Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04679AF66F3411EF833F4C23C4F9AE02.roa
File:                     04679AF66F3411EF833F4C23C4F9AE02.roa (raw, json)
Hash identifier:          5qrFUmAuxor0241J4ycCeOd0FvlMJ2jn2CaFq+L9oWc=
Subject key identifier:   00:C8:6E:F4:14:98:D5:08:2D:FF:A9:A3:8B:CF:31:CE:04:F6:76:7C
Certificate issuer:       /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial:       0124
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04679AF66F3411EF833F4C23C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:25:57 +0000
ROA not before:           Thu 19 Feb 2026 04:25:22 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138662
IP address blocks:        103.135.246.0/24 maxlen: 24
                          103.135.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
                          rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A8E2, serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
        Validity
            Not Before: Feb 19 04:25:22 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a43e65-981e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:02:17:66:7f:21:bd:33:a3:14:7a:1d:e2:
                    d2:ee:d5:a4:e0:97:6e:9b:12:6d:82:12:49:c9:7f:
                    f9:91:43:08:62:93:11:b2:3e:99:f6:d3:0d:19:84:
                    0a:14:aa:79:30:c1:6a:44:ea:13:15:1d:d1:36:c4:
                    ad:a7:e5:40:e5:18:7c:cf:57:f8:02:86:fb:ec:41:
                    0e:56:5f:a3:e1:8d:09:8a:77:ec:ce:12:2d:6e:fc:
                    4d:fe:8e:5f:d7:04:9c:8b:7a:3c:52:02:f1:dd:c5:
                    b4:0d:50:83:da:4d:4e:ce:81:af:39:69:3f:78:43:
                    e0:d0:9a:16:cf:e5:99:c1:6b:48:19:76:b2:44:80:
                    c6:cb:b6:82:11:53:3c:57:81:21:f3:0a:78:69:b6:
                    9c:f6:d3:75:06:bc:6e:f1:d2:7a:1e:5e:23:4b:91:
                    37:0c:04:6c:d9:c8:2d:02:ce:95:5e:ed:9e:34:be:
                    a8:f6:f9:fd:b0:e3:83:4a:95:8c:54:15:3b:25:b0:
                    c4:f7:16:b0:ba:0b:0a:be:25:91:5d:e3:d4:1a:10:
                    68:85:ff:36:d9:26:d8:36:ad:4c:ab:cc:ec:79:b7:
                    ab:ef:3b:b4:f1:c1:94:0a:b4:fa:02:08:56:49:35:
                    cf:d9:18:e2:cb:5d:d0:a1:e7:51:c5:ce:c8:ec:00:
                    e3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C8:6E:F4:14:98:D5:08:2D:FF:A9:A3:8B:CF:31:CE:04:F6:76:7C
            X509v3 Authority Key Identifier:
                keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04679AF66F3411EF833F4C23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:81:f9:67:2f:33:9e:1f:27:f8:b0:a8:ae:4b:85:3d:7f:fb:
         d6:ec:c0:64:de:c2:b7:57:ad:ef:e4:68:64:9f:10:d6:80:0c:
         c9:53:48:d2:86:f3:9f:e1:e8:fd:65:28:3f:b5:88:3a:c9:b8:
         34:2e:17:49:5d:ab:7d:a0:82:f3:34:ca:47:07:6c:ab:28:0d:
         c7:6c:30:19:e8:1e:ed:3f:63:3a:05:8e:a7:b0:57:7d:4d:4e:
         60:48:6b:13:24:87:21:7b:80:75:71:a7:0b:94:22:17:ee:9e:
         99:fd:be:9e:8a:8a:32:df:f1:05:f0:2e:a4:c2:68:0f:93:6b:
         18:03:c7:12:0e:0a:fd:bf:47:ce:91:a9:4b:f4:00:50:bf:0b:
         94:08:f1:a9:d6:01:8d:e0:ec:3f:c9:eb:73:93:cf:93:ff:3e:
         8e:51:1e:07:69:b2:d8:87:c1:e4:14:ae:3c:41:fb:60:68:07:
         90:3a:f1:91:64:cb:7c:43:29:f0:7e:1e:3e:ef:4e:f5:cf:ea:
         e1:7d:da:3a:f0:f1:26:e8:56:c9:dd:f8:36:e0:68:96:55:94:
         a6:22:06:a0:fe:ba:ad:08:8a:0c:1d:98:84:ae:e5:51:7f:2a:
         dd:ac:a6:f2:c5:b2:e5:ee:bf:06:70:4d:2b:25:72:81:83:f9:
         8a:02:43:14
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE4RTIxMTAvBgNVBAUTKDBDMDUyNDNCN0VGNTU2MTFFNDBBNERCQkY3RkU3RTkx
MjA5MkE2NTIwHhcNMjYwMjE5MDQyNTIyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2U2NS05ODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxpoCF2Z/Ib0zoxR6HeLS7tWk4JdumxJtghJJyX/5kUMIYpMRsj6Z9tMNGYQK
FKp5MMFqROoTFR3RNsStp+VA5Rh8z1f4Aob77EEOVl+j4Y0JinfszhItbvxN/o5f
1wSci3o8UgLx3cW0DVCD2k1OzoGvOWk/eEPg0JoWz+WZwWtIGXayRIDGy7aCEVM8
V4Eh8wp4abac9tN1Brxu8dJ6Hl4jS5E3DARs2cgtAs6VXu2eNL6o9vn9sOODSpWM
VBU7JbDE9xawugsKviWRXePUGhBohf822SbYNq1Mq8zseber7zu08cGUCrT6AghW
STXP2Rjiy13QoedRxc7I7ADjNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFADIbvQU
mNUILf+po4vPMc4E9nZ8MB8GA1UdIwQYMBaAFAwFJDt+9VYR5ApNu/f+fpEgkqZS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QThFMi9BNDUxRDk4NDZG
MkQxMUVGQjhGMzkyODBDNEY5QUUwMi9EQVVrTzM3MVZoSGtDazI3OV81LWtTQ1Nw
bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RBVWtPMzcxVmhIa0NrMjc5XzUta1NDU3BsSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkE4RTIvQTQ1MUQ5ODQ2RjJEMTFFRkI4RjM5MjgwQzRGOUFFMDIvMDQ2NzlBRjY2
RjM0MTFFRjgzM0Y0QzIzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4f2MA0GCSqGSIb3DQEBCwUAA4IBAQBzgflnLzOeHyf4sKiuS4U9
f/vW7MBk3sK3V63v5GhknxDWgAzJU0jShvOf4ej9ZSg/tYg6ybg0LhdJXat9oILz
NMpHB2yrKA3HbDAZ6B7tP2M6BY6nsFd9TU5gSGsTJIche4B1cacLlCIX7p6Z/b6e
iooy3/EF8C6kwmgPk2sYA8cSDgr9v0fOkalL9ABQvwuUCPGp1gGN4Ow/yetzk8+T
/z6OUR4HabLYh8HkFK48QftgaAeQOvGRZMt8Qynwfh4+7071z+rhfdo68PEm6FbJ
3fg24GiWVZSmIgag/rqtCIoMHZiEruVRfyrdrKbyxbLl7r8GcE0rJXKBg/mKAkMU
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:11 2026 by rpki-client