Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa
File:                     7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (raw, json)
Hash identifier:          Xqx8HHoJhqAER1yz+YoDsI+zwuTovJWo6Q8AN+yb3U0=
Subject key identifier:   19:95:0E:52:96:B8:BC:E5:14:36:F7:D3:DB:D9:47:FF:34:D0:11:4B
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       08D4
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:53:41 +0000
ROA not before:           Wed 08 Oct 2025 22:54:03 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141153
IP address blocks:        103.48.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 22:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Oct  8 22:54:03 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48b35-045e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f1:4f:da:74:da:6e:f2:c0:9c:be:3d:85:72:
                    fb:90:7c:86:46:50:83:e9:61:16:ac:e9:ff:53:6c:
                    fe:3b:61:7f:c3:e6:be:4b:d3:3d:8e:d9:e4:52:f5:
                    db:60:b7:23:fe:56:c6:80:c2:a4:e2:7f:32:de:51:
                    b6:db:7e:d7:92:cb:59:dd:19:25:85:00:9a:dd:c4:
                    e9:fb:5e:9a:28:d4:02:94:88:e1:ca:6a:eb:f1:b7:
                    a2:f5:4d:73:81:90:69:97:4d:04:62:aa:88:05:85:
                    38:61:6c:b4:90:b2:f3:03:b5:3a:76:80:33:23:08:
                    fe:4b:c0:1d:98:be:62:8a:30:c1:40:9d:86:ed:3a:
                    67:ae:95:e8:6f:6e:62:61:c5:a4:c0:19:04:74:99:
                    89:b8:5a:7d:23:b9:90:ea:78:74:64:6d:21:7f:a6:
                    b1:89:48:eb:73:64:4a:61:08:e4:2e:dc:37:24:3d:
                    4d:27:70:25:8d:81:4b:2b:93:93:f1:d7:5b:d3:d6:
                    12:6b:36:d3:be:60:6c:ca:49:d6:bf:19:dc:19:fa:
                    40:fa:e0:9f:cd:fd:e1:cc:e9:2f:01:d3:b4:76:f0:
                    70:5d:47:20:0c:35:e2:60:ce:49:b7:2e:cf:82:36:
                    b3:3a:7c:27:e8:1c:b6:fb:e2:e0:fe:0e:82:e5:98:
                    a5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:95:0E:52:96:B8:BC:E5:14:36:F7:D3:DB:D9:47:FF:34:D0:11:4B
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:fa:13:91:ca:b5:b0:57:be:75:ce:b5:e0:5e:72:fd:ef:81:
         6c:2f:f0:3c:f3:fb:c8:15:b4:21:a4:f3:e3:d7:fe:5d:e0:7a:
         72:f0:0a:99:3b:4f:0a:7f:8f:77:ff:10:37:43:89:4d:8b:c2:
         03:0d:d1:3b:3a:f4:a9:00:a9:9a:e8:df:85:21:4e:b0:f8:31:
         5f:08:0b:e0:33:34:d3:26:f9:ef:1f:76:76:01:bd:f7:f0:e4:
         2c:2b:4f:35:55:27:c9:63:f0:74:58:54:29:79:7e:b4:c1:70:
         0c:c3:34:3c:e2:1e:ca:fd:1a:93:be:37:4c:a7:a3:cd:bb:2c:
         f7:d9:61:b5:f0:e0:25:27:cc:40:0a:d7:e1:b6:26:7a:64:88:
         cd:aa:80:f3:00:d4:3d:58:93:75:dc:93:eb:40:a5:9f:9d:23:
         8a:77:b2:c4:a7:2a:12:82:15:8f:db:73:2b:3d:08:2c:4c:c6:
         60:19:bf:d7:7c:a1:00:44:aa:02:c7:59:1a:35:d6:b1:f3:94:
         ae:44:a5:d1:fb:aa:11:ab:d4:34:48:3c:86:68:ec:41:66:24:
         bb:c1:38:90:7c:62:55:8b:18:0b:64:d7:24:d9:37:14:1b:d6:
         c5:52:65:be:6b:c2:9b:ad:6b:7e:5f:20:c3:af:23:a8:09:af:
         21:70:5f:31
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDAzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGIzNS0wNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6fFP2nTabvLAnL49hXL7kHyGRlCD6WEWrOn/U2z+O2F/w+a+S9M9jtnkUvXb
YLcj/lbGgMKk4n8y3lG2237XkstZ3RklhQCa3cTp+16aKNQClIjhymrr8bei9U1z
gZBpl00EYqqIBYU4YWy0kLLzA7U6doAzIwj+S8AdmL5iijDBQJ2G7TpnrpXob25i
YcWkwBkEdJmJuFp9I7mQ6nh0ZG0hf6axiUjrc2RKYQjkLtw3JD1NJ3AljYFLK5OT
8ddb09YSazbTvmBsyknWvxncGfpA+uCfzf3hzOkvAdO0dvBwXUcgDDXiYM5Jty7P
gjazOnwn6By2++Lg/g6C5ZilTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBmVDlKW
uLzlFDb309vZR/800BFLMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvN0NGQ0QxMTBF
Q0NDMTFFRThBQ0MyRjI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZzCrMA0GCSqGSIb3DQEBCwUAA4IBAQB7+hORyrWwV751zrXgXnL9
74FsL/A88/vIFbQhpPPj1/5d4Hpy8AqZO08Kf493/xA3Q4lNi8IDDdE7OvSpAKma
6N+FIU6w+DFfCAvgMzTTJvnvH3Z2Ab338OQsK081VSfJY/B0WFQpeX60wXAMwzQ8
4h7K/RqTvjdMp6PNuyz32WG18OAlJ8xACtfhtiZ6ZIjNqoDzANQ9WJN13JPrQKWf
nSOKd7LEpyoSghWP23MrPQgsTMZgGb/XfKEARKoCx1kaNdax85SuRKXR+6oRq9Q0
SDyGaOxBZiS7wTiQfGJVixgLZNck2TcUG9bFUmW+a8KbrWt+XyDDryOoCa8hcF8x
-----END CERTIFICATE-----
Generated at Fri Mar 6 05:41:13 2026 by rpki-client