Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/C86831A80CB311EDB2750F60C4F9AE02.roa
File:                     C86831A80CB311EDB2750F60C4F9AE02.roa (raw, json)
Hash identifier:          5PsEYVqdLKSNHZI9sLRX1Oc9lcQCYnBoqVdi/mE1UTE=
Subject key identifier:   FC:2A:A8:F3:B8:37:1B:F7:16:BC:B1:EC:67:B3:D9:A7:19:07:36:12
Certificate issuer:       /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54
Certificate serial:       1EBF
Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/C86831A80CB311EDB2750F60C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:40:45 +0000
ROA not before:           Wed 22 Jan 2025 16:23:25 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     139346
IP address blocks:        103.243.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7871 (0x1ebf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC46A, serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54
        Validity
            Not Before: Jan 22 16:23:25 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=69a441dd-783b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:8e:78:78:a6:3a:22:61:7d:82:09:b7:3b:
                    56:86:96:b0:16:e3:9d:23:f9:24:fa:e4:7d:12:88:
                    f5:55:d4:37:72:3b:07:4e:26:af:d4:5a:17:ac:04:
                    3b:49:4e:60:0f:58:2b:85:c8:0c:71:36:c5:8a:7b:
                    09:49:44:7c:99:91:49:69:c1:e4:58:13:4a:f6:1f:
                    65:79:5b:dc:5f:58:67:5b:ee:fb:32:d8:b6:b2:77:
                    76:ba:41:86:05:10:dd:0e:4d:58:e5:a1:bc:8e:8b:
                    1c:28:ed:55:a4:3c:35:04:f8:e3:58:6c:8e:e6:09:
                    5b:d0:4f:7a:af:1b:3a:ad:35:43:97:fd:22:51:1c:
                    b4:22:34:c6:40:6d:20:5f:5f:c2:06:b8:05:1b:0c:
                    33:e6:c4:ac:67:06:ef:f4:34:70:3b:cd:6b:37:60:
                    4c:7b:bd:cd:ee:b0:81:44:a2:e5:98:e3:16:f3:75:
                    d9:0f:44:e2:e9:fd:d3:22:f1:17:5e:7f:9a:8f:5b:
                    21:bd:3b:18:fa:70:1e:75:47:94:00:11:67:f1:13:
                    ce:8d:ba:75:65:4d:e6:79:02:31:c8:34:54:ef:be:
                    d7:36:5c:6b:da:1a:0a:31:5b:3f:47:ba:f3:af:45:
                    39:c7:8e:13:bf:d3:ee:0c:6a:b7:7a:b1:03:e5:cd:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2A:A8:F3:B8:37:1B:F7:16:BC:B1:EC:67:B3:D9:A7:19:07:36:12
            X509v3 Authority Key Identifier:
                keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/C86831A80CB311EDB2750F60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d2:57:c6:e6:c3:80:ba:05:bf:04:e2:81:90:a7:71:58:df:
         8a:e4:92:64:63:21:8f:e0:4d:bc:71:30:c9:2e:c5:91:7f:61:
         5e:77:c6:0c:51:d7:10:0d:74:97:b1:68:80:fc:e2:24:23:77:
         48:e5:56:ec:e0:9b:da:35:a6:7a:45:03:e2:35:33:39:d6:31:
         72:bd:5b:7c:6a:2e:7e:6d:bf:5c:d4:f4:38:97:e3:af:96:d9:
         a8:6a:6e:05:99:2c:5e:57:9b:13:b4:2a:05:c3:b0:2d:dc:ce:
         78:dd:17:3b:7a:5d:93:6e:a6:b9:9a:22:a6:00:99:56:a7:a5:
         12:cd:05:8b:04:84:80:5c:19:ec:87:75:a7:0b:b8:f3:06:82:
         c3:54:26:f7:e5:81:5b:cc:e4:54:38:00:f6:6e:9d:ab:4a:49:
         55:ed:54:75:16:0c:f2:c1:88:b4:bf:3b:2d:62:5c:ee:be:79:
         f2:cd:79:a9:29:d5:1f:98:a9:4f:ea:d5:09:60:1d:42:ba:09:
         80:c7:20:63:f5:1d:f3:00:eb:e1:90:76:a8:8a:90:3c:66:df:
         fb:1c:53:1a:8f:68:fb:3c:12:ce:de:61:d2:8d:93:0b:94:01:
         96:2d:bc:a7:da:f8:63:4e:f9:97:38:53:42:d0:3f:77:82:ca:
         f3:c1:6f:67
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICHr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM0NkExMTAvBgNVBAUTKEY4RDRBNjMyRDA2OTk2NEM2MUEzM0U0MUQ2MjQzRDUz
NUIwMDdENTQwHhcNMjUwMTIyMTYyMzI1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDFkZC03ODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw8iOeHimOiJhfYIJtztWhpawFuOdI/kk+uR9Eoj1VdQ3cjsHTiav1FoXrAQ7
SU5gD1grhcgMcTbFinsJSUR8mZFJacHkWBNK9h9leVvcX1hnW+77Mti2snd2ukGG
BRDdDk1Y5aG8joscKO1VpDw1BPjjWGyO5glb0E96rxs6rTVDl/0iURy0IjTGQG0g
X1/CBrgFGwwz5sSsZwbv9DRwO81rN2BMe73N7rCBRKLlmOMW83XZD0Ti6f3TIvEX
Xn+aj1shvTsY+nAedUeUABFn8RPOjbp1ZU3meQIxyDRU777XNlxr2hoKMVs/R7rz
r0U5x44Tv9PuDGq3erED5c0CgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPwqqPO4
Nxv3Fryx7Gez2acZBzYSMB8GA1UdIwQYMBaAFPjUpjLQaZZMYaM+QdYkPVNbAH1U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ2QS8wMDUwMDE2NDk0
MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxreGhvejVCMWlROVUxc0Fm
VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1OU21NdEJwbGt4aG96NUIxaVE5VTFzQWZWUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REM0NkEvMDA1MDAxNjQ5NDMyMTFFNjhDMUI4MjRBQzRGOUFFMDIvQzg2ODMxQTgw
Q0IzMTFFREIyNzUwRjYwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ/PAMA0GCSqGSIb3DQEBCwUAA4IBAQB90lfG5sOAugW/BOKBkKdx
WN+K5JJkYyGP4E28cTDJLsWRf2Fed8YMUdcQDXSXsWiA/OIkI3dI5Vbs4JvaNaZ6
RQPiNTM51jFyvVt8ai5+bb9c1PQ4l+Ovltmoam4FmSxeV5sTtCoFw7At3M543Rc7
el2Tbqa5miKmAJlWp6USzQWLBISAXBnsh3WnC7jzBoLDVCb35YFbzORUOAD2bp2r
SklV7VR1FgzywYi0vzstYlzuvnnyzXmpKdUfmKlP6tUJYB1CugmAxyBj9R3zAOvh
kHaoipA8Zt/7HFMaj2j7PBLO3mHSjZMLlAGWLbyn2vhjTvmXOFNC0D93gsrzwW9n
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:25 2026 by rpki-client