Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/66864FCE688011ECAA829E31C4F9AE02.roa
File:                     66864FCE688011ECAA829E31C4F9AE02.roa (raw, json)
Hash identifier:          AqjcIRcmIevgtyHg7+TFbRQg5uMW7cNzp34M1zNTrrs=
Subject key identifier:   CC:6D:11:AB:FF:F1:BE:76:9B:F6:6C:87:E5:E2:B0:36:7C:21:8B:EB
Certificate issuer:       /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Certificate serial:       04B6
Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/66864FCE688011ECAA829E31C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:48:27 +0000
ROA not before:           Tue 02 Dec 2025 22:57:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149307
IP address blocks:        103.178.96.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
                          rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
        Validity
            Not Before: Dec  2 22:57:47 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4359b-bc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d9:c6:7f:43:ae:bb:dc:2c:44:56:b5:bd:c2:
                    b9:76:bb:cb:e9:3a:ba:d8:4f:39:67:93:54:4f:fa:
                    23:9f:8b:e8:46:ab:41:41:00:d8:b9:a4:d5:a4:64:
                    97:df:ab:d3:0d:8d:12:bb:7b:6d:64:43:b3:1a:c4:
                    e7:c7:c9:38:3c:37:b6:cf:1f:6d:a0:a7:51:97:75:
                    95:ed:88:aa:bc:9d:df:a7:0f:9d:d8:e7:8d:5e:7c:
                    6d:3a:1e:06:bd:7e:82:22:0d:55:09:9e:8c:d5:6f:
                    62:a5:74:ea:66:b1:37:ee:a2:98:eb:bf:9f:b4:56:
                    4e:ef:e1:72:32:9c:61:c7:9e:d0:59:8b:fb:17:31:
                    7f:18:33:7a:ad:22:f0:cd:09:3b:a5:cc:b1:89:5c:
                    ba:8a:99:7c:6c:bb:e2:3c:ac:76:20:09:1f:c9:bf:
                    8b:5c:a2:d4:b7:9a:c1:23:32:8e:71:b1:aa:47:77:
                    73:05:3d:72:12:cf:03:7f:08:d8:65:20:df:1a:a3:
                    d4:50:0d:f1:50:f0:07:5f:6c:78:48:25:1b:b4:b4:
                    9f:0a:4d:63:3a:0e:17:30:de:18:84:0d:01:98:98:
                    b7:8a:eb:29:00:32:ac:83:f1:32:3a:0c:e7:dc:6e:
                    40:fb:01:0b:6d:6f:39:30:17:19:bc:9c:bf:8e:97:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6D:11:AB:FF:F1:BE:76:9B:F6:6C:87:E5:E2:B0:36:7C:21:8B:EB
            X509v3 Authority Key Identifier:
                keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/66864FCE688011ECAA829E31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:b5:01:06:83:9d:15:1e:c0:2a:a9:0b:a7:2e:bb:63:8f:35:
         35:7f:c1:0b:2c:e9:61:2d:5f:0d:0b:19:dc:d9:0d:78:f0:57:
         83:d0:03:23:63:ab:06:49:94:87:34:5d:ce:9f:96:33:3d:9e:
         e5:5e:c3:f8:90:c2:5b:4c:64:20:f7:2a:bb:5f:df:5d:83:bd:
         52:37:59:a5:51:26:8b:47:23:54:0f:95:38:0d:23:09:5d:7c:
         3d:52:d8:15:82:a2:ab:f2:e2:9c:02:75:19:41:1e:13:20:c3:
         85:d9:37:6a:6c:95:db:55:39:ab:82:82:8c:79:a9:67:f8:3d:
         ae:01:b5:7b:06:71:b8:36:ef:12:f7:50:9b:fa:06:e9:17:e0:
         5d:2d:b4:1d:c2:71:30:ac:6b:09:f3:32:bb:1c:46:7c:11:fa:
         26:d1:94:8b:92:dc:bb:b9:f5:92:19:b6:ca:85:87:fb:cb:16:
         de:fd:94:aa:d3:5f:f3:ca:bf:4e:dd:0c:f0:8b:a4:e8:24:94:
         5f:67:df:d3:dc:0e:64:ad:a1:a0:81:31:80:80:47:6b:00:ab:
         c4:c4:30:ca:1a:bb:70:a9:95:71:9d:cf:be:d4:74:98:c6:a3:
         2b:49:d0:a4:4a:12:1f:9a:94:3f:1d:8b:40:53:0a:8a:43:68:
         25:c9:04:95
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG
MDcxNDE3MUYwHhcNMjUxMjAyMjI1NzQ3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzU5Yi1iYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1NnGf0Ouu9wsRFa1vcK5drvL6Tq62E85Z5NUT/ojn4voRqtBQQDYuaTVpGSX
36vTDY0Su3ttZEOzGsTnx8k4PDe2zx9toKdRl3WV7YiqvJ3fpw+d2OeNXnxtOh4G
vX6CIg1VCZ6M1W9ipXTqZrE37qKY67+ftFZO7+FyMpxhx57QWYv7FzF/GDN6rSLw
zQk7pcyxiVy6ipl8bLviPKx2IAkfyb+LXKLUt5rBIzKOcbGqR3dzBT1yEs8DfwjY
ZSDfGqPUUA3xUPAHX2x4SCUbtLSfCk1jOg4XMN4YhA0BmJi3iuspADKsg/EyOgzn
3G5A+wELbW85MBcZvJy/jpdjiQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMxtEav/
8b52m/Zsh+XisDZ8IYvrMB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4
N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkE1Q0QvMjk0MzZGQ0U2ODdDMTFFQ0FBMjZCOTU5QzRGOUFFMDIvNjY4NjRGQ0U2
ODgwMTFFQ0FBODI5RTMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7JgMA0GCSqGSIb3DQEBCwUAA4IBAQC5tQEGg50VHsAqqQunLrtj
jzU1f8ELLOlhLV8NCxnc2Q148FeD0AMjY6sGSZSHNF3On5YzPZ7lXsP4kMJbTGQg
9yq7X99dg71SN1mlUSaLRyNUD5U4DSMJXXw9UtgVgqKr8uKcAnUZQR4TIMOF2Tdq
bJXbVTmrgoKMealn+D2uAbV7BnG4Nu8S91Cb+gbpF+BdLbQdwnEwrGsJ8zK7HEZ8
Efom0ZSLkty7ufWSGbbKhYf7yxbe/ZSq01/zyr9O3Qzwi6ToJJRfZ9/T3A5kraGg
gTGAgEdrAKvExDDKGrtwqZVxnc++1HSYxqMrSdCkShIfmpQ/HYtAUwqKQ2glyQSV
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:42 2026 by rpki-client