Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/A047A07AD56811EFB57A5D33C4F9AE02.roa
File:                     A047A07AD56811EFB57A5D33C4F9AE02.roa (raw, json)
Hash identifier:          9ddhu2yrw8Y1Qn76lqowUGOY2CYHuc5bqh90B9kOwck=
Subject key identifier:   D5:88:5D:32:15:D8:E3:B6:A5:21:C0:9D:E7:A6:C8:B2:80:12:9A:03
Certificate issuer:       /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Certificate serial:       03C9
Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/A047A07AD56811EFB57A5D33C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:57:59 +0000
ROA not before:           Sun 11 May 2025 01:07:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153494
IP address blocks:        45.115.240.0/22 maxlen: 24
                          103.56.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
                          rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
        Validity
            Not Before: May 11 01:07:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3ff96-69cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:da:43:14:89:09:e7:bd:54:38:aa:45:ad:40:
                    bc:24:4e:dc:ef:12:56:31:ed:55:7e:b4:c8:a3:57:
                    06:3e:8b:9f:a6:28:a9:a1:5c:08:4d:a2:63:db:58:
                    7f:0c:72:af:47:48:e5:1e:ea:e3:ea:1d:bc:6b:36:
                    f7:5e:8f:83:05:cd:d5:84:f6:02:c8:86:54:5b:93:
                    fa:5f:cd:e9:08:24:a1:37:32:08:ea:ef:68:26:5f:
                    95:7f:0e:bd:f5:06:29:1c:f7:a6:b0:5d:84:2c:93:
                    97:d4:41:03:8c:6d:5f:58:35:c6:05:4b:c1:f3:78:
                    a3:90:2c:2e:c1:e4:47:91:b8:cb:8d:89:b5:a9:60:
                    37:4a:07:c2:c7:e4:44:92:8c:0c:b4:32:02:3c:84:
                    3d:62:ab:fa:d7:da:0e:59:08:6b:2f:df:a6:9b:fb:
                    20:5e:a6:b3:f7:28:2f:a1:b4:8d:42:1d:86:22:32:
                    90:80:b2:f7:57:9d:8d:21:07:02:59:23:a8:c5:3d:
                    4d:7c:c4:85:0b:34:90:f5:58:a7:45:69:8d:9b:eb:
                    66:3f:65:28:43:37:3d:34:ad:f0:be:a7:81:90:00:
                    ce:cd:6e:cc:45:96:71:db:d2:8c:9c:e3:fa:be:12:
                    47:61:aa:7d:92:ff:be:ae:73:44:eb:0d:5f:83:f6:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:88:5D:32:15:D8:E3:B6:A5:21:C0:9D:E7:A6:C8:B2:80:12:9A:03
            X509v3 Authority Key Identifier:
                keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/A047A07AD56811EFB57A5D33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.240.0/22
                  103.56.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:82:10:23:23:28:cc:3e:9e:83:85:14:3d:b7:c7:34:3d:0b:
         13:0f:61:35:89:8f:b4:28:65:fa:6f:7c:cc:0d:26:3e:e4:33:
         8d:76:d3:98:59:06:89:a9:db:53:d5:4a:35:e1:ef:bf:d3:f6:
         08:cd:48:52:65:33:39:e0:6a:b1:1d:bd:0a:ce:53:4d:8a:3e:
         6d:48:fe:e2:75:cb:30:f6:3c:eb:d9:5f:7e:0c:98:86:3f:37:
         23:0d:02:00:45:15:4c:e4:0d:47:a8:c9:de:0e:ae:81:70:88:
         4d:7b:d0:f4:02:d3:5b:4d:c5:ef:e8:c5:cc:8c:bc:9f:fe:d0:
         92:59:4c:ef:d9:3c:a3:11:9b:56:5d:7f:e2:f2:ba:81:93:0f:
         66:48:e6:bb:f3:68:b4:a0:25:be:10:52:55:bc:b3:ac:c6:58:
         b6:fc:f0:78:88:c5:82:31:eb:53:9b:f5:6d:6f:60:e4:0b:2d:
         a5:12:a9:02:5b:ae:d8:8f:dd:54:1f:71:a4:9a:a0:71:04:94:
         be:48:0a:e3:57:da:e1:1f:dd:f8:9c:ca:67:03:eb:8e:74:32:
         c0:39:0d:86:25:a7:f6:d6:12:9c:4e:a6:a6:52:3f:c2:fa:5c:
         a6:94:df:7a:f5:ff:3a:3f:06:f3:0f:0e:d8:8b:36:fc:49:3f:
         b9:ad:8b:e8
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzAyQjkxMTAvBgNVBAUTKEFDRTJDNENDQjA4OUQyMUIzNzA0NTRCMDBFNkI1OTNB
RjI4ODYyRjYwHhcNMjUwNTExMDEwNzQ0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmY5Ni02OWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1tpDFIkJ571UOKpFrUC8JE7c7xJWMe1VfrTIo1cGPoufpiipoVwITaJj21h/
DHKvR0jlHurj6h28azb3Xo+DBc3VhPYCyIZUW5P6X83pCCShNzII6u9oJl+Vfw69
9QYpHPemsF2ELJOX1EEDjG1fWDXGBUvB83ijkCwuweRHkbjLjYm1qWA3SgfCx+RE
kowMtDICPIQ9Yqv619oOWQhrL9+mm/sgXqaz9ygvobSNQh2GIjKQgLL3V52NIQcC
WSOoxT1NfMSFCzSQ9VinRWmNm+tmP2UoQzc9NK3wvqeBkADOzW7MRZZx29KMnOP6
vhJHYap9kv++rnNE6w1fg/ZC3wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNWIXTIV
2OO2pSHAneemyLKAEpoDMB8GA1UdIwQYMBaAFKzixMywidIbNwRUsA5rWTryiGL2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDJCOS8zQjcyRUU5MEM2
MDUxMUVDQUI3NEQ5NjJDNEY5QUUwMi9yT0xFekxDSjBoczNCRlN3RG10Wk92S0lZ
dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JPTEV6TENKMGhzM0JGU3dEbXRaT3ZLSVl2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzAyQjkvM0I3MkVFOTBDNjA1MTFFQ0FCNzREOTYyQzRGOUFFMDIvQTA0N0EwN0FE
NTY4MTFFRkI1N0E1RDMzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCLXPwAwQCZzgYMA0GCSqGSIb3DQEBCwUAA4IBAQBPghAjIyjMPp6D
hRQ9t8c0PQsTD2E1iY+0KGX6b3zMDSY+5DONdtOYWQaJqdtT1Uo14e+/0/YIzUhS
ZTM54GqxHb0KzlNNij5tSP7idcsw9jzr2V9+DJiGPzcjDQIARRVM5A1HqMneDq6B
cIhNe9D0AtNbTcXv6MXMjLyf/tCSWUzv2TyjEZtWXX/i8rqBkw9mSOa782i0oCW+
EFJVvLOsxli2/PB4iMWCMetTm/Vtb2DkCy2lEqkCW67Yj91UH3GkmqBxBJS+SArj
V9rhH934nMpnA+uOdDLAOQ2GJaf21hKcTqamUj/C+lymlN969f86PwbzDw7Yizb8
ST+5rYvo
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:31 2026 by rpki-client