Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/702A62CE9CC311EBA5A7A47BC4F9AE02.roa
File:                     702A62CE9CC311EBA5A7A47BC4F9AE02.roa (raw, json)
Hash identifier:          w6qFHPY18f2uu0A/E7Bmk+LTrJj/4AWZO+VT1lfOaAs=
Subject key identifier:   DE:A7:CD:FB:D6:D0:6D:50:8D:5F:D7:C6:10:4E:A1:E4:9A:5D:5F:70
Certificate issuer:       /CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
Certificate serial:       06DB
Authority key identifier: 1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/702A62CE9CC311EBA5A7A47BC4F9AE02.roa
Signing time:             Sat 16 May 2026 22:28:48 +0000
ROA not before:           Sat 16 May 2026 22:28:48 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142042
IP address blocks:        103.165.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl
                          rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158059, serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
        Validity
            Not Before: May 16 22:28:48 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a08efa0-b4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:7b:62:91:ae:86:ea:9d:69:6f:e1:0d:8d:
                    9c:67:42:91:be:46:8b:a0:44:f6:02:c3:e7:57:b2:
                    ab:0a:e1:94:b4:fa:a8:5d:23:fa:8d:de:77:1c:fa:
                    01:a5:0b:f1:a8:c5:69:62:42:2b:fc:07:07:97:1d:
                    22:b8:c1:52:61:07:a8:73:cd:80:70:10:c4:7a:52:
                    6e:0d:24:04:0e:3f:e9:19:5e:07:e4:17:fa:88:96:
                    27:18:2b:5e:dd:33:dd:3b:76:83:d3:33:c5:42:55:
                    1a:04:de:09:ea:d6:51:83:79:37:b6:90:31:f2:fa:
                    52:5c:27:1c:e1:25:57:8e:10:73:61:eb:0f:3b:fd:
                    be:2c:dd:69:8c:35:95:39:e8:83:92:dc:ae:8e:3a:
                    20:b3:17:c5:83:33:8c:a0:e8:1d:8c:c4:82:c4:0b:
                    fb:79:25:00:b8:38:ff:2a:73:04:8f:93:53:a6:05:
                    d3:e1:29:4e:ff:2d:a1:a5:bd:41:e8:6a:19:01:17:
                    2f:44:da:0c:1e:a6:df:5f:6b:1c:a2:f2:58:fd:8a:
                    25:3a:ce:64:9e:da:e3:85:cb:85:c5:50:ae:cc:a0:
                    78:9c:57:4c:50:57:ef:ac:d0:ad:a3:95:e6:41:8c:
                    1c:dc:b0:5f:ed:73:65:a9:e0:48:bf:34:99:b3:89:
                    5e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:CD:FB:D6:D0:6D:50:8D:5F:D7:C6:10:4E:A1:E4:9A:5D:5F:70
            X509v3 Authority Key Identifier:
                keyid:1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/702A62CE9CC311EBA5A7A47BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e5:a9:82:70:68:33:e8:44:17:97:2f:19:6e:8a:05:19:00:
         60:84:99:5c:a5:5b:b3:0f:a9:3d:f8:bd:d8:e2:cd:cf:ed:a9:
         db:61:3f:0f:f7:61:57:05:4a:07:e5:6b:11:0d:a2:73:eb:4c:
         6b:16:fa:a6:6a:5a:6b:d4:17:dc:fd:79:fe:6e:96:e6:43:e8:
         c5:8f:03:28:54:54:b8:06:ae:21:c0:e7:c8:79:cf:bc:72:a9:
         10:b2:64:f8:5e:f7:3c:01:13:39:60:17:d9:13:45:09:c1:8d:
         d1:f3:cf:69:32:7c:42:9c:73:42:43:b9:c5:7c:0e:ee:03:f8:
         9e:50:ff:8b:56:a7:e7:ab:89:2f:28:56:78:c3:65:ed:45:25:
         64:08:a3:7f:91:33:d7:f4:bc:b4:44:6d:c2:24:68:88:18:1f:
         df:4e:d5:3f:0c:8d:4c:99:3e:3e:cf:26:01:61:34:05:2b:a0:
         62:0e:7f:95:79:7c:ba:43:e6:97:20:e9:9a:c4:97:85:50:4c:
         04:ca:92:dd:11:22:e1:16:e9:57:7e:27:f8:1e:af:9d:38:ff:
         7b:b6:ca:02:e2:b1:e4:9a:8e:a3:7c:9d:8b:7b:a9:09:e0:d4:
         b6:72:3f:d0:57:6b:c4:2d:a1:9a:23:46:6d:50:e2:a5:d0:7a:
         b5:75:56:6f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTgwNTkxMTAvBgNVBAUTKDFGNzZBNjk0NDQyQ0FCNDNEN0QxN0NENkZERjlBOTdF
MEI3RkFBOEUwHhcNMjYwNTE2MjIyODQ4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTA4ZWZhMC1iNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshN7YpGuhuqdaW/hDY2cZ0KRvkaLoET2AsPnV7KrCuGUtPqoXSP6jd53HPoB
pQvxqMVpYkIr/AcHlx0iuMFSYQeoc82AcBDEelJuDSQEDj/pGV4H5Bf6iJYnGCte
3TPdO3aD0zPFQlUaBN4J6tZRg3k3tpAx8vpSXCcc4SVXjhBzYesPO/2+LN1pjDWV
OeiDktyujjogsxfFgzOMoOgdjMSCxAv7eSUAuDj/KnMEj5NTpgXT4SlO/y2hpb1B
6GoZARcvRNoMHqbfX2scovJY/YolOs5kntrjhcuFxVCuzKB4nFdMUFfvrNCto5Xm
QYwc3LBf7XNlqeBIvzSZs4letwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN6nzfvW
0G1QjV/XxhBOoeSaXV9wMB8GA1UdIwQYMBaAFB92ppRELKtD19F81v35qX4Lf6qO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODA1OS9CQkQ4MURBODlD
QzExMUVCQkZERTY1NzlDNEY5QUUwMi9IM2FtbEVRc3EwUFgwWHpXX2ZtcGZndF9x
bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0gzYW1sRVFzcTBQWDBYeldfZm1wZmd0X3FvNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTgwNTkvQkJEODFEQTg5Q0MxMTFFQkJGREU2NTc5QzRGOUFFMDIvNzAyQTYyQ0U5
Q0MzMTFFQkE1QTdBNDdCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6VhMA0GCSqGSIb3DQEBCwUAA4IBAQB45amCcGgz6EQXly8ZbooF
GQBghJlcpVuzD6k9+L3Y4s3P7anbYT8P92FXBUoH5WsRDaJz60xrFvqmalpr1Bfc
/Xn+bpbmQ+jFjwMoVFS4Bq4hwOfIec+8cqkQsmT4Xvc8ARM5YBfZE0UJwY3R889p
MnxCnHNCQ7nFfA7uA/ieUP+LVqfnq4kvKFZ4w2XtRSVkCKN/kTPX9Ly0RG3CJGiI
GB/fTtU/DI1MmT4+zyYBYTQFK6BiDn+VeXy6Q+aXIOmaxJeFUEwEypLdESLhFulX
fif4Hq+dOP97tsoC4rHkmo6jfJ2Le6kJ4NS2cj/QV2vELaGaI0ZtUOKl0Hq1dVZv
-----END CERTIFICATE-----
Generated at Thu May 21 11:14:59 2026 by rpki-client