Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa
File:                     EB429364CA3811EE99BEB838C4F9AE02.roa (raw, json)
Hash identifier:          d9hXW1aA6CWn5i8mIcPw33T0SY+KBCLmc1Zny/WXhzw=
Subject key identifier:   B0:A7:E3:DE:15:56:A7:3C:A0:ED:9C:65:1C:4D:BE:C2:68:F1:17:05
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       13CC
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:20:54 +0000
ROA not before:           Wed 06 Aug 2025 17:26:38 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4826
IP address blocks:        203.12.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5068 (0x13cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Aug  6 17:26:38 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48386-a332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:2e:39:cc:9c:bd:78:60:7c:9c:00:17:34:
                    05:a8:37:09:9c:53:13:d2:a8:be:2b:07:fa:ce:4a:
                    e4:17:8b:33:b9:35:7d:dc:d6:9c:a6:6f:2a:88:a2:
                    a4:0b:3e:41:ff:64:db:48:c0:8c:08:45:74:75:52:
                    fa:57:4e:16:9c:87:40:07:c1:86:ec:8e:2e:cc:29:
                    8b:ba:9a:9b:78:2c:aa:5a:05:1d:9c:61:31:1a:74:
                    9f:43:74:c7:0b:44:88:e5:98:f4:84:d4:d4:45:1f:
                    e8:98:20:86:d7:38:01:87:d5:9d:10:84:69:0f:93:
                    23:1b:50:e3:95:e3:8c:fd:ff:c8:d6:91:65:19:02:
                    84:81:d0:22:ba:8a:09:47:21:2c:9b:32:83:49:c9:
                    6c:b8:88:81:25:48:3f:3d:a7:1a:d1:3f:52:67:94:
                    6a:a7:26:4b:3e:52:3d:0f:7b:bc:2b:88:e7:f3:7f:
                    47:f6:0e:3a:22:51:89:bc:79:39:79:21:db:4a:42:
                    2f:2d:b9:16:70:23:da:de:16:6e:b5:fc:da:c5:1b:
                    5f:e9:b9:02:98:63:24:8d:66:4e:0d:e8:f6:04:95:
                    4b:b6:fa:dd:97:be:2c:ff:9b:1e:dd:40:13:5c:82:
                    d2:be:aa:4c:3c:1f:85:8f:46:75:3a:af:ae:8b:e7:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A7:E3:DE:15:56:A7:3C:A0:ED:9C:65:1C:4D:BE:C2:68:F1:17:05
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:3a:e5:0f:90:49:f7:71:37:ab:a2:5e:eb:96:dc:67:04:6d:
         cd:96:fa:4b:4d:83:42:38:6b:0c:73:c0:27:91:6e:15:1a:23:
         38:2c:09:e7:b8:55:2c:4b:cc:80:5a:19:57:32:58:3c:33:95:
         13:60:9a:36:e0:6e:81:72:48:eb:e6:d3:ec:27:70:5d:17:fa:
         93:bb:07:b9:9f:17:15:2f:ad:d5:56:e2:00:ec:72:7f:7e:51:
         e6:01:5c:a1:a5:00:87:a1:a1:94:e6:99:16:ae:a3:0a:cf:70:
         aa:38:8a:58:e7:d0:d2:55:3b:5d:df:5d:6a:73:e6:d1:c9:86:
         01:3e:30:e7:03:97:08:74:34:40:c4:a3:23:15:87:ed:3f:1c:
         d8:0d:b2:c3:9d:a7:9c:90:db:51:2e:3e:31:0e:68:71:e5:63:
         fc:18:cb:17:8b:29:41:75:d0:a6:91:f3:50:8a:0e:d6:67:79:
         33:ea:59:db:3f:76:6e:09:70:b1:ef:0f:4e:50:26:aa:e1:47:
         d8:ad:1b:d9:65:ea:d7:b2:81:bd:3c:90:55:4e:41:11:bb:a1:
         cf:74:ea:53:e9:3a:8e:c4:ca:c9:0f:f9:fd:ff:a7:dc:35:0a:
         9c:4a:b2:ee:bf:aa:06:18:66:46:80:5d:d2:58:62:95:4b:f7:
         ca:e5:10:b0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICE8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw
MTBCQjFBOUYwHhcNMjUwODA2MTcyNjM4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODM4Ni1hMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnkEuOcycvXhgfJwAFzQFqDcJnFMT0qi+Kwf6zkrkF4szuTV93Nacpm8qiKKk
Cz5B/2TbSMCMCEV0dVL6V04WnIdAB8GG7I4uzCmLupqbeCyqWgUdnGExGnSfQ3TH
C0SI5Zj0hNTURR/omCCG1zgBh9WdEIRpD5MjG1DjleOM/f/I1pFlGQKEgdAiuooJ
RyEsmzKDSclsuIiBJUg/Paca0T9SZ5RqpyZLPlI9D3u8K4jn839H9g46IlGJvHk5
eSHbSkIvLbkWcCPa3hZutfzaxRtf6bkCmGMkjWZODej2BJVLtvrdl74s/5se3UAT
XILSvqpMPB+Fj0Z1Oq+ui+fWlwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLCn494V
Vqc8oO2cZRxNvsJo8RcFMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE
MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkE5ODMvMTY3MzBEMjBDRDBGMTFFODlEOUZGMTY1QzRGOUFFMDIvRUI0MjkzNjRD
QTM4MTFFRTk5QkVCODM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAywxhMA0GCSqGSIb3DQEBCwUAA4IBAQBHOuUPkEn3cTerol7rltxn
BG3NlvpLTYNCOGsMc8AnkW4VGiM4LAnnuFUsS8yAWhlXMlg8M5UTYJo24G6Bckjr
5tPsJ3BdF/qTuwe5nxcVL63VVuIA7HJ/flHmAVyhpQCHoaGU5pkWrqMKz3CqOIpY
59DSVTtd311qc+bRyYYBPjDnA5cIdDRAxKMjFYftPxzYDbLDnaeckNtRLj4xDmhx
5WP8GMsXiylBddCmkfNQig7WZ3kz6lnbP3ZuCXCx7w9OUCaq4UfYrRvZZerXsoG9
PJBVTkERu6HPdOpT6TqOxMrJD/n9/6fcNQqcSrLuv6oGGGZGgF3SWGKVS/fK5RCw
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:07 2026 by rpki-client