Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/858F093E6D6C11EBA3CFBD21C4F9AE02.roa
File:                     858F093E6D6C11EBA3CFBD21C4F9AE02.roa (raw, json)
Hash identifier:          frlhuFiyVOqitxOAJckRFou7x/HIITvsGO1KaZNWImQ=
Subject key identifier:   54:69:32:70:82:2B:87:56:26:02:6A:21:2D:25:56:76:51:9C:C3:09
Certificate issuer:       /CN=A919B80A/serialNumber=47C70465044A2E14014547FA79BB7A54FE36EBBE
Certificate serial:       072D
Authority key identifier: 47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/858F093E6D6C11EBA3CFBD21C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:12:42 +0000
ROA not before:           Fri 30 Jan 2026 22:18:23 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141728
IP address blocks:        103.162.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.crl
                          rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837 (0x72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B80A, serialNumber=47C70465044A2E14014547FA79BB7A54FE36EBBE
        Validity
            Not Before: Jan 30 22:18:23 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a4495a-7254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4c:bb:5b:6f:6a:97:88:61:e4:85:40:99:4a:
                    9c:08:a3:55:b3:c9:27:7e:f4:fc:a7:0f:8a:21:fb:
                    d0:ac:41:7c:18:7e:3f:c6:94:b6:a3:b1:78:ae:2f:
                    cb:7c:53:71:e7:a2:d7:75:2f:b6:52:d4:21:01:24:
                    c2:46:57:cb:bf:c3:46:ee:22:69:07:4c:85:f8:e6:
                    f9:f6:ae:be:c1:a1:23:6b:86:2d:79:c7:b5:6c:6d:
                    71:42:b7:fc:6a:42:12:4e:a1:ea:b7:5e:4e:f0:a6:
                    7d:7f:55:53:3f:84:f4:c4:f0:53:4a:bd:8e:42:30:
                    87:79:4c:47:d5:ef:66:65:74:c2:ed:84:6c:07:fd:
                    5d:38:72:6f:25:bf:82:c0:79:d3:32:ee:2d:62:14:
                    17:94:0e:00:13:61:0b:18:d0:e2:38:55:dd:0f:34:
                    be:a3:6b:f5:b6:2c:a4:a4:31:89:53:e3:be:42:0a:
                    86:94:c6:d6:5b:c9:68:ad:ae:49:8f:71:8f:d3:b8:
                    3d:2d:7e:0d:8e:37:d0:99:9e:69:fa:08:7e:ce:ec:
                    3a:27:c1:b3:38:83:99:8a:6c:78:ac:83:9f:fc:bf:
                    3d:69:20:84:38:d1:50:04:2c:7d:ab:f2:83:28:d4:
                    f4:e6:9c:de:c5:dc:7b:1b:6b:52:02:11:ca:0a:3b:
                    87:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:69:32:70:82:2B:87:56:26:02:6A:21:2D:25:56:76:51:9C:C3:09
            X509v3 Authority Key Identifier:
                keyid:47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/858F093E6D6C11EBA3CFBD21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:f3:f8:7a:d3:9b:60:f4:d6:bb:fe:6a:96:fb:ca:95:66:a2:
         bd:3a:54:dc:af:2a:33:91:d7:19:75:1d:b0:48:5d:ef:ba:da:
         34:98:9f:2c:0d:b9:0f:e1:9a:9d:0f:72:8d:c7:93:16:87:15:
         dd:87:09:aa:a6:44:f3:ab:20:7f:93:ac:fb:71:6b:68:fc:ff:
         dd:82:78:58:27:97:6e:fa:30:50:79:d6:e8:ab:35:6c:15:3f:
         6f:7b:01:d3:0e:6b:8c:66:ca:d0:f3:de:b0:84:ac:34:6b:47:
         11:01:6e:3a:fe:df:32:20:b9:0d:0d:df:9d:68:3c:83:44:d8:
         8b:ee:aa:36:b4:d9:31:ae:28:3d:2b:d1:35:31:70:a7:1f:0a:
         71:d9:b3:27:9e:f3:80:d1:c3:88:9d:34:a0:da:df:6c:97:a0:
         55:23:07:5e:ad:1b:1f:b2:13:1d:e0:02:ce:f2:15:80:7f:20:
         39:2d:4f:48:dc:90:31:b0:db:ef:99:81:ee:f0:a1:32:00:84:
         db:73:54:b1:9e:46:5b:a0:3f:90:8b:5e:18:95:5d:da:6e:1b:
         da:35:78:97:0a:87:0e:e8:c5:15:58:f6:1d:c6:d8:bb:4c:fa:
         e0:42:28:b7:a8:02:ac:08:58:8e:de:3a:ef:68:1a:ec:f5:7e:
         e4:1e:59:db
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI4MEExMTAvBgNVBAUTKDQ3QzcwNDY1MDQ0QTJFMTQwMTQ1NDdGQTc5QkI3QTU0
RkUzNkVCQkUwHhcNMjYwMTMwMjIxODIzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDk1YS03MjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Ey7W29ql4hh5IVAmUqcCKNVs8knfvT8pw+KIfvQrEF8GH4/xpS2o7F4ri/L
fFNx56LXdS+2UtQhASTCRlfLv8NG7iJpB0yF+Ob59q6+waEja4Ytece1bG1xQrf8
akISTqHqt15O8KZ9f1VTP4T0xPBTSr2OQjCHeUxH1e9mZXTC7YRsB/1dOHJvJb+C
wHnTMu4tYhQXlA4AE2ELGNDiOFXdDzS+o2v1tiykpDGJU+O+QgqGlMbWW8lora5J
j3GP07g9LX4NjjfQmZ5p+gh+zuw6J8GzOIOZimx4rIOf/L89aSCEONFQBCx9q/KD
KNT05pzexdx7G2tSAhHKCjuHhQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFRpMnCC
K4dWJgJqIS0lVnZRnMMJMB8GA1UdIwQYMBaAFEfHBGUESi4UAUVH+nm7elT+Nuu+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjgwQS9GOEU3MjI1NjZE
NkExMUVCQjA0Rjg2MjBDNEY5QUUwMi9SOGNFWlFSS0xoUUJSVWY2ZWJ0NlZQNDI2
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I4Y0VaUVJLTGhRQlJVZjZlYnQ2VlA0MjY3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUI4MEEvRjhFNzIyNTY2RDZBMTFFQkIwNEY4NjIwQzRGOUFFMDIvODU4RjA5M0U2
RDZDMTFFQkEzQ0ZCRDIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6LiMA0GCSqGSIb3DQEBCwUAA4IBAQBy8/h605tg9Na7/mqW+8qV
ZqK9OlTcryozkdcZdR2wSF3vuto0mJ8sDbkP4ZqdD3KNx5MWhxXdhwmqpkTzqyB/
k6z7cWto/P/dgnhYJ5du+jBQedboqzVsFT9vewHTDmuMZsrQ896whKw0a0cRAW46
/t8yILkNDd+daDyDRNiL7qo2tNkxrig9K9E1MXCnHwpx2bMnnvOA0cOInTSg2t9s
l6BVIwderRsfshMd4ALO8hWAfyA5LU9I3JAxsNvvmYHu8KEyAITbc1SxnkZboD+Q
i14YlV3abhvaNXiXCocO6MUVWPYdxti7TPrgQii3qAKsCFiO3jrvaBrs9X7kHlnb
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:03 2026 by rpki-client