Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa
File:                     A17C3508168911EFBF38F580C4F9AE02.roa (raw, json)
Hash identifier:          sy22vtii4K2errt2UOSSRnhaS+2ZGSF4IEAlJ6QMyT8=
Subject key identifier:   52:B4:15:B2:30:67:44:C3:00:B6:06:27:50:9F:60:7A:FF:49:59:AF
Certificate issuer:       /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial:       01B9
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:01:13 +0000
ROA not before:           Sat 21 Jun 2025 04:33:29 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     400619
IP address blocks:        14.192.4.0/23 maxlen: 24
                          14.192.6.0/23 maxlen: 24
                          43.224.224.0/22 maxlen: 24
                          103.215.77.0/24 maxlen: 24
                          103.215.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
        Validity
            Not Before: Jun 21 04:33:29 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a59828-a8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:50:ae:92:d4:a0:ae:f2:02:62:b2:df:f0:
                    cd:21:74:74:a9:1a:f5:23:59:0b:9d:db:5a:c0:1a:
                    ef:c8:5b:aa:95:d3:f2:a2:36:98:7f:37:e1:af:94:
                    a9:ad:87:8d:d6:87:45:8d:00:1c:cb:8b:57:ed:28:
                    ae:5f:d0:0b:8f:0c:88:d8:3b:5a:f4:d1:ea:83:c2:
                    54:90:00:11:79:14:62:71:74:0a:85:6f:0a:4f:a3:
                    4c:e3:9f:99:cf:e7:0d:3c:e3:6f:5b:87:36:2d:8a:
                    b6:ad:02:72:0c:93:c1:41:ca:f8:ed:4a:cf:1d:0c:
                    53:9b:5c:c1:38:8a:0d:e5:bd:f8:9e:75:57:40:29:
                    3d:26:17:76:dd:96:9a:1c:6e:50:08:4f:d0:3d:99:
                    c8:c3:f0:de:f3:6d:c7:a1:5c:46:0b:07:df:ee:c6:
                    ea:cc:d3:9a:be:0c:5e:62:5a:de:de:8d:e5:09:6e:
                    0d:39:4e:99:46:09:7d:31:5b:1a:63:e7:0f:15:38:
                    de:c4:11:f7:71:0a:77:55:09:ea:ff:94:3b:57:b8:
                    28:88:70:50:a5:7f:3c:fb:9e:de:68:49:4f:91:59:
                    92:a4:e7:1f:2d:71:79:0f:50:f1:31:83:8d:e1:89:
                    73:5a:3d:c1:bf:18:a3:5b:34:91:0d:b5:8f:a1:a7:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B4:15:B2:30:67:44:C3:00:B6:06:27:50:9F:60:7A:FF:49:59:AF
            X509v3 Authority Key Identifier:
                keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.4.0/22
                  43.224.224.0/22
                  103.215.77.0-103.215.78.255

    Signature Algorithm: sha256WithRSAEncryption
         05:f0:88:80:20:22:fc:55:9e:89:8a:8c:74:f1:2d:f4:61:cb:
         d2:39:e9:bd:e7:75:40:0d:d1:82:4c:25:38:54:b8:a4:78:aa:
         2e:bb:89:f8:6f:ab:fa:f5:ce:f8:2d:c8:b2:a1:a7:cf:bd:83:
         22:85:d8:37:bb:a9:16:5c:d1:a5:13:f0:50:cb:5c:79:32:bb:
         11:c3:74:1b:04:01:15:6b:1f:18:97:e5:d1:67:6e:3c:3c:9e:
         93:b9:d3:ce:49:8e:e9:7e:75:a7:f0:34:62:c0:5f:2c:f0:70:
         4f:f3:fc:ef:b4:66:83:c8:75:0f:e4:6a:1a:e0:9a:10:71:79:
         8c:9b:ef:65:2c:d3:e0:7d:b3:f4:ca:3d:b2:5f:f4:52:7b:a5:
         ba:0d:0e:58:fd:06:22:55:8e:8e:53:c8:76:ce:19:81:91:ec:
         b0:cb:6c:f8:fd:4c:cc:9e:d4:9b:83:fb:c9:19:84:90:6b:f5:
         68:70:e1:f9:aa:9b:ec:75:a5:c9:3f:45:a2:48:cc:fe:fa:d7:
         7e:2c:2e:91:60:ea:a1:f8:25:53:22:cb:50:2d:bf:b6:2e:f3:
         06:49:b1:eb:d7:e3:89:05:28:a7:d3:58:e2:41:85:f0:c1:17:
         3a:b4:30:c9:f7:d2:bc:82:99:f1:66:03:3b:41:11:b0:0d:9e:
         77:23:14:16
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2
Mjc1QjZBNTUwHhcNMjUwNjIxMDQzMzI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTgyOC1hOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtthQrpLUoK7yAmKy3/DNIXR0qRr1I1kLndtawBrvyFuqldPyojaYfzfhr5Sp
rYeN1odFjQAcy4tX7SiuX9ALjwyI2Dta9NHqg8JUkAAReRRicXQKhW8KT6NM45+Z
z+cNPONvW4c2LYq2rQJyDJPBQcr47UrPHQxTm1zBOIoN5b34nnVXQCk9Jhd23Zaa
HG5QCE/QPZnIw/De823HoVxGCwff7sbqzNOavgxeYlre3o3lCW4NOU6ZRgl9MVsa
Y+cPFTjexBH3cQp3VQnq/5Q7V7goiHBQpX88+57eaElPkVmSpOcfLXF5D1DxMYON
4YlzWj3BvxijWzSRDbWPoaeJBwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFFK0FbIw
Z0TDALYGJ1CfYHr/SVmvMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB
NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY1MzUvNjlBNTgwNzhCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvQTE3QzM1MDgx
Njg5MTFFRkJGMzhGNTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaAwQCDsAEAwQCK+DgMAwDBABn100DBABn104wDQYJKoZIhvcNAQELBQAD
ggEBAAXwiIAgIvxVnomKjHTxLfRhy9I56b3ndUAN0YJMJThUuKR4qi67ifhvq/r1
zvgtyLKhp8+9gyKF2De7qRZc0aUT8FDLXHkyuxHDdBsEARVrHxiX5dFnbjw8npO5
085Jjul+dafwNGLAXyzwcE/z/O+0ZoPIdQ/kahrgmhBxeYyb72Us0+B9s/TKPbJf
9FJ7pboNDlj9BiJVjo5TyHbOGYGR7LDLbPj9TMye1JuD+8kZhJBr9Whw4fmqm+x1
pck/RaJIzP76134sLpFg6qH4JVMiy1Atv7Yu8wZJsevX44kFKKfTWOJBhfDBFzq0
MMn30ryCmfFmAztBEbANnncjFBY=
-----END CERTIFICATE-----
Generated at Sat Mar 21 20:04:58 2026 by rpki-client