Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/3C73210E29E711F0AB5EBA80C4F9AE02.roa
File:                     3C73210E29E711F0AB5EBA80C4F9AE02.roa (raw, json)
Hash identifier:          WaFe3SyyQFza6rob4551vLHEG9MjFm7GNFMpsJB01sU=
Subject key identifier:   F4:56:EB:4C:64:18:D1:CF:77:32:D9:5F:25:9F:66:9E:D5:71:34:E6
Certificate issuer:       /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial:       086C
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/3C73210E29E711F0AB5EBA80C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:06:23 +0000
ROA not before:           Sat 13 Dec 2025 08:54:56 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153038
IP address blocks:        103.214.216.0/24 maxlen: 24
                          103.214.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
                          rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156 (0x86c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
        Validity
            Not Before: Dec 13 08:54:56 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a48e2e-4066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:60:95:c4:5c:c9:db:3f:c2:d2:44:53:93:6e:
                    e6:1e:43:b5:14:af:bf:aa:8c:33:da:4e:be:71:f5:
                    82:20:a2:4d:30:64:c2:76:a3:ba:15:f7:26:46:8c:
                    ac:c0:5a:68:51:33:65:02:ab:c3:b1:a6:a1:7f:db:
                    32:d7:25:29:7a:41:11:d6:95:fc:70:99:b9:52:0d:
                    dc:34:ec:85:a6:dc:e6:2c:90:6a:01:0a:65:53:fa:
                    df:c1:63:9e:b3:3a:ab:35:f7:7b:d7:2e:68:1c:96:
                    a1:b1:72:b1:4e:9d:ed:d4:56:2a:8a:41:7f:f0:e5:
                    01:5d:f3:10:33:60:60:3f:69:f0:86:31:26:fa:a2:
                    f9:76:ad:97:73:ed:4f:11:a0:40:95:97:39:fb:a9:
                    34:a1:5c:63:58:76:5f:39:79:c8:02:7c:43:2a:23:
                    6c:95:39:28:3a:41:be:11:d2:3d:78:27:7c:9d:97:
                    c9:23:f5:d2:17:4b:60:9e:a9:4b:b3:34:81:9a:bd:
                    ae:17:6c:5e:0c:4e:ed:bf:cb:58:d5:5d:b3:ab:d0:
                    97:a9:4c:a0:e1:ff:b5:e2:ff:94:4d:87:84:fc:52:
                    2d:73:d1:e8:fa:e6:51:be:09:06:57:e8:31:13:cb:
                    24:90:27:18:72:89:ca:87:e1:48:38:56:c8:a8:99:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:56:EB:4C:64:18:D1:CF:77:32:D9:5F:25:9F:66:9E:D5:71:34:E6
            X509v3 Authority Key Identifier:
                keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/3C73210E29E711F0AB5EBA80C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:99:ef:d7:cc:68:bf:64:61:97:79:27:cb:43:24:cb:03:d9:
         8d:86:73:24:20:28:61:bc:5f:12:20:e9:fe:a5:53:fd:bb:b0:
         0a:6d:b9:f9:47:4a:2a:c4:95:58:d8:9d:ec:fa:45:9d:21:1c:
         fb:2e:0b:73:99:4d:84:3a:e4:82:b5:94:2f:63:f3:c8:8a:f3:
         38:3e:61:86:99:2e:6c:86:d6:f5:d1:9c:a1:3c:56:cb:94:cc:
         ef:61:56:b4:d5:e7:09:71:cb:8c:03:39:a4:3e:63:13:e7:c6:
         4d:68:d2:0c:f9:68:cf:38:82:89:9a:be:4a:b7:e5:a1:6f:e7:
         07:69:07:73:3b:27:3c:2a:ed:41:42:af:7a:af:40:a7:9b:2e:
         aa:c8:8a:38:4e:c7:72:5d:26:fb:88:83:b8:4b:72:df:06:af:
         d4:02:f4:45:36:d7:0c:10:b2:a5:c4:73:99:ba:0e:a6:f2:b4:
         e3:4b:a8:0e:41:56:22:ce:f4:8e:5b:56:c2:63:d1:bd:6b:da:
         98:0f:bd:f8:47:67:ea:82:bc:05:f0:ec:24:ea:b7:2e:3b:be:
         8d:00:04:18:81:9c:ab:05:81:05:ba:0a:0c:11:fe:ce:a8:92:
         40:44:69:4b:f3:73:52:e7:27:1b:44:e9:7f:b2:ec:4d:7b:81:
         0b:73:1c:72
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC
RUQwQ0U3MzcwHhcNMjUxMjEzMDg1NDU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGUyZS00MDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9WCVxFzJ2z/C0kRTk27mHkO1FK+/qowz2k6+cfWCIKJNMGTCdqO6FfcmRoys
wFpoUTNlAqvDsaahf9sy1yUpekER1pX8cJm5Ug3cNOyFptzmLJBqAQplU/rfwWOe
szqrNfd71y5oHJahsXKxTp3t1FYqikF/8OUBXfMQM2BgP2nwhjEm+qL5dq2Xc+1P
EaBAlZc5+6k0oVxjWHZfOXnIAnxDKiNslTkoOkG+EdI9eCd8nZfJI/XSF0tgnqlL
szSBmr2uF2xeDE7tv8tY1V2zq9CXqUyg4f+14v+UTYeE/FItc9Ho+uZRvgkGV+gx
E8skkCcYconKh+FIOFbIqJkX3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPRW60xk
GNHPdzLZXyWfZp7VcTTmMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw
NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkNEREYvMjY2MDhENDYxMDcyMTFFQUFDMDZCMDc5QzRGOUFFMDIvM0M3MzIxMEUy
OUU3MTFGMEFCNUVCQTgwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ9bYMA0GCSqGSIb3DQEBCwUAA4IBAQBIme/XzGi/ZGGXeSfLQyTL
A9mNhnMkIChhvF8SIOn+pVP9u7AKbbn5R0oqxJVY2J3s+kWdIRz7LgtzmU2EOuSC
tZQvY/PIivM4PmGGmS5shtb10ZyhPFbLlMzvYVa01ecJccuMAzmkPmMT58ZNaNIM
+WjPOIKJmr5Kt+Whb+cHaQdzOyc8Ku1BQq96r0Cnmy6qyIo4TsdyXSb7iIO4S3Lf
Bq/UAvRFNtcMELKlxHOZug6m8rTjS6gOQVYizvSOW1bCY9G9a9qYD734R2fqgrwF
8Owk6rcuO76NAAQYgZyrBYEFugoMEf7OqJJARGlL83NS5ycbROl/suxNe4ELcxxy
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:16 2026 by rpki-client