Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/67F4BD64519811F092842D60C4F9AE02.roa
File:                     67F4BD64519811F092842D60C4F9AE02.roa (raw, json)
Hash identifier:          Lp3bNyJgfkc/SQZCgAth54GJ5kkoQOOIRUFq6Ssbpu4=
Subject key identifier:   19:33:6C:0E:81:95:E9:67:3D:31:26:11:14:63:06:EC:63:E6:7C:54
Certificate issuer:       /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Certificate serial:       0819
Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/67F4BD64519811F092842D60C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:08:34 +0000
ROA not before:           Thu 26 Feb 2026 21:17:40 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     55720
IP address blocks:        103.205.208.0/24 maxlen: 24
                          103.205.209.0/24 maxlen: 24
                          103.205.210.0/24 maxlen: 24
                          103.205.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
                          rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073 (0x819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534
        Validity
            Not Before: Feb 26 21:17:40 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a44862-2102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:20:10:25:f7:b8:d7:56:a8:61:b5:40:5b:
                    42:cb:2b:48:0b:45:23:c5:62:d6:e2:96:59:06:05:
                    9c:29:6a:46:d7:78:f5:56:15:8e:09:5c:fd:08:98:
                    99:ff:ec:bf:79:41:18:78:41:82:f5:aa:8b:48:f4:
                    0c:5d:7b:68:e1:3a:b8:d5:74:22:95:ce:87:e3:11:
                    56:6d:7e:9c:97:0b:83:4e:98:00:77:58:ed:31:e7:
                    3f:e4:c4:c4:e9:9d:dd:8f:e8:34:72:01:94:99:4d:
                    ed:ce:42:cd:02:21:1f:02:64:14:b1:4b:16:60:13:
                    d6:c4:9b:e5:24:de:1e:5b:cd:06:4c:39:fe:a9:20:
                    bd:dd:66:89:64:eb:09:f5:8b:99:62:a6:e8:42:d1:
                    a3:25:9b:14:a2:9a:6e:07:af:94:68:29:07:af:6e:
                    81:bf:47:e5:7f:1e:d8:17:4c:d2:79:bd:94:af:5d:
                    71:d1:0f:1f:89:12:c2:dd:91:cf:2b:e2:a3:52:f2:
                    0b:3b:33:c4:5a:4a:85:fa:08:61:5e:a0:01:8b:c8:
                    cc:12:c1:b3:8c:88:ff:9e:91:fa:e5:0a:89:43:22:
                    e7:5b:ff:30:48:9f:c1:36:23:3f:82:c9:77:61:6c:
                    e7:ec:76:38:6e:51:17:49:95:ac:50:03:b2:d5:25:
                    f8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:6C:0E:81:95:E9:67:3D:31:26:11:14:63:06:EC:63:E6:7C:54
            X509v3 Authority Key Identifier:
                keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/67F4BD64519811F092842D60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:e8:97:5b:43:5f:12:27:0b:de:82:4a:28:86:e3:6f:1e:a4:
         4f:f0:98:22:ee:ab:39:94:af:f7:df:64:06:12:01:2a:bd:95:
         6e:9c:ca:43:b2:ea:55:92:4c:14:db:c9:97:4c:6c:49:f0:89:
         1e:f1:ad:96:8b:ad:74:63:5b:dc:c1:c7:70:e6:26:ee:5d:3c:
         b8:78:66:b2:4a:68:02:bc:07:af:cb:20:1d:d4:2d:a6:3e:d6:
         0b:08:cc:38:c1:81:40:33:74:5c:aa:aa:77:7d:fa:0a:e3:90:
         ad:7e:d4:c7:26:dc:8b:71:3f:e4:6b:1c:f1:46:bc:b7:75:84:
         0b:bb:38:9a:ea:03:e9:87:74:d4:ce:0c:d3:4a:2c:6f:9f:c4:
         84:a9:7a:ff:a0:a5:ce:a8:d9:44:b5:49:2b:c5:36:de:96:5e:
         e3:1b:10:3e:6b:4e:da:83:c2:9d:e0:04:a9:44:7b:a1:a9:37:
         9d:2d:d9:02:e8:c7:27:67:ff:da:db:1c:4a:6b:e6:11:80:1c:
         4a:f4:1e:7e:11:a2:78:37:23:35:3c:ea:cd:db:4e:ba:20:9c:
         40:f5:db:4e:45:ac:c6:2a:e3:1e:21:19:44:a0:4a:5e:31:7b:
         81:0a:cc:d6:46:4e:a4:65:ea:ab:a9:16:29:46:d1:43:f7:64:
         96:c0:4d:82
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE
RjFFRTU1MzQwHhcNMjYwMjI2MjExNzQwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDg2Mi0yMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2s4gECX3uNdWqGG1QFtCyytIC0UjxWLW4pZZBgWcKWpG13j1VhWOCVz9CJiZ
/+y/eUEYeEGC9aqLSPQMXXto4Tq41XQilc6H4xFWbX6clwuDTpgAd1jtMec/5MTE
6Z3dj+g0cgGUmU3tzkLNAiEfAmQUsUsWYBPWxJvlJN4eW80GTDn+qSC93WaJZOsJ
9YuZYqboQtGjJZsUoppuB6+UaCkHr26Bv0flfx7YF0zSeb2Ur11x0Q8fiRLC3ZHP
K+KjUvILOzPEWkqF+ghhXqABi8jMEsGzjIj/npH65QqJQyLnW/8wSJ/BNiM/gsl3
YWzn7HY4blEXSZWsUAOy1SX4nQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBkzbA6B
lelnPTEmERRjBuxj5nxUMB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz
RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODA1QkYvRjEzM0JEQUMxM0YyMTFFQjlCRUZDRDUxQzRGOUFFMDIvNjdGNEJENjQ1
MTk4MTFGMDkyODQyRDYwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ83QMA0GCSqGSIb3DQEBCwUAA4IBAQDK6JdbQ18SJwvegkoohuNv
HqRP8Jgi7qs5lK/332QGEgEqvZVunMpDsupVkkwU28mXTGxJ8Ike8a2Wi610Y1vc
wcdw5ibuXTy4eGaySmgCvAevyyAd1C2mPtYLCMw4wYFAM3Rcqqp3ffoK45CtftTH
JtyLcT/kaxzxRry3dYQLuzia6gPph3TUzgzTSixvn8SEqXr/oKXOqNlEtUkrxTbe
ll7jGxA+a07ag8Kd4ASpRHuhqTedLdkC6McnZ//a2xxKa+YRgBxK9B5+EaJ4NyM1
POrN2066IJxA9dtORazGKuMeIRlEoEpeMXuBCszWRk6kZeqrqRYpRtFD92SWwE2C
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:02 2026 by rpki-client