Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa
File:                     73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (raw, json)
Hash identifier:          fZNOUj/iAXxAo54HM0txOio7TDOqa8olAoIhUWuhgT4=
Subject key identifier:   FE:2B:5C:CD:40:3A:1C:3C:EE:E0:A1:57:AF:19:9C:A5:AE:AF:97:BD
Certificate issuer:       /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial:       0A27
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:31:17 +0000
ROA not before:           Thu 10 Apr 2025 20:30:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     40513
IP address blocks:        103.88.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
                          rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2599 (0xa27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
        Validity
            Not Before: Apr 10 20:30:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40765-c47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:2d:15:29:7a:b4:64:04:5a:2f:3d:b2:54:
                    ad:1a:6c:74:d1:e0:ff:94:5a:a5:35:62:85:40:b3:
                    03:76:c4:4f:fb:9b:6a:16:e7:41:e6:32:25:eb:1e:
                    ae:43:76:6e:c4:b1:b6:91:fc:8e:6a:4e:c2:7d:c0:
                    6c:f1:53:ec:0d:08:e4:bf:d7:ea:54:71:12:4b:33:
                    8d:42:e5:cb:a8:09:32:cf:89:92:c4:dc:ac:18:3e:
                    86:ce:24:74:9b:5d:47:81:b0:88:0b:c3:66:af:ec:
                    03:0b:80:32:34:43:03:23:2a:76:59:82:e5:25:63:
                    d5:cf:0b:5b:d3:ca:e4:24:2a:c2:67:a3:c6:1a:21:
                    bd:e0:ab:fa:50:af:9e:cf:37:fe:5b:bc:b2:b6:d3:
                    b4:c4:a9:ce:34:7b:1e:ac:4c:35:88:83:a8:3e:cc:
                    af:34:f2:f2:de:6c:00:4a:6f:9d:06:7b:9a:1a:cf:
                    a4:11:b7:9f:f7:d4:06:9b:ea:ee:1c:6a:31:5d:f8:
                    d2:ae:9b:69:a0:09:66:97:3d:b9:fb:b9:53:c7:da:
                    84:d5:60:b5:68:b9:cc:dc:d3:e1:dd:f3:a5:49:a9:
                    5b:1c:d5:c3:2f:2f:2a:a4:3f:78:e1:38:b0:55:28:
                    be:e6:d6:74:ad:65:c6:c3:8e:95:28:d0:18:7a:d6:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2B:5C:CD:40:3A:1C:3C:EE:E0:A1:57:AF:19:9C:A5:AE:AF:97:BD
            X509v3 Authority Key Identifier:
                keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:85:3f:df:fd:28:fb:ac:d6:0c:d4:26:51:6d:5a:6b:15:fd:
         d1:ef:0c:2d:80:f6:b7:7a:ed:2d:a9:0f:75:78:a1:3a:ea:8a:
         07:6c:ef:10:01:38:52:f5:04:60:b5:6c:07:3d:ae:93:bd:dc:
         46:32:1f:5d:be:4a:14:fd:32:b7:6f:fe:d2:7d:4c:69:4f:af:
         6c:b2:5f:02:99:b4:36:12:e2:e5:12:78:18:cc:45:7a:c2:ef:
         02:1d:69:84:54:33:b5:8e:0e:48:dd:41:ac:72:65:66:23:32:
         b3:4c:e0:1c:d0:21:95:5b:a0:d0:5c:e1:40:56:8c:db:50:63:
         5c:f5:6f:9d:91:35:c3:6d:4f:87:5d:02:b8:ba:ea:e5:65:7b:
         ac:61:cc:7a:c0:eb:99:2a:27:f2:3c:ec:5f:90:45:c2:5c:56:
         f1:c4:62:3f:d4:65:7d:96:d2:67:a9:4e:72:cf:2a:20:86:94:
         68:f4:d5:59:95:f7:99:1f:6d:2b:de:67:ea:a8:38:fe:fe:a0:
         a1:5b:6e:e2:03:81:ca:db:0d:59:81:76:e6:7d:39:5d:49:16:
         84:54:0b:70:bc:90:68:64:c1:f8:da:71:16:a4:f7:37:09:c9:
         ce:26:79:03:89:ca:13:90:bb:3c:f2:30:21:f6:4f:00:89:a5:
         76:5d:e5:9e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG
OEYyMjFFMDMwHhcNMjUwNDEwMjAzMDA5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDc2NS1jNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQEtFSl6tGQEWi89slStGmx00eD/lFqlNWKFQLMDdsRP+5tqFudB5jIl6x6u
Q3ZuxLG2kfyOak7CfcBs8VPsDQjkv9fqVHESSzONQuXLqAkyz4mSxNysGD6GziR0
m11HgbCIC8Nmr+wDC4AyNEMDIyp2WYLlJWPVzwtb08rkJCrCZ6PGGiG94Kv6UK+e
zzf+W7yyttO0xKnONHserEw1iIOoPsyvNPLy3mwASm+dBnuaGs+kEbef99QGm+ru
HGoxXfjSrptpoAlmlz25+7lTx9qE1WC1aLnM3NPh3fOlSalbHNXDLy8qpD944Tiw
VSi+5tZ0rWXGw46VKNAYetaH4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP4rXM1A
Ohw87uChV68ZnKWur5e9MB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB
OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI
Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VDNDYvNThGNzUxM0U4QThCMTFFQUFDMkE4QzNBQzRGOUFFMDIvNzNCRDU5QUU4
QThDMTFFQThDQjRGNTNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1grMA0GCSqGSIb3DQEBCwUAA4IBAQCahT/f/Sj7rNYM1CZRbVpr
Ff3R7wwtgPa3eu0tqQ91eKE66ooHbO8QAThS9QRgtWwHPa6TvdxGMh9dvkoU/TK3
b/7SfUxpT69ssl8CmbQ2EuLlEngYzEV6wu8CHWmEVDO1jg5I3UGscmVmIzKzTOAc
0CGVW6DQXOFAVozbUGNc9W+dkTXDbU+HXQK4uurlZXusYcx6wOuZKifyPOxfkEXC
XFbxxGI/1GV9ltJnqU5yzyoghpRo9NVZlfeZH20r3mfqqDj+/qChW27iA4HK2w1Z
gXbmfTldSRaEVAtwvJBoZMH42nEWpPc3CcnOJnkDicoTkLs88jAh9k8AiaV2XeWe
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:51 2026 by rpki-client