Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/DAFC71C295A211F1A947B6853C11F970.roa
File:                     DAFC71C295A211F1A947B6853C11F970.roa (raw, json)
Hash identifier:          04J6P9tuIgfYPWZmQA65tdwkUSwiJ047RCi17N2KFTc=
Subject key identifier:   E3:B0:F4:FE:15:B9:07:A9:1F:42:72:0E:C0:CA:A3:86:25:A3:CB:F2
Certificate issuer:       /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial:       D0
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/DAFC71C295A211F1A947B6853C11F970.roa
Signing time:             Tue 11 Aug 2026 16:36:52 +0000
ROA not before:           Tue 11 Aug 2026 16:36:52 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        103.82.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
                          rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
        Validity
            Not Before: Aug 11 16:36:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a7b4fa3-d89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:2c:0f:e1:58:32:a2:86:aa:1e:53:50:15:
                    a8:3e:f0:64:c1:c9:8e:e1:94:80:70:6e:09:0f:81:
                    0b:c0:fb:05:4d:cc:ba:26:e2:50:f4:ca:3d:0f:b6:
                    52:12:f9:73:ab:fd:de:78:4d:7b:a9:c1:50:e1:67:
                    2a:a9:08:65:7c:70:90:3c:e3:a8:1b:e1:df:5b:78:
                    99:7a:2f:f9:1d:da:42:56:a1:6e:b3:62:9a:13:4f:
                    b6:28:55:12:88:05:db:30:c6:4e:2c:5c:ed:2b:f1:
                    41:de:dc:13:fa:17:4d:f9:86:ba:c8:ba:7f:66:90:
                    10:29:bf:40:f7:41:cc:21:a0:c0:a9:84:25:e3:8b:
                    02:65:93:44:07:da:2b:dd:07:7a:32:ec:67:4c:1b:
                    1e:f4:a2:a0:00:22:ae:23:d3:c6:b3:87:db:ae:9d:
                    c8:0e:c7:35:af:55:97:e4:58:b8:10:87:51:d2:28:
                    36:0c:6a:32:0b:c9:18:f3:e7:2f:f2:b8:82:b1:10:
                    f8:aa:69:61:87:9a:1d:8d:c1:39:91:19:c4:ae:ef:
                    c8:de:c9:78:33:d0:98:bb:42:b1:37:04:f0:10:f9:
                    3c:49:e2:01:77:22:4a:71:60:0e:a0:6a:d7:10:e2:
                    7d:0e:56:8d:49:68:b5:14:9d:00:3e:d3:00:8a:6a:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B0:F4:FE:15:B9:07:A9:1F:42:72:0E:C0:CA:A3:86:25:A3:CB:F2
            X509v3 Authority Key Identifier:
                keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/DAFC71C295A211F1A947B6853C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:70:87:15:75:3c:28:d3:cd:4f:60:0b:42:24:3e:de:c9:7b:
         89:b9:23:39:a5:ac:fb:cf:2d:4b:11:d6:1e:61:cd:5b:93:56:
         f2:18:28:fb:13:fc:a6:99:9a:99:40:00:e8:14:b3:4b:00:9b:
         ae:3c:f5:95:05:86:42:bd:56:09:36:04:a3:c1:4e:61:32:73:
         2d:fe:cb:60:01:1a:c4:da:d7:80:5e:79:c7:14:9e:2c:a4:b9:
         ab:47:63:ac:a4:e7:36:19:26:5e:b6:79:1a:23:57:28:80:3a:
         36:2c:08:52:12:87:24:ed:c1:64:13:1b:fb:d2:61:f0:c2:d2:
         ee:08:b0:19:f6:df:09:96:b7:86:39:8f:38:ca:93:fa:48:0c:
         b6:2f:ff:bd:e1:5f:e2:8f:87:ee:5b:e5:d9:82:76:c1:6e:4a:
         c9:62:43:56:e9:e0:ad:70:b6:49:4a:37:46:f8:8a:fd:9d:17:
         22:16:53:59:a8:5a:43:9b:7d:14:4c:f9:02:bb:32:61:d8:f5:
         e6:58:28:89:f5:da:33:fa:c0:6c:26:38:13:5d:7c:33:35:24:
         26:1c:af:6c:5e:86:83:20:65:b8:b5:34:69:ff:0f:29:5f:1c:
         19:73:36:8e:9d:e0:d3:58:7b:e2:07:d6:db:da:f9:71:87:34:
         fc:3e:e6:a1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNFNEExMTAvBgNVBAUTKDU0MUREMTVFMTU0RTUwOEZCMDBGREIyNDVDNEU3NkYy
QUQzRDg4MUQwHhcNMjYwODExMTYzNjUyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdiNGZhMy1kODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArl0sD+FYMqKGqh5TUBWoPvBkwcmO4ZSAcG4JD4ELwPsFTcy6JuJQ9Mo9D7ZS
Evlzq/3eeE17qcFQ4WcqqQhlfHCQPOOoG+HfW3iZei/5HdpCVqFus2KaE0+2KFUS
iAXbMMZOLFztK/FB3twT+hdN+Ya6yLp/ZpAQKb9A90HMIaDAqYQl44sCZZNEB9or
3Qd6MuxnTBse9KKgACKuI9PGs4fbrp3IDsc1r1WX5Fi4EIdR0ig2DGoyC8kY8+cv
8riCsRD4qmlhh5odjcE5kRnEru/I3sl4M9CYu0KxNwTwEPk8SeIBdyJKcWAOoGrX
EOJ9DlaNSWi1FJ0APtMAimpVVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOOw9P4V
uQepH0JyDsDKo4Ylo8vyMB8GA1UdIwQYMBaAFFQd0V4VTlCPsA/bJFxOdvKtPYgd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0U0QS9FMUVBMTlGNjY3
MzgxMUYwQUQ1NjZEN0ZDNEY5QUUwMi9WQjNSWGhWT1VJLXdEOXNrWEU1MjhxMDlp
QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZCM1JYaFZPVUktd0Q5c2tYRTUyOHEwOWlCMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUNFNEEvRTFFQTE5RjY2NzM4MTFGMEFENTY2RDdGQzRGOUFFMDIvREFGQzcxQzI5
NUEyMTFGMUE5NDdCNjg1M0MxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1IQMA0GCSqGSIb3DQEBCwUAA4IBAQAVcIcVdTwo081PYAtCJD7e
yXuJuSM5paz7zy1LEdYeYc1bk1byGCj7E/ymmZqZQADoFLNLAJuuPPWVBYZCvVYJ
NgSjwU5hMnMt/stgARrE2teAXnnHFJ4spLmrR2OspOc2GSZetnkaI1cogDo2LAhS
Eock7cFkExv70mHwwtLuCLAZ9t8JlreGOY84ypP6SAy2L/+94V/ij4fuW+XZgnbB
bkrJYkNW6eCtcLZJSjdG+Ir9nRciFlNZqFpDm30UTPkCuzJh2PXmWCiJ9doz+sBs
JjgTXXwzNSQmHK9sXoaDIGW4tTRp/w8pXxwZczaOneDTWHviB9bb2vlxhzT8Puah
-----END CERTIFICATE-----
Generated at Mon Aug 24 03:36:31 2026 by rpki-client