847 (0xb1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916943B, serialNumber=9FE15A9A54BA5535D297458805C470362ED87173
        Validity
            Not Before: Apr 18 20:11:31 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4069d-71bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:89:a0:f4:f6:b3:1b:c8:8b:13:6a:cb:0a:
                    5c:dd:65:73:95:d8:5a:39:43:5a:09:ed:c5:e6:d5:
                    d6:95:5a:49:4b:2f:a3:a6:80:ab:a2:4f:19:16:9d:
                    1b:52:6b:83:ca:bb:ba:48:be:e5:36:ec:09:ba:1b:
                    99:ad:12:ab:40:91:ab:0c:06:0a:cc:81:47:7e:1f:
                    f6:75:ac:79:6a:51:cc:9f:e5:60:9a:f5:5c:92:68:
                    be:d2:1c:8e:1b:d2:4b:dc:1e:bd:1d:4d:27:bf:56:
                    54:d2:38:f6:bf:d4:97:05:f1:08:66:cc:40:23:d5:
                    59:1c:ab:37:85:cd:64:94:35:74:c1:b9:35:1c:f9:
                    78:27:14:a1:89:ec:fc:fc:19:b5:ce:4b:22:40:fb:
                    8d:01:d4:89:80:95:72:f4:05:5e:01:0c:d8:aa:64:
                    be:c5:4e:35:c4:62:78:8a:fa:ff:b3:37:a8:db:e3:
                    c9:1d:be:19:08:0c:de:63:21:1c:34:12:6f:92:40:
                    b0:25:46:4e:69:19:13:38:6b:5e:2e:26:9a:52:ca:
                    2c:23:14:b7:62:d7:18:ce:69:48:a4:91:e5:7e:6a:
                    f6:f2:d3:81:fc:4f:19:0d:52:20:3d:f8:8a:ca:ac:
                    1c:df:6a:47:75:2c:cb:13:58:06:df:6a:4f:b0:d7:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:25:08:4F:5B:67:CE:8B:8B:67:8D:66:18:E6:70:9D:1C:82:A8:4D
            X509v3 Authority Key Identifier:
                keyid:9F:E1:5A:9A:54:BA:55:35:D2:97:45:88:05:C4:70:36:2E:D8:71:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/205773705AEA11EAA2FDF10EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:8b:3d:c3:66:44:8e:66:90:a5:da:54:ea:79:63:7a:13:0b:
         25:35:64:ba:3b:ff:dc:f7:76:a4:97:4e:b5:63:f4:0b:9b:c5:
         0d:d1:48:02:6e:55:fc:13:84:e8:89:ff:e0:3b:79:c0:10:84:
         26:28:64:90:06:2c:ea:61:1b:4a:82:de:df:ee:0b:b4:53:5e:
         62:85:e5:8e:ba:66:49:2f:82:20:94:a6:96:c7:57:86:17:ae:
         fe:09:28:83:68:4f:5f:ed:f8:36:67:2b:3a:8d:be:04:20:16:
         ac:ac:55:b4:4f:7f:3d:54:49:85:0c:2b:57:68:ab:71:a8:07:
         49:3a:74:00:a9:7e:f0:61:0d:7d:72:81:6e:42:82:3a:ae:30:
         1e:c3:43:34:b4:08:c1:a6:ac:15:1c:9f:14:2b:ca:05:5e:c0:
         3a:06:d0:80:0b:82:68:48:20:4d:a2:ab:5c:d7:1a:9a:1c:47:
         21:90:a3:f3:7e:9e:5f:0b:ab:57:9a:12:09:bf:f6:a0:b6:ec:
         88:c5:5d:9a:32:e7:d9:53:00:07:db:3d:0a:32:94:84:9d:f9:
         a2:cb:bc:de:b4:d1:c4:e0:c7:2e:0c:46:ff:78:30:1a:63:44:
         0f:c0:f0:e8:b7:b3:d8:fc:0f:d0:86:9e:46:74:82:17:e1:46:
         36:83:5d:90
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk0M0IxMTAvBgNVBAUTKDlGRTE1QTlBNTRCQTU1MzVEMjk3NDU4ODA1QzQ3MDM2
MkVEODcxNzMwHhcNMjUwNDE4MjAxMTMxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDY5ZC03MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr2aJoPT2sxvIixNqywpc3WVzldhaOUNaCe3F5tXWlVpJSy+jpoCrok8ZFp0b
UmuDyru6SL7lNuwJuhuZrRKrQJGrDAYKzIFHfh/2dax5alHMn+VgmvVckmi+0hyO
G9JL3B69HU0nv1ZU0jj2v9SXBfEIZsxAI9VZHKs3hc1klDV0wbk1HPl4JxShiez8
/Bm1zksiQPuNAdSJgJVy9AVeAQzYqmS+xU41xGJ4ivr/szeo2+PJHb4ZCAzeYyEc
NBJvkkCwJUZOaRkTOGteLiaaUsosIxS3YtcYzmlIpJHlfmr28tOB/E8ZDVIgPfiK
yqwc32pHdSzLE1gG32pPsNcHjwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPklCE9b
Z86Li2eNZhjmcJ0cgqhNMB8GA1UdIwQYMBaAFJ/hWppUulU10pdFiAXEcDYu2HFz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQzQi82NEYzMUMwNjVB
RTkxMUVBQUM4RjUyMEVDNEY5QUUwMi9uLUZhbWxTNlZUWFNsMFdJQmNSd05pN1lj
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL24tRmFtbFM2VlRYU2wwV0lCY1J3Tmk3WWNYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk0M0IvNjRGMzFDMDY1QUU5MTFFQUFDOEY1MjBFQzRGOUFFMDIvMjA1NzczNzA1
QUVBMTFFQUEyRkRGMTBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5RmMA0GCSqGSIb3DQEBCwUAA4IBAQCtiz3DZkSOZpCl2lTqeWN6
EwslNWS6O//c93akl061Y/QLm8UN0UgCblX8E4Toif/gO3nAEIQmKGSQBizqYRtK
gt7f7gu0U15iheWOumZJL4IglKaWx1eGF67+CSiDaE9f7fg2Zys6jb4EIBasrFW0
T389VEmFDCtXaKtxqAdJOnQAqX7wYQ19coFuQoI6rjAew0M0tAjBpqwVHJ8UK8oF
XsA6BtCAC4JoSCBNoqtc1xqaHEchkKPzfp5fC6tXmhIJv/agtuyIxV2aMufZUwAH
2z0KMpSEnfmiy7zetNHE4McuDEb/eDAaY0QPwPDot7PY/A/Qhp5GdIIX4UY2g12Q
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:30 2026 by rpki-client