Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/20748896236511EABCF20E10C4F9AE02.roa
File:                     20748896236511EABCF20E10C4F9AE02.roa (raw, json)
Hash identifier:          7j1KGnNgRb4YElVr/K3Q87fY+6Z8oHuVCqshIethGn4=
Subject key identifier:   5A:5C:60:67:EA:2D:31:48:37:EF:2E:4B:0A:99:6D:37:F2:7A:38:92
Certificate issuer:       /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial:       0CC3
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/20748896236511EABCF20E10C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 19:36:17 +0000
ROA not before:           Fri 02 Oct 2026 19:36:17 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.143.45.0/24 maxlen: 24
                          2001:df1:6e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
                          rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 18:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3267 (0xcc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
        Validity
            Not Before: Oct  2 19:36:17 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac007b1-d3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:b2:a0:7a:16:b3:53:5e:ad:5c:3e:f6:21:
                    8d:14:fa:5e:59:d6:bc:49:fc:6b:e0:3e:26:64:4f:
                    e4:3b:b1:5a:b5:2f:65:7a:f2:2b:53:1c:cb:a2:cd:
                    74:42:5a:d1:a0:56:2c:af:1e:b7:91:04:eb:d8:47:
                    64:3b:be:3b:83:0b:1e:16:43:c4:64:10:62:9f:58:
                    16:b9:13:c3:76:cd:41:f1:a0:07:21:a3:a9:d6:1e:
                    c5:66:dd:4a:0c:5c:df:f4:dc:de:0f:b6:70:9e:61:
                    ce:bc:d2:43:36:a0:bf:fb:7e:4f:97:5d:4f:bd:ac:
                    2b:d8:72:f6:96:3b:79:44:d6:5e:6a:6c:ca:13:50:
                    23:33:31:84:d9:b3:b1:6a:f8:d4:65:2b:6f:57:e5:
                    6c:67:40:99:64:6a:cb:36:d0:1c:cf:90:d6:a1:fa:
                    98:65:54:f7:0e:b2:c6:ef:38:9b:92:ae:00:12:e4:
                    2c:88:82:d1:ed:e9:2f:d7:9e:ad:b3:20:49:54:51:
                    81:06:87:4a:02:19:09:ae:f9:b4:2d:a6:b9:0b:6f:
                    4b:d0:78:aa:8e:56:aa:79:02:56:96:76:f0:24:98:
                    27:a2:47:0f:56:d3:b8:5f:c4:b9:e7:36:50:e2:6a:
                    e3:e3:d9:77:dd:ea:da:c0:86:ef:8b:69:a2:9f:91:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5C:60:67:EA:2D:31:48:37:EF:2E:4B:0A:99:6D:37:F2:7A:38:92
            X509v3 Authority Key Identifier:
                keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/20748896236511EABCF20E10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.45.0/24
                IPv6:
                  2001:df1:6e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:bf:9f:b1:9b:cd:a3:9a:dd:cb:03:6d:09:ac:89:92:85:
         53:8c:d8:17:48:ea:9d:bd:2a:a9:f3:bb:36:7e:03:14:57:5e:
         92:bd:a4:d8:a9:8e:c3:f6:7f:4d:19:ae:7e:ad:09:46:88:eb:
         7a:e5:2b:a6:7a:27:1a:2e:3d:53:d0:29:b4:8f:c0:89:fe:12:
         76:39:70:fb:b8:d7:f0:be:22:b3:cb:1d:8e:85:b5:d8:10:53:
         bf:c7:6f:ed:72:db:4a:2d:7f:88:5d:a9:1e:b1:79:65:46:05:
         20:5c:6c:0c:b2:90:7a:cd:f5:c9:2a:61:05:13:bc:06:c4:93:
         c0:96:73:97:35:ce:0c:d8:ea:d6:57:82:ca:13:cf:9f:8a:56:
         b8:b4:fd:90:73:87:43:1d:9c:e4:e1:9c:2a:95:14:ce:a1:27:
         4f:b2:3e:3e:98:b2:19:be:4a:9d:95:87:b8:7b:45:a7:d3:57:
         03:4b:6d:9b:ec:9a:db:45:4f:4a:57:c8:5d:fa:e7:52:70:3f:
         ff:f9:90:59:45:9f:5f:87:55:85:6f:a3:a1:be:9d:0a:44:66:
         99:8d:b4:58:f7:b1:f5:67:4f:ae:00:39:f4:b9:db:0c:48:cc:
         1a:b2:f4:f7:32:e0:e8:ae:b8:5a:a9:9b:90:0a:c2:97:87:3d:
         c6:e7:5d:b9
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA0MEYxMTAvBgNVBAUTKEM4RkNDQ0M0QkU4OThBQTkyMDY3MTM2NkEwRkQ3OTUz
MjlFOTIwMUQwHhcNMjYxMDAyMTkzNjE3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMwMDdiMS1kM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvrGyoHoWs1NerVw+9iGNFPpeWda8Sfxr4D4mZE/kO7FatS9levIrUxzLos10
QlrRoFYsrx63kQTr2EdkO747gwseFkPEZBBin1gWuRPDds1B8aAHIaOp1h7FZt1K
DFzf9NzeD7ZwnmHOvNJDNqC/+35Pl11Pvawr2HL2ljt5RNZeamzKE1AjMzGE2bOx
avjUZStvV+VsZ0CZZGrLNtAcz5DWofqYZVT3DrLG7zibkq4AEuQsiILR7ekv156t
syBJVFGBBodKAhkJrvm0Laa5C29L0HiqjlaqeQJWlnbwJJgnokcPVtO4X8S55zZQ
4mrj49l33erawIbvi2min5FtqwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFpcYGfq
LTFIN+8uSwqZbTfyejiSMB8GA1UdIwQYMBaAFMj8zMS+iYqpIGcTZqD9eVMp6SAd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQwRi83MDdCN0I4MDIz
NjMxMUVBOEI0RjM5MEJDNEY5QUUwMi95UHpNeEw2Smlxa2daeE5tb1AxNVV5bnBJ
QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lQek14TDZKaXFrZ1p4Tm1vUDE1VXlucElCMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTA0MEYvNzA3QjdCODAyMzYzMTFFQThCNEYzOTBCQzRGOUFFMDIvMjA3NDg4OTYy
MzY1MTFFQUJDRjIwRTEwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ48tMA8EAgACMAkDBwAgAQ3xboAwDQYJKoZIhvcNAQELBQADggEB
AAD2v5+xm82jmt3LA20JrImShVOM2BdI6p29KqnzuzZ+AxRXXpK9pNipjsP2f00Z
rn6tCUaI63rlK6Z6JxouPVPQKbSPwIn+EnY5cPu41/C+IrPLHY6FtdgQU7/Hb+1y
20otf4hdqR6xeWVGBSBcbAyykHrN9ckqYQUTvAbEk8CWc5c1zgzY6tZXgsoTz5+K
Vri0/ZBzh0MdnOThnCqVFM6hJ0+yPj6Yshm+Sp2Vh7h7RafTVwNLbZvsmttFT0pX
yF3651JwP//5kFlFn1+HVYVvo6G+nQpEZpmNtFj3sfVnT64AOfS52wxIzBqy9Pcy
4OiuuFqpm5AKwpeHPcbnXbk=
-----END CERTIFICATE-----
Generated at Wed Oct 28 08:13:45 2026 by rpki-client