Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/F44B1F40FC1711EBA835010DC4F9AE02.roa
File:                     F44B1F40FC1711EBA835010DC4F9AE02.roa (raw, json)
Hash identifier:          brJSEPMRwR3yAGRP7eE2QUpOI5i0cNc3fqcur+q719o=
Subject key identifier:   3E:D2:38:A7:F2:FB:F8:75:4A:AF:61:CF:DC:49:07:C2:44:71:71:46
Certificate issuer:       /CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D
Certificate serial:       05BE
Authority key identifier: 34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/F44B1F40FC1711EBA835010DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:50:47 +0000
ROA not before:           Sat 22 Mar 2025 23:44:44 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141744
IP address blocks:        103.163.96.0/23 maxlen: 23
                          103.163.96.0/24 maxlen: 24
                          103.163.97.0/24 maxlen: 24
                          2001:df6:1180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl
                          rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BC76, serialNumber=340949ECB857836357F10253C694272208197B1D
        Validity
            Not Before: Mar 22 23:44:44 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3fde7-8a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:8f:e6:c8:97:6d:69:70:e0:37:0a:0e:3a:
                    9e:62:87:ae:f6:9c:f4:40:ea:00:a7:93:8d:8f:3b:
                    6d:d2:83:f4:97:ba:50:81:1c:e1:f1:86:5d:41:b5:
                    20:ac:e6:7f:e3:d0:ea:91:b7:14:f3:0a:27:2c:e1:
                    8e:3b:43:5f:98:22:34:96:8e:e1:37:56:e7:59:3d:
                    d6:94:75:15:44:f3:37:29:36:52:84:5f:b8:bb:4f:
                    1f:73:75:52:bf:14:6e:61:31:38:55:51:e4:15:31:
                    6b:57:63:fc:4b:e7:3c:73:72:d0:d1:f1:8f:f5:8b:
                    6d:0e:48:db:6e:40:ac:ba:02:09:77:b4:7e:9c:01:
                    2d:1e:3c:a8:75:16:23:1a:f2:49:ff:74:23:2d:fa:
                    6d:27:92:07:ce:80:16:d6:3b:c5:db:e7:25:29:1a:
                    c3:4d:4c:46:dd:18:f9:3c:b6:57:f1:52:a4:8b:d9:
                    4a:02:5d:4c:6d:b7:be:dd:e0:70:27:1f:5c:bd:0e:
                    9d:2b:2e:4e:9e:4c:0e:eb:f4:a6:2a:3e:3a:ff:e2:
                    d9:1c:ca:0a:23:ff:8e:2a:14:00:23:a8:06:ba:15:
                    d4:cf:72:a6:a1:79:e0:7a:a0:1d:25:67:1d:db:4e:
                    dd:05:cc:91:fb:cc:a0:fa:79:23:82:a8:03:53:c3:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D2:38:A7:F2:FB:F8:75:4A:AF:61:CF:DC:49:07:C2:44:71:71:46
            X509v3 Authority Key Identifier:
                keyid:34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/F44B1F40FC1711EBA835010DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.96.0/23
                IPv6:
                  2001:df6:1180::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:f2:e5:c8:d9:3a:f9:28:05:4c:a2:23:99:e2:85:be:b4:0e:
         d5:b9:49:40:a5:d9:40:31:66:e3:5a:57:d0:f1:e8:2d:22:bf:
         8c:db:ad:da:de:f1:83:5f:07:ef:54:43:e9:6c:ca:7e:59:d6:
         46:a2:cb:96:e8:7e:a1:05:c7:a6:1a:05:45:fd:59:87:00:3a:
         b1:16:25:c9:e3:e7:a6:b9:34:30:99:89:29:4e:86:4e:1c:d0:
         45:42:85:1f:21:0f:18:70:3f:3d:a4:ef:4d:36:d7:31:78:fd:
         40:de:7f:17:01:ae:56:a9:5f:e1:fa:55:22:d7:a1:ff:e7:3f:
         23:f1:56:a8:d0:83:cf:d1:ec:81:9b:32:13:70:fe:77:34:9c:
         d8:c1:bd:7a:51:b4:c9:a5:53:66:eb:af:9c:15:46:7e:72:70:
         e6:4e:94:0e:a8:70:58:7c:f0:3c:17:98:df:79:e3:4b:cc:36:
         06:62:f3:e0:ec:2d:6b:94:ce:29:0e:42:39:62:4c:75:87:df:
         77:2d:a1:d5:ed:d4:7d:d9:8c:79:31:fc:13:46:16:a7:6d:b5:
         26:3a:2d:23:8e:a5:ce:f2:9a:c3:62:95:4e:3f:42:18:2a:ea:
         ad:8d:86:db:36:5e:71:b2:54:8b:77:eb:9c:73:32:e6:a7:c1:
         40:59:41:16
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDNzYxMTAvBgNVBAUTKDM0MDk0OUVDQjg1NzgzNjM1N0YxMDI1M0M2OTQyNzIy
MDgxOTdCMUQwHhcNMjUwMzIyMjM0NDQ0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmRlNy04YTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQKP5siXbWlw4DcKDjqeYoeu9pz0QOoAp5ONjztt0oP0l7pQgRzh8YZdQbUg
rOZ/49DqkbcU8wonLOGOO0NfmCI0lo7hN1bnWT3WlHUVRPM3KTZShF+4u08fc3VS
vxRuYTE4VVHkFTFrV2P8S+c8c3LQ0fGP9YttDkjbbkCsugIJd7R+nAEtHjyodRYj
GvJJ/3QjLfptJ5IHzoAW1jvF2+clKRrDTUxG3Rj5PLZX8VKki9lKAl1Mbbe+3eBw
Jx9cvQ6dKy5OnkwO6/SmKj46/+LZHMoKI/+OKhQAI6gGuhXUz3KmoXngeqAdJWcd
207dBcyR+8yg+nkjgqgDU8OrhQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFD7SOKfy
+/h1Sq9hz9xJB8JEcXFGMB8GA1UdIwQYMBaAFDQJSey4V4NjV/ECU8aUJyIIGXsd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM3Ni82MTM2QTE3MkZD
MTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcyTlg4UUpUeHBRbklnZ1pl
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05BbEo3TGhYZzJOWDhRSlR4cFFuSWdnWmV4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJDNzYvNjEzNkExNzJGQzE1MTFFQjlFNTBCQzBBQzRGOUFFMDIvRjQ0QjFGNDBG
QzE3MTFFQkE4MzUwMTBEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6NgMA8EAgACMAkDBwAgAQ32EYAwDQYJKoZIhvcNAQELBQADggEB
AD/y5cjZOvkoBUyiI5nihb60DtW5SUCl2UAxZuNaV9Dx6C0iv4zbrdre8YNfB+9U
Q+lsyn5Z1kaiy5bofqEFx6YaBUX9WYcAOrEWJcnj56a5NDCZiSlOhk4c0EVChR8h
DxhwPz2k70021zF4/UDefxcBrlapX+H6VSLXof/nPyPxVqjQg8/R7IGbMhNw/nc0
nNjBvXpRtMmlU2brr5wVRn5ycOZOlA6ocFh88DwXmN9540vMNgZi8+DsLWuUzikO
QjliTHWH33ctodXt1H3ZjHkx/BNGFqdttSY6LSOOpc7ymsNilU4/Qhgq6q2Nhts2
XnGyVIt365xzMuanwUBZQRY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:37 2026 by rpki-client