Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/4720F676475C11EFBDD52F42C4F9AE02.roa
File:                     4720F676475C11EFBDD52F42C4F9AE02.roa (raw, json)
Hash identifier:          GRvXl5JsPQ8XtEXVjVcL/KEzVXxTjUtnzIRy1lttNnI=
Subject key identifier:   1E:F5:C9:85:D0:C5:A3:3A:53:48:81:42:71:78:CE:C6:D7:CB:71:86
Certificate issuer:       /CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
Certificate serial:       06E3
Authority key identifier: 48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/4720F676475C11EFBDD52F42C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:34:28 +0000
ROA not before:           Mon 28 Apr 2025 23:34:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     46829
IP address blocks:        103.165.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl
                          rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 21:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763 (0x6e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C449, serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
        Validity
            Not Before: Apr 28 23:34:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a43254-47ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c3:22:c5:03:6a:2c:61:ad:1b:50:db:7c:07:
                    48:4a:35:d3:ab:7f:fd:90:4b:6c:c9:4b:1c:44:a9:
                    ed:72:b6:2a:93:fc:60:ab:9a:57:11:00:ef:99:14:
                    f2:af:e0:4a:29:1f:81:fd:5c:e2:97:4c:01:97:ba:
                    ff:0d:0b:f7:89:73:e9:85:d2:05:9f:59:bb:89:65:
                    9f:d6:98:b3:70:57:82:27:78:b9:12:57:ed:eb:51:
                    47:ed:1d:34:34:cb:b2:47:85:50:82:16:66:02:bb:
                    b7:be:f1:c9:dd:70:1b:8b:27:f9:a9:85:3b:56:e3:
                    35:fe:9a:02:f8:76:18:60:29:26:02:4f:e1:f7:93:
                    c0:ef:df:46:3c:7a:3a:36:34:40:cc:a5:3a:55:eb:
                    a5:4c:7b:fb:b9:50:49:91:5f:66:ad:07:4c:62:f3:
                    3f:a3:2d:ee:3a:47:b5:9c:67:de:32:65:c4:f8:c9:
                    9b:d7:11:bc:39:ec:75:b6:03:79:a5:74:6a:1b:b4:
                    c8:55:c7:76:52:dd:18:c7:a8:c4:86:89:fd:c0:7e:
                    87:43:9a:af:51:3d:a2:3c:55:cb:84:73:36:14:ae:
                    72:ba:ef:89:0b:ec:c7:db:cd:46:32:90:64:c3:da:
                    23:19:bb:52:02:21:ce:93:a8:a9:7f:ed:5d:d1:3b:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F5:C9:85:D0:C5:A3:3A:53:48:81:42:71:78:CE:C6:D7:CB:71:86
            X509v3 Authority Key Identifier:
                keyid:48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/4720F676475C11EFBDD52F42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:6e:51:ab:89:5d:6a:e8:53:09:ba:3a:51:87:8d:b8:d7:42:
         d2:b7:11:a4:98:8c:59:f9:db:b2:3c:b0:ae:c9:68:e2:dd:21:
         97:55:10:02:d0:78:e7:1a:06:6e:8f:f4:5f:31:3e:b7:55:98:
         c3:b4:ff:5c:37:37:f8:58:94:fb:c4:bf:8a:a6:55:de:78:cd:
         be:99:00:e1:e1:5a:52:c8:99:6e:92:4f:fd:c8:04:66:8e:b4:
         59:c0:2a:be:e3:d3:b4:77:38:63:4d:93:61:99:22:35:56:33:
         50:7d:dd:1f:6f:b4:c1:fc:8a:a5:71:e2:f6:04:6b:3a:c2:6f:
         38:73:51:5b:1b:73:4e:ba:db:89:c4:d2:5a:9d:39:4a:62:fb:
         20:a8:c9:67:46:a0:1c:57:2a:99:84:d3:8f:a6:d5:5f:62:a1:
         17:b2:79:c4:29:58:c5:99:bb:1c:74:98:1a:53:dd:3c:d1:24:
         5f:c5:de:4c:ac:15:fa:b5:42:1a:9b:cb:3b:5c:8b:2a:44:64:
         94:d7:dc:76:0a:22:eb:7b:c9:50:dd:24:ae:f6:cf:db:d0:83:
         6c:2a:34:ba:e3:43:60:f4:b9:99:6e:47:a4:a6:cb:f1:22:aa:
         90:8c:93:9b:49:51:92:f9:87:f9:af:69:e2:6f:94:b4:00:b1:
         d7:81:8d:64
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM0NDkxMTAvBgNVBAUTKDQ4NEVCRjMzNzUwQjIxQ0FGMDI4RDBDRTIxOUI5NDYx
RDFGQkFBNjYwHhcNMjUwNDI4MjMzNDMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzI1NC00N2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8sMixQNqLGGtG1DbfAdISjXTq3/9kEtsyUscRKntcrYqk/xgq5pXEQDvmRTy
r+BKKR+B/Vzil0wBl7r/DQv3iXPphdIFn1m7iWWf1pizcFeCJ3i5Elft61FH7R00
NMuyR4VQghZmAru3vvHJ3XAbiyf5qYU7VuM1/poC+HYYYCkmAk/h95PA799GPHo6
NjRAzKU6VeulTHv7uVBJkV9mrQdMYvM/oy3uOke1nGfeMmXE+Mmb1xG8Oex1tgN5
pXRqG7TIVcd2Ut0Yx6jEhon9wH6HQ5qvUT2iPFXLhHM2FK5yuu+JC+zH281GMpBk
w9ojGbtSAiHOk6ipf+1d0TvW7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB71yYXQ
xaM6U0iBQnF4zsbXy3GGMB8GA1UdIwQYMBaAFEhOvzN1CyHK8CjQziGblGHR+6pm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ0OS81OEVBNDhFQTlE
RDYxMUVCOTJDRjM3MTRDNEY5QUUwMi9TRTZfTTNVTEljcndLTkRPSVp1VVlkSDdx
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NFNl9NM1VMSWNyd0tORE9JWnVVWWRIN3FtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUM0NDkvNThFQTQ4RUE5REQ2MTFFQjkyQ0YzNzE0QzRGOUFFMDIvNDcyMEY2NzY0
NzVDMTFFRkJERDUyRjQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6VVMA0GCSqGSIb3DQEBCwUAA4IBAQB1blGriV1q6FMJujpRh424
10LStxGkmIxZ+duyPLCuyWji3SGXVRAC0HjnGgZuj/RfMT63VZjDtP9cNzf4WJT7
xL+KplXeeM2+mQDh4VpSyJlukk/9yARmjrRZwCq+49O0dzhjTZNhmSI1VjNQfd0f
b7TB/IqlceL2BGs6wm84c1FbG3NOutuJxNJanTlKYvsgqMlnRqAcVyqZhNOPptVf
YqEXsnnEKVjFmbscdJgaU9080SRfxd5MrBX6tUIam8s7XIsqRGSU19x2CiLre8lQ
3SSu9s/b0INsKjS640Ng9LmZbkekpsvxIqqQjJObSVGS+Yf5r2nib5S0ALHXgY1k
-----END CERTIFICATE-----
Generated at Sun Mar 22 01:55:48 2026 by rpki-client