Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/61E12BD0CA0611EEB05EB92CC4F9AE02.roa
File:                     61E12BD0CA0611EEB05EB92CC4F9AE02.roa (raw, json)
Hash identifier:          IuciT/jDYsEHuZMLoxbp4gzhohFWomxgcVWfQKh8vS8=
Subject key identifier:   62:7D:5F:7D:AC:9B:47:3D:2F:60:FC:68:65:B8:D2:68:F9:EF:ED:68
Certificate issuer:       /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial:       0BA5
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/61E12BD0CA0611EEB05EB92CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:45:01 +0000
ROA not before:           Fri 04 Jul 2025 20:00:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     24459
IP address blocks:        103.248.179.0/24 maxlen: 24
                          2001:df3:9140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
                          rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2981 (0xba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
        Validity
            Not Before: Jul  4 20:00:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a426bd-5073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:1d:66:30:b2:c5:28:7f:f3:26:c7:10:66:
                    77:54:72:0b:66:45:52:4a:44:b5:0f:79:f0:7f:06:
                    01:53:0c:79:50:2d:a4:01:3e:32:4e:bd:8e:db:e1:
                    d3:40:0f:db:7b:58:b0:5a:54:5f:27:ed:9c:e3:f6:
                    33:12:1b:1d:8a:9b:84:9d:e9:4e:69:c4:6b:27:8d:
                    fe:6a:93:38:df:ac:4a:3d:ab:65:f0:fd:3e:de:c4:
                    37:1f:c5:3f:2c:99:4d:71:40:dd:64:58:49:4c:e3:
                    f5:31:31:27:a7:b6:ee:05:db:f3:0d:79:7e:86:e3:
                    f0:27:ba:8d:ef:60:e6:bd:d7:14:7d:82:42:1f:27:
                    2d:70:bf:ab:bd:4b:b1:05:f3:cc:0b:3a:78:e4:99:
                    86:61:6e:8f:66:6f:00:1f:62:f8:9c:67:39:82:5b:
                    28:96:3c:5a:74:1c:23:fc:23:cf:1d:11:39:17:57:
                    b2:22:41:d8:13:2c:86:b3:69:8a:56:73:e6:61:29:
                    f5:4c:50:35:df:3c:82:0b:51:6f:19:31:e8:9f:dd:
                    9f:61:d9:46:54:5d:19:cf:ff:fc:3e:68:67:f6:0b:
                    26:96:7b:d7:2a:26:2c:a9:c5:74:ce:e8:0f:70:5c:
                    94:36:2b:a6:65:84:70:8b:dd:7e:18:f1:f5:70:f9:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7D:5F:7D:AC:9B:47:3D:2F:60:FC:68:65:B8:D2:68:F9:EF:ED:68
            X509v3 Authority Key Identifier:
                keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/61E12BD0CA0611EEB05EB92CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.179.0/24
                IPv6:
                  2001:df3:9140::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:95:a1:6f:74:42:34:23:34:4c:fe:ff:fe:17:1e:05:e8:bd:
         91:91:e9:c0:6e:64:5f:a8:f1:4d:cc:21:5f:6c:0b:41:b2:0c:
         2c:0a:be:4a:63:1a:28:ab:25:36:4a:84:8f:25:92:e3:5e:2a:
         45:09:1e:cf:48:2e:d2:e0:09:74:2e:d7:a1:5e:80:9c:08:b3:
         f4:87:a9:0e:37:e5:67:b6:9e:8c:e6:15:ce:68:1f:30:3a:6d:
         e3:35:62:1a:c2:cf:2a:47:48:49:c5:e2:49:36:38:c1:92:2d:
         91:c3:b2:24:af:da:af:0f:a7:48:e5:d5:7e:39:f2:82:59:10:
         ec:c4:11:6c:3e:16:f3:5e:7f:0b:a0:4c:70:aa:2b:b5:69:34:
         01:8e:57:19:5d:b2:90:6b:e3:4b:d9:31:cc:3f:c4:2b:37:f9:
         f8:e0:48:73:66:ee:2a:ff:21:3d:5b:80:57:70:39:bd:ca:be:
         3b:17:24:c9:6b:4f:b1:e8:2a:3b:8f:7d:71:3f:09:cc:e2:a3:
         cc:ba:e2:69:3a:ef:04:c9:5a:55:de:2c:98:b6:16:48:e3:c8:
         69:d7:02:84:9b:3b:cc:10:f1:02:9c:47:09:45:cd:c0:eb:28:
         ae:5d:da:58:8a:0e:a0:36:5f:06:8a:0e:02:78:cf:a6:69:27:
         d9:63:7a:ec
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ0NTkxMTAvBgNVBAUTKEI1MTc0RDgyNjU2NDlDREQyNzQyNkM5MjdEMTY4Nzc1
RDc4M0Q1MzgwHhcNMjUwNzA0MjAwMDIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjZiZC01MDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0EdZjCyxSh/8ybHEGZ3VHILZkVSSkS1D3nwfwYBUwx5UC2kAT4yTr2O2+HT
QA/be1iwWlRfJ+2c4/YzEhsdipuEnelOacRrJ43+apM436xKPatl8P0+3sQ3H8U/
LJlNcUDdZFhJTOP1MTEnp7buBdvzDXl+huPwJ7qN72DmvdcUfYJCHyctcL+rvUux
BfPMCzp45JmGYW6PZm8AH2L4nGc5glsoljxadBwj/CPPHRE5F1eyIkHYEyyGs2mK
VnPmYSn1TFA13zyCC1FvGTHon92fYdlGVF0Zz//8Pmhn9gsmlnvXKiYsqcV0zugP
cFyUNiumZYRwi91+GPH1cPnUuwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGJ9X32s
m0c9L2D8aGW40mj57+1oMB8GA1UdIwQYMBaAFLUXTYJlZJzdJ0Jskn0Wh3XXg9U4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDQ1OS85OUVDODlFQzQy
MjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25OMG5RbXlTZlJhSGRkZUQx
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RSZE5nbVZrbk4wblFteVNmUmFIZGRlRDFUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQ0NTkvOTlFQzg5RUM0MjIwMTFFQUI1MzAyMDE2QzRGOUFFMDIvNjFFMTJCRDBD
QTA2MTFFRUIwNUVCOTJDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ/izMA8EAgACMAkDBwAgAQ3zkUAwDQYJKoZIhvcNAQELBQADggEB
AKSVoW90QjQjNEz+//4XHgXovZGR6cBuZF+o8U3MIV9sC0GyDCwKvkpjGiirJTZK
hI8lkuNeKkUJHs9ILtLgCXQu16FegJwIs/SHqQ435We2nozmFc5oHzA6beM1YhrC
zypHSEnF4kk2OMGSLZHDsiSv2q8Pp0jl1X458oJZEOzEEWw+FvNefwugTHCqK7Vp
NAGOVxldspBr40vZMcw/xCs3+fjgSHNm7ir/IT1bgFdwOb3KvjsXJMlrT7HoKjuP
fXE/Cczio8y64mk67wTJWlXeLJi2FkjjyGnXAoSbO8wQ8QKcRwlFzcDrKK5d2liK
DqA2XwaKDgJ4z6ZpJ9ljeuw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:41 2026 by rpki-client