Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/479B58B21EC111EF9258717EC4F9AE02.roa
File:                     479B58B21EC111EF9258717EC4F9AE02.roa (raw, json)
Hash identifier:          QRkcZsDgIJjnFNUASfY5VIlKLs39JH6eip+JITXFwy0=
Subject key identifier:   35:73:4A:1F:18:E7:D0:39:C1:1F:45:12:BD:8B:6F:98:6E:B0:0E:AB
Certificate issuer:       /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial:       015E
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/479B58B21EC111EF9258717EC4F9AE02.roa
Signing time:             Wed 11 Mar 2026 04:39:29 +0000
ROA not before:           Wed 11 Mar 2026 04:39:29 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     4049
IP address blocks:        103.108.176.0/24 maxlen: 24
                          2001:df4:1300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
                          rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
        Validity
            Not Before: Mar 11 04:39:29 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b0f200-7816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:6c:65:8f:5a:d1:b8:90:da:72:e5:47:74:
                    04:a9:dd:92:38:ee:07:b8:07:c8:f0:a2:d4:b5:e4:
                    cf:e4:6d:c5:32:a5:7b:c7:4f:01:43:9d:73:5d:54:
                    ea:52:9c:a7:c0:1d:37:c3:ae:96:b7:f9:8f:38:2c:
                    7f:e1:d0:77:9f:e2:fa:d6:88:b8:5b:3f:5d:2f:c5:
                    a3:57:ba:51:98:63:cd:91:2f:6d:7b:6f:88:b2:e3:
                    ce:78:b2:c7:f2:c1:fa:35:4a:a4:5c:a5:b9:83:ea:
                    a3:e3:12:3e:9f:10:f6:10:64:a8:b5:3a:e3:73:7b:
                    dd:75:ea:1f:78:0d:4e:56:44:f5:74:44:da:9e:79:
                    96:b4:b2:4b:8a:38:21:46:9a:cc:87:c7:10:d4:bb:
                    1c:5a:d2:8b:f3:f2:7d:18:c1:d6:5f:f9:67:1e:ed:
                    dd:6d:75:d3:75:fe:4c:7e:f4:65:5d:0c:00:5e:e1:
                    74:96:ae:1e:f9:6d:b0:ce:7c:83:8c:52:ca:48:80:
                    2d:22:00:72:d0:85:ed:7d:11:c3:35:ec:6e:df:a8:
                    b2:ee:d2:5d:db:5d:19:1f:74:74:ab:8f:da:8e:15:
                    b4:cf:1a:e1:bc:ef:7a:b0:74:e6:e7:5d:7f:4d:0a:
                    a8:ab:84:c3:96:91:b8:5a:8c:d3:ed:73:6b:2f:69:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:73:4A:1F:18:E7:D0:39:C1:1F:45:12:BD:8B:6F:98:6E:B0:0E:AB
            X509v3 Authority Key Identifier:
                keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/479B58B21EC111EF9258717EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.176.0/24
                IPv6:
                  2001:df4:1300::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:66:02:8d:3f:2c:40:82:c8:ac:5a:b3:3c:78:36:90:c1:29:
         27:ce:fa:32:75:05:d9:06:0c:a2:c2:c6:cb:a1:14:ff:54:ac:
         a5:f1:1c:49:1e:dd:1a:36:15:51:df:19:e1:d6:5d:06:36:ef:
         e0:12:82:2b:b5:9c:5e:5e:e3:48:77:57:f7:55:15:2d:49:ee:
         93:80:27:b4:c7:da:90:cc:ab:09:cf:d0:35:34:f0:45:28:9e:
         3b:11:3e:a6:3a:40:92:bf:79:f0:56:7b:4c:c1:e2:32:75:e1:
         47:a3:89:f3:88:31:49:96:c6:72:b5:cc:6f:e4:01:5b:a0:a6:
         ca:9e:1b:51:8d:a3:7f:77:97:13:a8:91:0a:ad:95:47:74:0b:
         24:86:2a:85:e3:d2:7c:a1:fd:a7:3c:9e:3b:d9:03:98:b8:12:
         f1:2b:32:47:23:d8:35:f5:84:8a:0c:ae:49:07:50:34:d8:e5:
         03:a5:05:0a:64:2e:77:60:53:70:b1:af:53:16:e1:86:c0:0c:
         71:42:4b:31:b8:0f:3e:5b:44:74:2b:f9:06:3b:fd:5c:ca:1b:
         43:11:c2:97:10:fc:3f:d1:e1:c2:c7:60:8c:23:e2:4a:79:d3:
         dd:c8:32:ae:60:ff:07:e5:0e:0b:13:a5:bf:37:5d:00:cf:4b:
         a8:d5:6e:8e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJCMTMxMTAvBgNVBAUTKEE3Q0VGQzE3MDBBNEUxODQ2NjI1MDhDNzgxNUY3RUIx
RDAxMjlFQkUwHhcNMjYwMzExMDQzOTI5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIwZjIwMC03ODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoNxsZY9a0biQ2nLlR3QEqd2SOO4HuAfI8KLUteTP5G3FMqV7x08BQ51zXVTq
UpynwB03w66Wt/mPOCx/4dB3n+L61oi4Wz9dL8WjV7pRmGPNkS9te2+IsuPOeLLH
8sH6NUqkXKW5g+qj4xI+nxD2EGSotTrjc3vddeofeA1OVkT1dETannmWtLJLijgh
RprMh8cQ1LscWtKL8/J9GMHWX/lnHu3dbXXTdf5MfvRlXQwAXuF0lq4e+W2wznyD
jFLKSIAtIgBy0IXtfRHDNexu36iy7tJd210ZH3R0q4/ajhW0zxrhvO96sHTm511/
TQqoq4TDlpG4WozT7XNrL2lonwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDVzSh8Y
59A5wR9FEr2Lb5husA6rMB8GA1UdIwQYMBaAFKfO/BcApOGEZiUIx4FffrHQEp6+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkIxMy9EQzQ4M0YzMDFF
QzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZUm1KUWpIZ1Y5LXNkQVNu
cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A4NzhGd0NrNFlSbUpRakhnVjktc2RBU25yNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTJCMTMvREM0ODNGMzAxRUMwMTFFRjk2Mjk0MjdEQzRGOUFFMDIvNDc5QjU4QjIx
RUMxMTFFRjkyNTg3MTdFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ2ywMA8EAgACMAkDBwAgAQ30EwAwDQYJKoZIhvcNAQELBQADggEB
AAxmAo0/LECCyKxaszx4NpDBKSfO+jJ1BdkGDKLCxsuhFP9UrKXxHEke3Ro2FVHf
GeHWXQY27+ASgiu1nF5e40h3V/dVFS1J7pOAJ7TH2pDMqwnP0DU08EUonjsRPqY6
QJK/efBWe0zB4jJ14UejifOIMUmWxnK1zG/kAVugpsqeG1GNo393lxOokQqtlUd0
CySGKoXj0nyh/ac8njvZA5i4EvErMkcj2DX1hIoMrkkHUDTY5QOlBQpkLndgU3Cx
r1MW4YbADHFCSzG4Dz5bRHQr+QY7/VzKG0MRwpcQ/D/R4cLHYIwj4kp5093IMq5g
/wflDgsTpb83XQDPS6jVbo4=
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:12:31 2026 by rpki-client