Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa
File:                     BC66C474FB5C11EFB5FF765EC4F9AE02.roa (raw, json)
Hash identifier:          Az2YFmLh2UdhhRQEO6OH55PrWIA1OjwsVS+BS3c5lCU=
Subject key identifier:   73:73:6B:E6:48:0F:27:C2:61:6E:B3:A2:2A:29:1A:8B:A4:E9:BC:43
Certificate issuer:       /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
Certificate serial:       BC
Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:05:36 +0000
ROA not before:           Thu 05 Jun 2025 07:32:23 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135357
IP address blocks:        103.41.16.0/22 maxlen: 22
                          103.41.16.0/24 maxlen: 24
                          103.41.17.0/24 maxlen: 24
                          103.41.18.0/24 maxlen: 24
                          103.41.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl
                          rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
        Validity
            Not Before: Jun  5 07:32:23 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3f350-3300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:4f:e4:ff:6e:c2:d5:5e:3a:8f:aa:34:53:
                    86:c2:07:83:ea:36:49:2f:61:b8:af:8f:a5:6b:ba:
                    c7:39:98:be:7d:88:65:dc:3a:cf:49:ff:94:c8:69:
                    4f:2d:4a:ba:e9:40:3f:5e:0c:28:3b:25:c0:d8:a2:
                    f8:ec:79:60:f8:03:4b:c4:b8:43:da:94:eb:db:9c:
                    92:8c:32:27:05:19:17:e5:12:88:3d:29:00:6c:e3:
                    c4:74:93:40:c7:c3:e6:29:35:65:43:f6:95:5b:36:
                    99:d5:a8:f1:cd:22:d0:9a:1c:f0:00:90:58:05:7d:
                    ef:39:ba:de:3b:4c:7c:c5:2d:e3:0d:be:27:f9:dd:
                    10:b8:77:4c:a5:38:e4:0b:a8:0a:b4:b8:28:71:54:
                    17:08:b5:08:0c:b6:9d:79:b0:6f:b9:1a:b2:63:47:
                    12:d5:73:f6:ae:47:a6:f2:6d:60:e5:8b:8a:71:34:
                    9f:5b:83:f6:5a:1c:d7:c4:72:2b:e4:e3:8f:39:f4:
                    7f:85:47:00:a9:24:2e:62:0d:24:9f:86:61:b6:76:
                    52:a7:7a:c5:7c:6a:b4:86:8f:f8:0d:c4:e5:96:2e:
                    7a:8b:87:5c:e6:85:82:17:52:09:3f:e7:27:c9:8b:
                    2e:97:f0:a8:ce:c6:c4:46:75:f6:09:27:71:a6:e0:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:73:6B:E6:48:0F:27:C2:61:6E:B3:A2:2A:29:1A:8B:A4:E9:BC:43
            X509v3 Authority Key Identifier:
                keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:f8:81:79:d3:5a:7b:49:15:14:58:98:2e:53:cc:ab:1f:45:
         1b:3e:c8:43:87:ca:17:b5:8d:0a:bf:9b:cc:1e:3c:b8:84:18:
         1d:9f:38:ad:34:c5:d2:90:30:85:fe:50:4a:9b:84:1c:7a:98:
         73:a4:fe:e6:4c:64:c7:c6:aa:06:0b:96:2b:04:ec:80:53:1f:
         55:5f:43:dd:bf:77:00:23:97:fe:5e:97:fe:0f:3c:1b:20:e0:
         76:fe:b1:af:3f:c7:42:51:6e:e1:f4:58:6b:bd:90:cd:0d:3e:
         8b:46:39:d2:7b:19:15:b0:80:24:2b:58:75:c8:c0:c8:04:bd:
         53:4e:f2:e6:b5:f9:4d:d5:28:65:c4:bf:8e:8d:09:c6:39:0b:
         6d:55:e3:11:27:af:12:6e:28:f2:f0:ef:aa:5a:25:e1:8d:a5:
         ce:6b:77:d5:be:b6:39:48:bb:cb:1d:63:72:1a:a1:4d:24:3b:
         1c:0b:16:bd:df:37:4d:73:bf:bd:c2:cb:4b:9d:78:16:83:35:
         20:e2:15:6b:14:52:91:aa:99:8c:fc:21:3e:32:38:83:88:02:
         6a:ba:4e:29:a3:64:ef:07:df:88:58:19:24:05:e3:f2:8a:e3:
         a6:81:8e:5f:9f:53:1f:68:be:2a:82:97:72:ab:d5:0c:36:2b:
         27:81:69:57
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNFREUxMTAvBgNVBAUTKDgwRkI1MjYzNkE5RTUwQzA4ODY4RTYyNzUyMEExQTBE
OEE4N0YwNDYwHhcNMjUwNjA1MDczMjIzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZjM1MC0zMzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzr1P5P9uwtVeOo+qNFOGwgeD6jZJL2G4r4+la7rHOZi+fYhl3DrPSf+UyGlP
LUq66UA/XgwoOyXA2KL47Hlg+ANLxLhD2pTr25ySjDInBRkX5RKIPSkAbOPEdJNA
x8PmKTVlQ/aVWzaZ1ajxzSLQmhzwAJBYBX3vObreO0x8xS3jDb4n+d0QuHdMpTjk
C6gKtLgocVQXCLUIDLadebBvuRqyY0cS1XP2rkem8m1g5YuKcTSfW4P2WhzXxHIr
5OOPOfR/hUcAqSQuYg0kn4ZhtnZSp3rFfGq0ho/4DcTlli56i4dc5oWCF1IJP+cn
yYsul/CozsbERnX2CSdxpuB5MwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHNza+ZI
DyfCYW6zoiopGouk6bxDMB8GA1UdIwQYMBaAFID7UmNqnlDAiGjmJ1IKGg2Kh/BG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0VERS81OTA0RDk3MEZC
NUMxMUVGOEVBRjMxMUNDNEY5QUUwMi9nUHRTWTJxZVVNQ0lhT1luVWdvYURZcUg4
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjNFREUvNTkwNEQ5NzBGQjVDMTFFRjhFQUYzMTFDQzRGOUFFMDIvQkM2NkM0NzRG
QjVDMTFFRkI1RkY3NjVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZykQMA0GCSqGSIb3DQEBCwUAA4IBAQC2+IF501p7SRUUWJguU8yr
H0UbPshDh8oXtY0Kv5vMHjy4hBgdnzitNMXSkDCF/lBKm4QcephzpP7mTGTHxqoG
C5YrBOyAUx9VX0Pdv3cAI5f+Xpf+DzwbIOB2/rGvP8dCUW7h9FhrvZDNDT6LRjnS
exkVsIAkK1h1yMDIBL1TTvLmtflN1ShlxL+OjQnGOQttVeMRJ68Sbijy8O+qWiXh
jaXOa3fVvrY5SLvLHWNyGqFNJDscCxa93zdNc7+9wstLnXgWgzUg4hVrFFKRqpmM
/CE+MjiDiAJquk4po2TvB9+IWBkkBePyiuOmgY5fn1MfaL4qgpdyq9UMNisngWlX
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:03 2026 by rpki-client