Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B1C90C7A20EC11EF964FFE2CC4F9AE02.roa
File:                     B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (raw, json)
Hash identifier:          GMAvWxN7LqaBOKvtkjWDIMlqwj7hC5qzX6WxN7KtnZg=
Subject key identifier:   67:63:97:AB:79:0F:07:11:4F:9F:7E:82:61:38:A0:8B:74:3B:4E:80
Certificate issuer:       /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial:       06CC
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B1C90C7A20EC11EF964FFE2CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:31:46 +0000
ROA not before:           Mon 04 Aug 2025 23:35:20 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134365
IP address blocks:        103.117.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
                          rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 21:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
        Validity
            Not Before: Aug  4 23:35:20 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59142-49e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:ce:18:b6:e4:17:99:b5:e8:a3:5b:0f:00:
                    b1:e9:70:7e:e8:23:9d:51:6a:d4:fd:cf:f5:d2:76:
                    8c:2c:b1:69:c9:a8:cf:0a:96:c0:69:08:70:24:57:
                    d9:a0:6f:92:7f:7a:05:9f:ef:13:b2:6f:e6:39:87:
                    8d:a8:3a:35:41:43:7b:2d:7d:58:19:03:09:8b:8a:
                    7d:79:36:bb:7e:87:c9:c2:61:49:ec:45:8c:14:1d:
                    6f:e9:26:c2:40:fe:31:31:b1:bf:31:0b:fd:58:d8:
                    2a:03:19:8c:c1:f7:e1:04:66:de:bf:e9:20:42:71:
                    dd:c2:82:3c:14:c9:bc:e6:d4:31:04:43:eb:fe:03:
                    8c:5d:c1:f3:cf:fd:e2:26:91:71:3b:cb:44:bc:71:
                    a5:f1:65:f0:72:0c:51:1d:b9:07:a9:ca:0e:a2:3b:
                    73:98:f2:18:89:c0:ce:b8:1e:39:3d:cb:60:21:05:
                    eb:0d:7b:c9:1e:76:e3:8d:97:11:63:86:58:d0:c4:
                    0e:92:d9:e4:22:ef:1d:05:f3:ef:03:55:a8:56:62:
                    ea:42:c2:6b:e5:c7:e4:ec:5d:49:97:d2:ef:bd:cb:
                    e1:f0:f3:38:74:9b:ce:c0:62:a4:6f:67:2e:1c:22:
                    0b:d7:a1:66:46:0d:94:9c:3f:2f:0f:74:a7:78:25:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:63:97:AB:79:0F:07:11:4F:9F:7E:82:61:38:A0:8B:74:3B:4E:80
            X509v3 Authority Key Identifier:
                keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/B1C90C7A20EC11EF964FFE2CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:2d:f7:c9:ae:52:57:33:01:38:69:fe:99:86:e2:ba:0c:fc:
         0e:d5:bd:7c:2c:cd:19:30:93:bf:eb:98:0f:fb:ec:18:cf:a7:
         98:3b:c5:49:a1:b5:b3:76:20:5f:09:36:0f:78:04:60:d0:21:
         b7:61:b6:1d:75:dd:4f:7c:38:25:53:e5:91:21:2b:89:40:f4:
         4b:e6:e8:8f:7d:52:82:8d:ba:76:b8:c7:82:14:88:8b:8a:71:
         ae:d8:de:84:8c:47:4d:ad:20:58:8d:fd:55:21:88:dd:25:5f:
         c4:5c:69:7d:61:81:ee:54:b3:f4:c8:25:da:a5:6a:47:26:3a:
         2c:85:48:5b:79:01:ff:6d:37:a6:d8:d6:d1:97:04:5c:5d:42:
         d3:8d:16:aa:7c:cb:8c:a7:a2:31:42:ea:73:f0:b4:59:eb:f3:
         ed:4b:2c:00:e1:10:81:d7:b7:fe:8f:09:bf:77:d4:f7:31:bb:
         86:45:e1:51:42:e3:b8:ab:75:7c:bc:e2:67:e8:95:76:4a:df:
         a7:ff:a9:7f:97:12:2e:41:85:79:ff:8d:c8:f8:27:37:d8:2d:
         24:72:16:b2:f3:05:84:ac:a6:ff:f1:a5:d9:34:81:ff:fa:6b:
         8c:48:34:59:63:3e:56:81:21:49:d8:1d:29:97:4f:8f:c4:4d:
         59:97:2a:5b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz
MzIwODJDNTkwHhcNMjUwODA0MjMzNTIwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTE0Mi00OWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoyfOGLbkF5m16KNbDwCx6XB+6COdUWrU/c/10naMLLFpyajPCpbAaQhwJFfZ
oG+Sf3oFn+8Tsm/mOYeNqDo1QUN7LX1YGQMJi4p9eTa7fofJwmFJ7EWMFB1v6SbC
QP4xMbG/MQv9WNgqAxmMwffhBGbev+kgQnHdwoI8FMm85tQxBEPr/gOMXcHzz/3i
JpFxO8tEvHGl8WXwcgxRHbkHqcoOojtzmPIYicDOuB45PctgIQXrDXvJHnbjjZcR
Y4ZY0MQOktnkIu8dBfPvA1WoVmLqQsJr5cfk7F1Jl9Lvvcvh8PM4dJvOwGKkb2cu
HCIL16FmRg2UnD8vD3SneCWg1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGdjl6t5
DwcRT59+gmE4oIt0O06AMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw
NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkI0QTMvNkQ2MkM4QzRBMDQyMTFFQjgxQkZGRDFGQzRGOUFFMDIvQjFDOTBDN0Ey
MEVDMTFFRjk2NEZGRTJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3V4MA0GCSqGSIb3DQEBCwUAA4IBAQCuLffJrlJXMwE4af6ZhuK6
DPwO1b18LM0ZMJO/65gP++wYz6eYO8VJobWzdiBfCTYPeARg0CG3YbYddd1PfDgl
U+WRISuJQPRL5uiPfVKCjbp2uMeCFIiLinGu2N6EjEdNrSBYjf1VIYjdJV/EXGl9
YYHuVLP0yCXapWpHJjoshUhbeQH/bTem2NbRlwRcXULTjRaqfMuMp6IxQupz8LRZ
6/PtSywA4RCB17f+jwm/d9T3MbuGReFRQuO4q3V8vOJn6JV2St+n/6l/lxIuQYV5
/43I+Cc32C0kchay8wWErKb/8aXZNIH/+muMSDRZYz5WgSFJ2B0pl0+PxE1Zlypb
-----END CERTIFICATE-----
Generated at Sat Mar 21 20:24:22 2026 by rpki-client