Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/1BB160C225EB11E9ADD6867FC4F9AE02.roa
File:                     1BB160C225EB11E9ADD6867FC4F9AE02.roa (raw, json)
Hash identifier:          QROIB6bnYFhzzS13UjwD7EoF8fIpnuPwl7H+Yls4sfk=
Subject key identifier:   B4:7F:0E:BD:4C:5C:F5:A4:5F:AE:74:FA:9F:AA:D4:84:22:DF:34:F7
Certificate issuer:       /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3
Certificate serial:       11AF
Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/1BB160C225EB11E9ADD6867FC4F9AE02.roa
Signing time:             Fri 14 Aug 2026 17:33:58 +0000
ROA not before:           Fri 14 Aug 2026 17:33:58 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137982
IP address blocks:        103.119.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl
                          rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4527 (0x11af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F95E, serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3
        Validity
            Not Before: Aug 14 17:33:58 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7f5186-59f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:d5:ad:14:22:3e:d4:9f:47:01:c5:f0:66:
                    c8:2a:a8:e5:05:38:09:6f:71:98:36:23:3d:f4:42:
                    1c:bc:1b:42:08:fe:f3:cf:e4:74:41:d6:09:40:f0:
                    72:98:44:c0:c1:1a:e1:54:2f:59:6a:45:4b:7d:4a:
                    fc:97:b7:aa:2a:68:c6:df:8f:8f:39:f2:c6:8e:6c:
                    ea:36:f3:4e:64:b7:a8:fa:14:01:a5:da:f8:c3:7d:
                    d3:9d:c2:1b:01:98:cc:58:ce:06:fb:dc:82:89:f8:
                    96:5b:43:c3:80:17:e3:f7:9c:3f:88:eb:86:2f:e1:
                    02:04:dd:a1:f6:5d:b7:46:8a:d9:c2:ca:f4:48:49:
                    55:ff:73:a1:6c:d4:c0:fb:56:fe:78:a3:bc:fb:80:
                    6f:f1:13:6e:21:69:db:ab:9d:c8:57:9e:17:a7:58:
                    f0:26:af:94:d4:0c:ee:fc:8d:ca:e3:fa:d7:49:e8:
                    76:c0:4c:60:36:36:ce:72:0d:74:b5:63:ef:28:ca:
                    43:e6:03:e0:fc:a9:8d:34:85:5a:45:db:ff:31:08:
                    61:68:c9:c1:2a:ee:1c:d3:ab:a1:74:4d:29:8b:6a:
                    ff:22:17:48:25:57:a8:e3:02:f2:f5:fc:7f:17:8b:
                    59:bc:4f:95:47:b7:27:c0:64:6d:4b:68:b0:ae:f3:
                    32:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7F:0E:BD:4C:5C:F5:A4:5F:AE:74:FA:9F:AA:D4:84:22:DF:34:F7
            X509v3 Authority Key Identifier:
                keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/1BB160C225EB11E9ADD6867FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:e8:20:a0:67:8d:d9:29:82:49:03:02:ab:5e:00:20:f3:
         f1:c9:28:67:ab:1b:b7:04:65:68:24:fd:64:8c:15:72:37:33:
         52:89:f3:45:e5:e4:83:d2:d5:39:2d:ce:d5:02:05:3b:84:f0:
         41:4d:89:a7:59:4a:52:32:af:d3:ff:54:76:33:0e:4c:c0:1f:
         31:40:1b:3c:77:44:8d:55:b1:65:e6:74:28:0d:69:99:0e:ad:
         eb:87:45:cf:91:7d:23:6c:70:8c:b9:22:14:53:8b:39:c0:11:
         77:54:83:55:54:25:45:0a:d7:e9:c5:20:46:4c:fc:8a:55:16:
         52:13:af:58:33:4a:67:6b:dd:16:76:cf:c4:87:ce:eb:63:5c:
         0f:95:0e:45:0e:ef:ab:e9:ea:22:08:a6:49:f4:45:b0:b9:e0:
         5f:1c:c5:a0:18:1d:10:3d:8d:a3:c5:88:fc:4e:11:75:21:49:
         aa:0c:5d:c6:a3:d4:29:ff:07:20:b3:c6:54:d1:48:a5:39:6f:
         95:71:93:98:36:6c:4a:b7:8a:fe:d3:4e:ec:ca:6e:bd:08:08:
         8c:b8:23:19:c0:ae:a4:4f:ff:b2:88:f8:a8:be:06:16:48:27:
         85:a7:0e:26:cf:26:10:40:9b:5e:48:be:56:3e:b2:a9:32:97:
         a5:04:e1:f7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkY5NUUxMTAvBgNVBAUTKEJGMUJBQjRDRjBENTQ5MzBFMDAxQjcyRDI0RjMwQjNF
RDY4QUUyQjMwHhcNMjYwODE0MTczMzU4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdmNTE4Ni01OWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvkrVrRQiPtSfRwHF8GbIKqjlBTgJb3GYNiM99EIcvBtCCP7zz+R0QdYJQPBy
mETAwRrhVC9ZakVLfUr8l7eqKmjG34+POfLGjmzqNvNOZLeo+hQBpdr4w33TncIb
AZjMWM4G+9yCifiWW0PDgBfj95w/iOuGL+ECBN2h9l23RorZwsr0SElV/3OhbNTA
+1b+eKO8+4Bv8RNuIWnbq53IV54Xp1jwJq+U1Azu/I3K4/rXSeh2wExgNjbOcg10
tWPvKMpD5gPg/KmNNIVaRdv/MQhhaMnBKu4c06uhdE0pi2r/IhdIJVeo4wLy9fx/
F4tZvE+VR7cnwGRtS2iwrvMy6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLR/Dr1M
XPWkX650+p+q1IQi3zT3MB8GA1UdIwQYMBaAFL8bq0zw1Ukw4AG3LSTzCz7WiuKz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Rjk1RS9CNzA4Nzk2ODI1
RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNURGdBYmN0SlBNTFB0YUs0
ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z4dXJUUERWU1REZ0FiY3RKUE1MUHRhSzRyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkY5NUUvQjcwODc5NjgyNUU5MTFFOUJFMzFENDdEQzRGOUFFMDIvMUJCMTYwQzIy
NUVCMTFFOUFERDY4NjdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3dcMA0GCSqGSIb3DQEBCwUAA4IBAQBMNeggoGeN2SmCSQMCq14A
IPPxyShnqxu3BGVoJP1kjBVyNzNSifNF5eSD0tU5Lc7VAgU7hPBBTYmnWUpSMq/T
/1R2Mw5MwB8xQBs8d0SNVbFl5nQoDWmZDq3rh0XPkX0jbHCMuSIUU4s5wBF3VINV
VCVFCtfpxSBGTPyKVRZSE69YM0pna90Wds/Eh87rY1wPlQ5FDu+r6eoiCKZJ9EWw
ueBfHMWgGB0QPY2jxYj8ThF1IUmqDF3Go9Qp/wcgs8ZU0UilOW+VcZOYNmxKt4r+
007sym69CAiMuCMZwK6kT/+yiPiovgYWSCeFpw4mzyYQQJteSL5WPrKpMpelBOH3
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:34 2026 by rpki-client