Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa
File:                     658CF9F2721411EEAC707910C4F9AE02.roa (raw, json)
Hash identifier:          jssMorMYPejymYdqTmmiSswslmE/j0Z7hQzYCFBsJhM=
Subject key identifier:   BE:BD:93:9E:D7:4B:18:53:37:29:E1:0F:32:38:2F:DE:B4:B0:B2:97
Certificate issuer:       /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Certificate serial:       01C0
Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:51:59 +0000
ROA not before:           Sat 17 May 2025 04:24:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     8220
IP address blocks:        103.138.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
                          rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 03:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
        Validity
            Not Before: May 17 04:24:19 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5a40f-1e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:52:3b:11:00:77:3e:88:e6:10:38:19:d4:90:
                    1b:79:30:a4:29:b0:d5:be:bd:f0:63:3f:58:40:db:
                    38:69:98:9a:2b:49:f4:d2:a6:2e:44:a5:4f:34:67:
                    ad:2b:82:37:80:0e:6e:90:3f:a2:05:d2:de:39:22:
                    09:be:1f:ab:3b:bd:5a:d1:1e:06:65:ac:a8:72:c8:
                    c2:36:41:8b:63:88:dd:b4:c8:d8:7d:8c:be:a8:d1:
                    57:c4:5c:98:f9:e5:7a:69:85:c8:fe:88:ee:50:cd:
                    e5:08:56:01:ed:51:f7:d6:71:75:fa:df:8e:bc:0f:
                    e6:6e:00:fc:c0:56:ef:77:5b:ab:44:cf:64:68:bd:
                    18:1d:9b:b9:97:c5:e9:4d:3e:6b:8d:a8:0f:ee:2f:
                    b5:19:8e:9c:d4:b8:1a:be:1f:11:d9:7b:d0:22:96:
                    47:c6:24:7d:a0:98:25:4f:f6:a7:b1:f4:ed:31:c9:
                    4c:0c:26:1a:1c:20:7e:3c:4a:ef:45:e2:49:99:04:
                    79:3a:56:be:d3:08:90:2c:0d:ac:28:b2:94:1a:38:
                    28:f8:44:7e:ee:f1:93:d3:99:2e:32:42:b5:59:7b:
                    6d:82:28:30:4e:2a:f0:fe:32:1d:aa:ae:50:17:35:
                    ca:93:62:ad:87:fa:8f:a7:7a:57:6f:52:dc:f3:39:
                    00:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BD:93:9E:D7:4B:18:53:37:29:E1:0F:32:38:2F:DE:B4:B0:B2:97
            X509v3 Authority Key Identifier:
                keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:4a:a4:19:4a:01:4a:dd:9f:2d:b9:d5:cb:8f:2b:7a:86:6b:
         d3:47:d0:06:4e:03:ee:c3:f0:ae:ed:b4:fc:cf:70:34:d9:4b:
         5c:b4:6e:1a:31:20:ef:84:ba:cf:07:cd:44:97:29:49:2c:86:
         a6:8a:d6:0b:c3:8e:db:10:33:cb:90:f1:61:26:88:dd:cf:25:
         78:e3:63:eb:17:f2:40:c6:67:ca:c8:96:d8:2d:7a:e2:8f:84:
         8f:02:f9:8b:93:ce:08:d5:b8:49:7f:32:30:8b:6d:af:26:b9:
         76:2b:8f:c6:43:87:19:ef:3a:cd:61:cd:4c:23:af:78:81:78:
         43:f9:13:e1:b8:38:7f:fb:c1:d2:68:7d:e7:54:21:74:43:9c:
         1b:25:7b:af:1c:35:8f:a6:b1:8e:0a:7b:3a:b9:59:89:2e:61:
         3c:29:68:c3:0e:f1:fa:16:83:22:9f:08:cc:ba:74:12:7e:fd:
         dd:17:d4:ed:af:78:cd:63:d2:d8:8b:ae:e5:e4:bb:39:20:17:
         15:47:eb:81:a8:06:53:b4:2b:cd:8f:79:5f:69:0a:3e:2b:ee:
         8e:20:76:65:0c:e9:82:f4:22:60:a8:83:96:ad:9b:77:08:6f:
         8a:9b:9d:44:8d:f9:bc:8a:28:aa:fc:37:31:6c:0d:52:75:32:
         f4:17:89:81
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQzMTMxMTAvBgNVBAUTKEUxM0M0NzRERDQ0NTcxQThDRUY0MDY2OTRFMDRBRDZB
QzYxQjI1NjYwHhcNMjUwNTE3MDQyNDE5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTQwZi0xZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA41I7EQB3PojmEDgZ1JAbeTCkKbDVvr3wYz9YQNs4aZiaK0n00qYuRKVPNGet
K4I3gA5ukD+iBdLeOSIJvh+rO71a0R4GZayocsjCNkGLY4jdtMjYfYy+qNFXxFyY
+eV6aYXI/ojuUM3lCFYB7VH31nF1+t+OvA/mbgD8wFbvd1urRM9kaL0YHZu5l8Xp
TT5rjagP7i+1GY6c1Lgavh8R2XvQIpZHxiR9oJglT/ansfTtMclMDCYaHCB+PErv
ReJJmQR5Ola+0wiQLA2sKLKUGjgo+ER+7vGT05kuMkK1WXttgigwTirw/jIdqq5Q
FzXKk2Kth/qPp3pXb1Lc8zkAXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL69k57X
SxhTNynhDzI4L960sLKXMB8GA1UdIwQYMBaAFOE8R03URXGozvQGaU4ErWrGGyVm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDMxMy8wRjIwNzk3NjZF
RjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNhak85QVpwVGdTdGFzWWJK
V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRUeEhUZFJGY2FqTzlBWnBUZ1N0YXNZYkpXWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUQzMTMvMEYyMDc5NzY2RUY1MTFFRTg0REE2OTgyQzRGOUFFMDIvNjU4Q0Y5RjI3
MjE0MTFFRUFDNzA3OTEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ4pkMA0GCSqGSIb3DQEBCwUAA4IBAQDMSqQZSgFK3Z8tudXLjyt6
hmvTR9AGTgPuw/Cu7bT8z3A02UtctG4aMSDvhLrPB81ElylJLIamitYLw47bEDPL
kPFhJojdzyV442PrF/JAxmfKyJbYLXrij4SPAvmLk84I1bhJfzIwi22vJrl2K4/G
Q4cZ7zrNYc1MI694gXhD+RPhuDh/+8HSaH3nVCF0Q5wbJXuvHDWPprGOCns6uVmJ
LmE8KWjDDvH6FoMinwjMunQSfv3dF9Ttr3jNY9LYi67l5Ls5IBcVR+uBqAZTtCvN
j3lfaQo+K+6OIHZlDOmC9CJgqIOWrZt3CG+Km51Ejfm8iiiq/DcxbA1SdTL0F4mB
-----END CERTIFICATE-----
Generated at Sat Mar 7 19:17:53 2026 by rpki-client