Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/24C95396C48F11F084A49D1CC4F9AE02.roa
File:                     24C95396C48F11F084A49D1CC4F9AE02.roa (raw, json)
Hash identifier:          hiKcY851CfuMn8BaynhC+6ojKRlGFYOlK+ORHgJ99DA=
Subject key identifier:   79:E5:01:58:D4:13:4A:A6:4A:BE:60:1C:0F:8B:B6:65:FC:00:77:F5
Certificate issuer:       /CN=A914597C/serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
Certificate serial:       0232
Authority key identifier: 57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/24C95396C48F11F084A49D1CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:27:47 +0000
ROA not before:           Tue 18 Nov 2025 14:59:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     212238
IP address blocks:        103.171.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl
                          rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 01:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914597C, serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
        Validity
            Not Before: Nov 18 14:59:13 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3ea73-28b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:76:9d:8a:4b:f2:f1:bf:38:fc:b4:c2:51:
                    4b:94:4d:f9:6d:4f:d3:f3:fb:86:49:73:5f:bf:f3:
                    2b:cc:cf:89:bb:83:26:8c:09:e0:91:fc:81:6e:0e:
                    10:e9:be:d5:22:a5:ed:39:ad:63:e3:02:ea:80:bf:
                    af:9b:cf:5a:4b:46:7b:49:36:38:bc:34:83:b1:80:
                    dc:32:b1:2c:c0:3a:3d:de:9e:69:f6:68:f8:0a:b7:
                    eb:4f:f4:a2:e9:5e:94:3b:74:34:bc:9f:6d:c9:a5:
                    c6:7d:d2:aa:db:4c:2c:27:0a:24:18:7f:18:43:d5:
                    39:dc:ef:c5:23:e8:50:72:30:2a:87:b9:86:11:11:
                    28:96:1e:99:8e:c0:83:58:b4:42:63:50:77:45:cc:
                    ea:cf:fd:df:72:ff:e1:69:9b:b3:f6:bd:e2:58:47:
                    c2:3a:f2:53:ab:de:9d:90:9f:bd:b3:b7:27:b9:75:
                    d8:3e:ab:56:98:36:fa:b2:27:81:c2:de:e1:6c:b3:
                    aa:c4:5b:2f:31:b9:d0:b7:70:93:f9:34:39:8f:40:
                    8e:26:28:48:0e:5b:e0:34:b6:fe:0e:45:d7:fc:e5:
                    8c:e6:f2:17:c4:69:95:5f:b0:5f:1e:d7:96:0d:7f:
                    2b:1a:df:d2:3b:0a:f3:87:e7:93:e1:20:e3:d1:86:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:01:58:D4:13:4A:A6:4A:BE:60:1C:0F:8B:B6:65:FC:00:77:F5
            X509v3 Authority Key Identifier:
                keyid:57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/24C95396C48F11F084A49D1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:21:e0:24:ae:e4:8a:eb:00:ce:95:c0:c0:71:d6:f3:be:39:
         57:41:ee:26:0d:c7:50:f6:53:f8:f6:04:3e:35:10:fe:52:53:
         3b:43:b8:51:db:c9:60:68:6a:6a:bc:b3:1f:4f:ba:1e:c6:15:
         fb:37:06:fb:ad:77:4a:fe:a3:ff:5d:2d:96:b6:a9:a0:a9:c1:
         e0:e5:fd:9a:9f:c9:d9:4f:95:33:6b:cc:6c:0c:33:e8:f2:af:
         de:4f:18:cf:d1:69:0c:26:1b:70:a7:6a:be:a0:3a:e8:23:c9:
         2e:3d:e2:bb:de:fa:63:e9:88:52:56:af:a2:5e:ca:58:a7:e4:
         f0:c9:c6:d4:3b:04:4a:c0:23:87:22:6b:6a:76:4e:9b:01:bb:
         53:32:40:44:a8:1e:23:80:a8:a1:ae:79:2a:08:bd:a6:cf:76:
         88:88:c3:30:4c:99:e2:9b:dc:25:7f:7c:a7:c7:f3:b5:88:db:
         e6:71:d7:ee:e9:ae:9d:41:55:6f:e0:3e:6a:a7:24:e9:bf:b9:
         67:32:a5:8a:30:f5:8d:14:c2:b9:90:e0:84:48:bf:e1:4d:8a:
         9a:13:fd:ae:b5:fd:99:d7:e6:15:80:d2:45:ff:03:5d:92:9a:
         3b:0b:8f:7e:6c:8e:15:06:73:88:18:ed:a8:a0:c5:a4:51:49:
         49:fb:30:88
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU5N0MxMTAvBgNVBAUTKDU3MDc0MTYyN0ZFN0NGRDU5NEVBMkY3RjQ0OTYxNkI3
N0MyQUM4NDIwHhcNMjUxMTE4MTQ1OTEzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWE3My0yOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvzx2nYpL8vG/OPy0wlFLlE35bU/T8/uGSXNfv/MrzM+Ju4MmjAngkfyBbg4Q
6b7VIqXtOa1j4wLqgL+vm89aS0Z7STY4vDSDsYDcMrEswDo93p5p9mj4CrfrT/Si
6V6UO3Q0vJ9tyaXGfdKq20wsJwokGH8YQ9U53O/FI+hQcjAqh7mGEREolh6ZjsCD
WLRCY1B3Rczqz/3fcv/haZuz9r3iWEfCOvJTq96dkJ+9s7cnuXXYPqtWmDb6sieB
wt7hbLOqxFsvMbnQt3CT+TQ5j0COJihIDlvgNLb+DkXX/OWM5vIXxGmVX7BfHteW
DX8rGt/SOwrzh+eT4SDj0Yb/HQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHnlAVjU
E0qmSr5gHA+LtmX8AHf1MB8GA1UdIwQYMBaAFFcHQWJ/58/VlOovf0SWFrd8KshC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTk3Qy82M0ZGQjU2MEI5
MkUxMUVEOUNFRUYyMURDNEY5QUUwMi9Wd2RCWW5fbno5V1U2aTlfUkpZV3Qzd3F5
RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Z3ZEJZbl9uejlXVTZpOV9SSllXdDN3cXlFSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDU5N0MvNjNGRkI1NjBCOTJFMTFFRDlDRUVGMjFEQzRGOUFFMDIvMjRDOTUzOTZD
NDhGMTFGMDg0QTQ5RDFDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6t7MA0GCSqGSIb3DQEBCwUAA4IBAQAVIeAkruSK6wDOlcDAcdbz
vjlXQe4mDcdQ9lP49gQ+NRD+UlM7Q7hR28lgaGpqvLMfT7oexhX7Nwb7rXdK/qP/
XS2WtqmgqcHg5f2an8nZT5Uza8xsDDPo8q/eTxjP0WkMJhtwp2q+oDroI8kuPeK7
3vpj6YhSVq+iXspYp+TwycbUOwRKwCOHImtqdk6bAbtTMkBEqB4jgKihrnkqCL2m
z3aIiMMwTJnim9wlf3ynx/O1iNvmcdfu6a6dQVVv4D5qpyTpv7lnMqWKMPWNFMK5
kOCESL/hTYqaE/2utf2Z1+YVgNJF/wNdkpo7C49+bI4VBnOIGO2ooMWkUUlJ+zCI
-----END CERTIFICATE-----
Generated at Sat Mar 21 06:44:06 2026 by rpki-client