Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/45865ED62B7411EF9E28ED19C4F9AE02.roa
File:                     45865ED62B7411EF9E28ED19C4F9AE02.roa (raw, json)
Hash identifier:          LXCs5H8ayP8U4VLda9FlTsXXVH9LMBByE+ju0x7bNlw=
Subject key identifier:   79:99:5A:11:AA:FA:B6:21:1D:0A:BB:A2:54:0B:38:4D:1B:DC:D6:9D
Certificate issuer:       /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
Certificate serial:       1F11
Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/45865ED62B7411EF9E28ED19C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:14:15 +0000
ROA not before:           Sun 04 May 2025 16:23:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149515
IP address blocks:        103.74.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl
                          rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7953 (0x1f11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A
        Validity
            Not Before: May  4 16:23:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42d97-2a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:39:b8:ca:42:e8:06:6f:4f:0f:23:36:ce:
                    f9:ed:f3:8e:7c:d8:cb:14:63:a8:b5:e7:a4:84:7f:
                    65:99:f7:f9:d0:bf:c2:ab:4c:ea:10:d4:f7:dc:74:
                    be:7e:0a:d6:3c:64:4c:0e:b2:74:b0:32:e3:2e:d9:
                    3f:34:49:b7:08:c6:4f:e7:d3:30:35:a1:69:77:e4:
                    da:54:3a:ea:3e:87:0f:3d:b0:f5:88:a2:b8:87:08:
                    0f:4b:18:3b:a4:ed:2d:c6:ba:7a:c6:fd:e1:e6:34:
                    f4:38:21:77:1c:2b:fe:30:ca:cf:17:14:f9:22:37:
                    38:3d:e3:69:3b:1f:55:f4:62:05:5f:44:ab:aa:84:
                    4c:ca:a8:c4:e2:45:02:b9:66:ff:df:8b:ae:b7:7b:
                    78:5e:05:ac:e5:43:00:de:10:82:0c:ab:bd:4a:97:
                    2b:df:1f:90:fb:4b:8d:76:ab:19:54:ac:37:b8:7e:
                    fe:db:fd:1b:c1:50:3c:f4:04:b0:4a:7e:5c:9a:e6:
                    ed:7d:fa:94:81:63:1a:95:f8:23:18:57:78:49:d7:
                    d8:01:b3:8b:b8:02:f0:8b:1a:b4:5e:cc:e3:17:e4:
                    2e:09:a0:e2:77:e1:94:4d:8d:aa:c8:73:a3:ab:17:
                    81:ef:8a:ba:3c:05:b3:96:8a:a9:4d:25:5e:b9:a3:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:99:5A:11:AA:FA:B6:21:1D:0A:BB:A2:54:0B:38:4D:1B:DC:D6:9D
            X509v3 Authority Key Identifier:
                keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/45865ED62B7411EF9E28ED19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:21:28:98:1e:d2:de:0d:dd:dc:6b:fe:95:e2:99:9e:4c:
         d1:b2:78:eb:40:d4:0e:3f:81:a1:bc:34:f2:58:e6:da:ac:2d:
         b4:55:8a:11:b3:a3:3e:33:73:8c:4c:bc:83:20:5e:ce:91:c8:
         65:68:9c:e0:da:48:58:b3:12:81:35:f3:13:10:75:1a:31:ec:
         5d:20:38:54:96:dc:85:da:10:ce:50:b1:5a:01:2e:30:97:34:
         e4:f2:ae:6f:f2:2d:5c:82:11:0f:79:58:18:3b:0b:a6:ff:04:
         28:a6:0a:06:5a:bc:71:ec:ab:06:85:f5:67:9c:fc:0f:16:4a:
         a0:fd:8c:97:8d:31:3c:e8:bc:4a:e1:18:85:b5:7e:c7:5f:61:
         1c:c4:1c:d6:ed:a7:a8:08:81:86:9c:f6:be:7f:a6:1f:4c:53:
         e6:0c:3a:4b:54:25:6d:39:00:b5:0c:af:33:e8:1f:86:ed:06:
         cb:a2:23:ae:9e:7c:ce:22:19:2d:0d:01:bc:3e:93:d1:f0:0d:
         79:55:a9:84:bb:27:42:80:4a:15:fb:c9:0e:7c:25:d8:d5:1a:
         6d:d9:3e:59:69:13:94:ea:e4:c0:59:35:f3:0f:28:83:21:f9:
         55:d8:27:78:eb:60:5b:f6:79:c5:e6:2b:cc:61:80:13:a8:7d:
         f1:b7:3e:11
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICHxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy
MjI3MkMzNUEwHhcNMjUwNTA0MTYyMzU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmQ5Ny0yYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsUc5uMpC6AZvTw8jNs757fOOfNjLFGOoteekhH9lmff50L/Cq0zqENT33HS+
fgrWPGRMDrJ0sDLjLtk/NEm3CMZP59MwNaFpd+TaVDrqPocPPbD1iKK4hwgPSxg7
pO0txrp6xv3h5jT0OCF3HCv+MMrPFxT5Ijc4PeNpOx9V9GIFX0SrqoRMyqjE4kUC
uWb/34uut3t4XgWs5UMA3hCCDKu9Spcr3x+Q+0uNdqsZVKw3uH7+2/0bwVA89ASw
Sn5cmubtffqUgWMalfgjGFd4SdfYAbOLuALwixq0XszjF+QuCaDid+GUTY2qyHOj
qxeB74q6PAWzloqpTSVeuaPq8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHmZWhGq
+rYhHQq7olQLOE0b3NadMB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0
OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUM3N0QvN0Q0QkZFMDY3NDk5MTFFNkIwMjUyQjg0QzRGOUFFMDIvNDU4NjVFRDYy
Qjc0MTFFRjlFMjhFRDE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ0q8MA0GCSqGSIb3DQEBCwUAA4IBAQBh2CEomB7S3g3d3Gv+leKZ
nkzRsnjrQNQOP4GhvDTyWObarC20VYoRs6M+M3OMTLyDIF7OkchlaJzg2khYsxKB
NfMTEHUaMexdIDhUltyF2hDOULFaAS4wlzTk8q5v8i1cghEPeVgYOwum/wQopgoG
Wrxx7KsGhfVnnPwPFkqg/YyXjTE86LxK4RiFtX7HX2EcxBzW7aeoCIGGnPa+f6Yf
TFPmDDpLVCVtOQC1DK8z6B+G7QbLoiOunnzOIhktDQG8PpPR8A15VamEuydCgEoV
+8kOfCXY1Rpt2T5ZaROU6uTAWTXzDyiDIflV2Cd462Bb9nnF5ivMYYATqH3xtz4R
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:55 2026 by rpki-client