Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa
File:                     C4C5449EABD111F0A9879016C4F9AE02.roa (raw, json)
Hash identifier:          tJWszT3hQG7KyZ59DcsDJbma2Zpx+xHHx0ZP3u0HdGA=
Subject key identifier:   8D:DD:74:EE:CF:D8:DC:C2:9F:16:75:8D:50:30:32:3E:72:06:2E:10
Certificate issuer:       /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Certificate serial:       0135
Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:17:57 +0000
ROA not before:           Thu 15 Jan 2026 05:24:07 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        103.205.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
                          rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917928F, serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
        Validity
            Not Before: Jan 15 05:24:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a466b5-471a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:70:15:f5:6f:20:78:6e:83:59:fd:6d:07:0d:
                    a6:11:93:42:05:95:38:1c:8b:ff:a2:15:a1:53:b6:
                    69:3a:98:fe:cb:4c:a0:f4:46:08:9c:1b:d7:e3:d5:
                    52:69:6c:17:3e:de:8c:7c:71:bf:0b:38:f5:aa:3b:
                    76:7f:3b:36:e7:65:f1:9d:1c:47:ed:aa:5c:7d:12:
                    3e:f7:75:f7:0c:19:4a:b4:22:84:20:b4:61:75:ac:
                    55:2c:f9:96:1e:4d:f9:63:3b:73:15:7d:57:68:e5:
                    ec:a3:cd:7b:54:d6:4c:5d:01:40:cc:81:ac:ee:2a:
                    0d:7f:e7:df:33:03:14:cd:a3:78:e6:76:66:e9:6f:
                    29:75:29:39:1b:7d:32:05:eb:2d:ce:ee:7c:7c:5a:
                    4f:ac:2b:46:b9:a5:44:8e:75:d5:3d:30:8e:7c:92:
                    1e:a0:b8:2b:fa:a5:18:4c:2b:69:7c:a0:06:13:7c:
                    8d:c4:56:1e:c2:af:3d:7d:f1:36:67:9d:b4:69:b0:
                    87:d4:3e:6b:aa:07:14:36:cd:60:b9:9e:19:f2:09:
                    ac:86:fe:62:b4:ac:4f:b9:cf:0d:1b:02:96:d3:10:
                    e1:93:42:7a:b8:fa:c0:7c:3f:2f:bd:7b:1c:80:a2:
                    bc:55:bd:d4:54:72:07:ba:84:b3:3f:69:26:c3:2f:
                    25:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:74:EE:CF:D8:DC:C2:9F:16:75:8D:50:30:32:3E:72:06:2E:10
            X509v3 Authority Key Identifier:
                keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:ba:92:1a:b8:31:3f:c6:b4:db:bc:e7:0c:7c:0d:4f:d1:84:
         9c:4c:d1:98:c9:68:c9:87:ba:59:26:c5:55:7f:d6:a0:5c:fa:
         50:5f:cd:05:56:71:20:14:f1:b5:8a:2c:b0:be:85:ea:38:5c:
         cd:1c:12:e8:3a:47:7b:bf:11:b7:80:e4:68:5e:bd:12:63:4e:
         b7:5f:9a:5a:a6:51:59:e3:bb:4c:c3:70:3f:15:34:7e:61:3d:
         cf:9c:90:2b:f1:f6:94:bc:14:9a:25:54:a3:51:c0:97:dd:79:
         86:19:80:f5:bb:08:df:31:49:ae:2b:58:9d:41:e5:c7:97:79:
         37:40:d5:a9:81:16:d0:9d:b9:07:d5:ca:ac:e7:ee:db:df:30:
         82:b1:86:c1:99:4b:b1:c2:5f:2c:85:ca:e1:1b:25:e7:e3:aa:
         44:0c:97:a1:19:a1:37:8e:4b:20:0f:2a:78:b3:73:a9:69:9c:
         51:22:a1:a3:c9:6f:17:7a:6c:e4:2f:10:63:eb:77:6e:d8:62:
         af:15:ab:33:12:b9:f3:68:57:f1:04:64:ad:4e:04:56:10:ac:
         15:b4:78:05:61:ec:05:af:83:94:cb:f2:02:e3:ef:d1:16:40:
         0a:36:cf:c2:fc:0a:86:cf:10:22:92:37:87:08:85:93:f8:ee:
         1b:5c:95:6c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzkyOEYxMTAvBgNVBAUTKDU1MEIxNjBGRjRGNUREN0Q4NEFDM0U4Qjk1OURENzlB
NDJGQjU3REEwHhcNMjYwMTE1MDUyNDA3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjZiNS00NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5XAV9W8geG6DWf1tBw2mEZNCBZU4HIv/ohWhU7ZpOpj+y0yg9EYInBvX49VS
aWwXPt6MfHG/Czj1qjt2fzs252XxnRxH7apcfRI+93X3DBlKtCKEILRhdaxVLPmW
Hk35YztzFX1XaOXso817VNZMXQFAzIGs7ioNf+ffMwMUzaN45nZm6W8pdSk5G30y
Bestzu58fFpPrCtGuaVEjnXVPTCOfJIeoLgr+qUYTCtpfKAGE3yNxFYewq89ffE2
Z520abCH1D5rqgcUNs1guZ4Z8gmshv5itKxPuc8NGwKW0xDhk0J6uPrAfD8vvXsc
gKK8Vb3UVHIHuoSzP2kmwy8l1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI3ddO7P
2NzCnxZ1jVAwMj5yBi4QMB8GA1UdIwQYMBaAFFULFg/09d19hKw+i5Wd15pC+1fa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTI4Ri8xNkZGNUY4MjVC
OUQxMUVGQjFENDIxNDZDNEY5QUUwMi9WUXNXRF9UMTNYMkVyRDZMbFozWG1rTDdW
OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZRc1dEX1QxM1gyRXJENkxsWjNYbWtMN1Y5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzkyOEYvMTZGRjVGODI1QjlEMTFFRkIxRDQyMTQ2QzRGOUFFMDIvQzRDNTQ0OUVB
QkQxMTFGMEE5ODc5MDE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ82kMA0GCSqGSIb3DQEBCwUAA4IBAQCBupIauDE/xrTbvOcMfA1P
0YScTNGYyWjJh7pZJsVVf9agXPpQX80FVnEgFPG1iiywvoXqOFzNHBLoOkd7vxG3
gORoXr0SY063X5paplFZ47tMw3A/FTR+YT3PnJAr8faUvBSaJVSjUcCX3XmGGYD1
uwjfMUmuK1idQeXHl3k3QNWpgRbQnbkH1cqs5+7b3zCCsYbBmUuxwl8shcrhGyXn
46pEDJehGaE3jksgDyp4s3OpaZxRIqGjyW8XemzkLxBj63du2GKvFaszErnzaFfx
BGStTgRWEKwVtHgFYewFr4OUy/IC4+/RFkAKNs/C/AqGzxAikjeHCIWT+O4bXJVs
-----END CERTIFICATE-----
Generated at Sat Mar 21 22:28:19 2026 by rpki-client