Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/EC4788308DFD11EA8AAFBB36C4F9AE02.roa
File:                     EC4788308DFD11EA8AAFBB36C4F9AE02.roa (raw, json)
Hash identifier:          paT4d9t1hAPjA3Bx2I1y5IKq0oxlBuTqZwqH8gxt6VE=
Subject key identifier:   BF:49:9E:C0:32:69:04:10:E1:16:E2:D4:AF:CB:B1:60:83:0B:E7:C1
Certificate issuer:       /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial:       0A29
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/EC4788308DFD11EA8AAFBB36C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:40:06 +0000
ROA not before:           Fri 22 Aug 2025 20:30:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     174
IP address blocks:        103.119.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
                          rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2601 (0xa29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
        Validity
            Not Before: Aug 22 20:30:22 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a45dd5-aa99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9f:e0:14:23:54:07:9d:13:64:51:00:09:a2:
                    1f:db:84:30:e6:b5:19:f4:bc:2b:44:ff:73:bb:c3:
                    db:3b:82:e6:6e:1d:7a:21:60:ae:74:59:90:fd:44:
                    c9:61:cd:5b:95:a3:7e:0d:10:35:74:ef:4c:30:11:
                    78:4d:c3:f0:80:0d:7e:e5:15:5f:a3:3f:30:5a:29:
                    91:2e:5b:11:38:bf:f5:38:5d:60:89:bc:9e:fb:6b:
                    03:3d:b1:3e:8f:cf:da:11:1f:85:80:e7:b1:d5:b8:
                    f7:73:45:fa:db:6a:b6:70:06:a5:56:12:07:d9:ec:
                    69:d8:1c:35:88:11:be:51:81:d5:6f:45:4f:48:3c:
                    0c:92:a5:1f:21:2b:65:fd:c6:f6:8e:7a:da:38:3e:
                    de:8a:2e:17:e6:c3:90:76:2a:50:c6:be:f9:c4:e7:
                    66:cc:70:25:24:25:97:ae:90:33:e9:13:f4:6d:f3:
                    2f:79:e8:7e:1b:b3:68:4c:4b:f0:6f:ab:f2:ee:c9:
                    49:fa:44:45:1f:64:1b:38:05:47:62:4c:b0:44:ac:
                    b1:96:d8:df:db:e5:de:ec:8f:72:c7:08:f1:a0:2e:
                    6b:15:28:b9:55:af:db:a8:e8:68:26:50:f5:2f:b9:
                    e1:92:b6:f3:3e:ea:8e:fa:1a:fc:dc:02:95:49:89:
                    5a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:49:9E:C0:32:69:04:10:E1:16:E2:D4:AF:CB:B1:60:83:0B:E7:C1
            X509v3 Authority Key Identifier:
                keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/EC4788308DFD11EA8AAFBB36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:d3:0b:3d:bb:8f:60:d2:fb:ea:76:c9:59:3b:0f:56:17:
         b3:3f:a9:8e:7b:72:5f:e6:67:95:11:ee:13:39:4c:4e:d5:ea:
         5b:a5:32:bc:70:b0:8f:5e:a3:6d:8e:39:25:83:78:fd:ef:1c:
         c0:c3:3a:19:28:8d:de:8e:8d:32:9f:af:24:23:75:5a:05:8e:
         9b:3b:a2:28:3f:9a:ff:77:1c:6f:6e:e5:dd:23:7b:58:8a:e6:
         86:63:b9:2a:f2:80:12:1d:5a:6b:fd:c1:1e:75:0c:b1:2a:72:
         1f:a1:87:ff:d2:03:13:bd:6f:fb:bf:ed:fb:2b:53:f0:61:c9:
         50:5f:81:03:0f:01:bd:b1:7f:39:b8:40:98:0a:52:62:7e:a4:
         61:fb:8c:ad:4b:8f:b9:83:f9:65:a2:9b:91:55:32:bf:a6:58:
         ad:d3:0f:c7:6e:3e:25:f3:45:63:12:11:7f:5c:f5:e2:e0:c1:
         16:e2:61:7c:eb:f9:70:e1:c1:4d:da:71:b0:ad:7d:d1:fc:f9:
         6c:c0:97:ae:c4:17:68:07:54:8b:62:9c:e2:0c:bb:39:06:fc:
         9a:c9:55:4e:e8:9f:08:34:ee:d3:b4:50:82:54:a6:76:a0:cd:
         ef:98:35:e8:4b:f1:01:97:08:56:5b:3c:e7:e3:1c:f5:d7:2e:
         cc:90:41:8b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI4ODMxMTAvBgNVBAUTKDkyOTBDNDNEM0E5MjY3ODI5Qjk2MUNFRkU5QzExM0Iy
RkU0MDQ3MTgwHhcNMjUwODIyMjAzMDIyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWRkNS1hYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh5/gFCNUB50TZFEACaIf24Qw5rUZ9LwrRP9zu8PbO4Lmbh16IWCudFmQ/UTJ
Yc1blaN+DRA1dO9MMBF4TcPwgA1+5RVfoz8wWimRLlsROL/1OF1gibye+2sDPbE+
j8/aER+FgOex1bj3c0X622q2cAalVhIH2exp2Bw1iBG+UYHVb0VPSDwMkqUfIStl
/cb2jnraOD7eii4X5sOQdipQxr75xOdmzHAlJCWXrpAz6RP0bfMveeh+G7NoTEvw
b6vy7slJ+kRFH2QbOAVHYkywRKyxltjf2+Xe7I9yxwjxoC5rFSi5Va/bqOhoJlD1
L7nhkrbzPuqO+hr83AKVSYlaJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL9JnsAy
aQQQ4Rbi1K/LsWCDC+fBMB8GA1UdIwQYMBaAFJKQxD06kmeCm5Yc7+nBE7L+QEcY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qjg4My82MkFDRkNBRThE
RkQxMUVBQTM5NkE5MzZDNEY5QUUwMi9rcERFUFRxU1o0S2JsaHp2NmNFVHN2NUFS
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2twREVQVHFTWjRLYmxoenY2Y0VUc3Y1QVJ4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUI4ODMvNjJBQ0ZDQUU4REZEMTFFQUEzOTZBOTM2QzRGOUFFMDIvRUM0Nzg4MzA4
REZEMTFFQThBQUZCQjM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3dwMA0GCSqGSIb3DQEBCwUAA4IBAQA+mNMLPbuPYNL76nbJWTsP
VhezP6mOe3Jf5meVEe4TOUxO1epbpTK8cLCPXqNtjjklg3j97xzAwzoZKI3ejo0y
n68kI3VaBY6bO6IoP5r/dxxvbuXdI3tYiuaGY7kq8oASHVpr/cEedQyxKnIfoYf/
0gMTvW/7v+37K1PwYclQX4EDDwG9sX85uECYClJifqRh+4ytS4+5g/llopuRVTK/
plit0w/Hbj4l80VjEhF/XPXi4MEW4mF86/lw4cFN2nGwrX3R/PlswJeuxBdoB1SL
YpziDLs5BvyayVVO6J8INO7TtFCCVKZ2oM3vmDXoS/EBlwhWWzzn4xz11y7MkEGL
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:51 2026 by rpki-client