Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/85D25098E00111E596BC7D1BC4F9AE02.roa
File:                     85D25098E00111E596BC7D1BC4F9AE02.roa (raw, json)
Hash identifier:          i7fXEe5dFhoCqlarIdJgicuElCLx9uKqz6dvNHqKFiE=
Subject key identifier:   B8:CC:F4:ED:18:86:72:01:7D:B7:8D:C9:1F:8B:4F:7C:07:8E:DF:FC
Certificate issuer:       /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Certificate serial:       2202
Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/85D25098E00111E596BC7D1BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:12:58 +0000
ROA not before:           Tue 22 Jul 2025 15:52:21 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     7718
IP address blocks:        103.12.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8706 (0x2202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8E25, serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
        Validity
            Not Before: Jul 22 15:52:21 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a42d4a-1413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c4:36:6d:a0:20:71:ae:ff:29:3f:3e:e3:79:
                    dc:c6:0d:4d:0d:8a:11:f0:84:9a:86:d0:2b:85:2a:
                    d4:f5:96:ea:a7:d0:dd:3f:ca:c8:ab:01:02:4d:2a:
                    27:8b:1a:71:52:cc:98:7f:09:af:22:22:19:1f:91:
                    62:5d:2f:ba:66:06:eb:95:cc:bd:d8:a3:72:61:05:
                    2f:9e:d1:0f:67:ba:26:22:a5:e6:ff:bb:b1:46:bb:
                    6f:b9:10:0d:c0:a4:f3:d4:ea:77:bc:14:a8:58:bc:
                    1c:9c:35:68:ef:7c:81:8d:38:b5:1e:83:ab:ee:e4:
                    ab:7e:18:e1:9b:a3:ec:8a:78:85:69:5d:57:0d:7f:
                    ed:58:63:87:63:28:73:1a:d9:ad:0a:e4:a0:e1:a1:
                    58:d0:e4:d5:4d:ef:c4:1e:b1:10:4d:be:0f:e1:37:
                    89:7f:c0:19:1c:13:a7:f2:3a:cb:3f:a8:80:10:77:
                    15:32:66:49:20:64:69:8e:28:bb:2c:e8:23:b0:33:
                    f9:cb:2c:25:68:e1:a1:86:ea:f2:f1:b7:6b:fa:eb:
                    59:70:d2:bf:f5:0c:f9:64:97:c2:71:25:93:88:6b:
                    59:d9:2b:40:3e:e2:a3:66:9e:0f:df:ca:8b:4e:48:
                    e5:ee:d2:41:e7:8f:7e:f4:b0:e5:1b:da:b8:d6:8a:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CC:F4:ED:18:86:72:01:7D:B7:8D:C9:1F:8B:4F:7C:07:8E:DF:FC
            X509v3 Authority Key Identifier:
                keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/85D25098E00111E596BC7D1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:4c:8b:1f:33:a2:b9:da:03:87:02:80:05:5a:05:f0:c1:16:
         13:33:bc:25:25:73:0f:37:53:2f:d7:36:19:fb:aa:e7:a7:06:
         a9:e3:fc:8f:77:98:d3:35:9b:c5:86:41:d1:2c:5b:75:4a:17:
         62:b1:28:e9:32:7d:9f:d7:44:7f:50:8f:56:9a:13:5c:15:b6:
         02:26:a7:e8:c6:75:5c:1d:87:66:61:2a:c2:22:f0:de:ff:7a:
         78:a8:54:0f:d5:e9:aa:03:ec:d4:f2:10:06:6b:25:c6:89:4e:
         34:07:85:3c:ea:ef:17:2e:88:a0:fa:2d:0b:ab:da:57:0f:5a:
         b0:0e:21:65:45:e3:1c:72:bf:d9:43:3c:39:93:5d:68:b8:7f:
         44:60:66:82:dc:99:07:5f:6e:7f:7a:78:77:77:e5:77:ee:48:
         ed:90:3f:1c:48:be:f4:43:2f:5a:85:13:0a:46:cf:1f:f5:a0:
         24:af:7c:80:32:ff:ea:1b:ac:f7:a2:93:5b:a2:bc:28:db:f0:
         7b:d6:36:f7:b0:8e:c9:7a:66:8f:fe:93:a2:e4:c8:fd:3b:2a:
         a9:7b:78:66:da:39:d5:d1:27:e8:b8:d1:b2:a2:84:02:40:11:
         84:4a:05:af:2c:74:c4:bc:b5:83:0c:67:b4:6f:55:0b:74:94:
         00:56:f6:5e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhFMjUxMTAvBgNVBAUTKDZGMDk0QzAwRUY4OEZEOEI3MDgxM0Q2REFEQ0I1NDY4
NzYzMjhDRDkwHhcNMjUwNzIyMTU1MjIxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmQ0YS0xNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm8Q2baAgca7/KT8+43ncxg1NDYoR8ISahtArhSrU9Zbqp9DdP8rIqwECTSon
ixpxUsyYfwmvIiIZH5FiXS+6Zgbrlcy92KNyYQUvntEPZ7omIqXm/7uxRrtvuRAN
wKTz1Op3vBSoWLwcnDVo73yBjTi1HoOr7uSrfhjhm6PsiniFaV1XDX/tWGOHYyhz
GtmtCuSg4aFY0OTVTe/EHrEQTb4P4TeJf8AZHBOn8jrLP6iAEHcVMmZJIGRpjii7
LOgjsDP5yywlaOGhhury8bdr+utZcNK/9Qz5ZJfCcSWTiGtZ2StAPuKjZp4P38qL
Tkjl7tJB549+9LDlG9q41ooUBQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLjM9O0Y
hnIBfbeNyR+LT3wHjt/8MB8GA1UdIwQYMBaAFG8JTADviP2LcIE9ba3LVGh2MozZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUyNS9GNDM0NDExNjhB
MkUxMUUzQjVCNkU5NUU1OTExRUEzMi9id2xNQU8tSV9ZdHdnVDF0cmN0VWFIWXlq
TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J3bE1BTy1JX1l0d2dUMXRyY3RVYUhZeWpOay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjhFMjUvRjQzNDQxMTY4QTJFMTFFM0I1QjZFOTVFNTkxMUVBMzIvODVEMjUwOThF
MDAxMTFFNTk2QkM3RDFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZwzxMA0GCSqGSIb3DQEBCwUAA4IBAQATTIsfM6K52gOHAoAFWgXw
wRYTM7wlJXMPN1Mv1zYZ+6rnpwap4/yPd5jTNZvFhkHRLFt1ShdisSjpMn2f10R/
UI9WmhNcFbYCJqfoxnVcHYdmYSrCIvDe/3p4qFQP1emqA+zU8hAGayXGiU40B4U8
6u8XLoig+i0Lq9pXD1qwDiFlReMccr/ZQzw5k11ouH9EYGaC3JkHX25/enh3d+V3
7kjtkD8cSL70Qy9ahRMKRs8f9aAkr3yAMv/qG6z3opNborwo2/B71jb3sI7JemaP
/pOi5Mj9Oyqpe3hm2jnV0SfouNGyooQCQBGESgWvLHTEvLWDDGe0b1ULdJQAVvZe
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:15 2026 by rpki-client