Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/BDBDF8FE2CDB11F1B964405E9D833773.roa
File:                     BDBDF8FE2CDB11F1B964405E9D833773.roa (raw, json)
Hash identifier:          N2ouqxTaJTdT3cqwTn1OVXdT/dBvearlaUPdfdlosfo=
Subject key identifier:   33:8D:20:87:0C:B1:8B:03:5B:F1:16:61:D5:D7:66:CF:20:32:76:8A
Certificate issuer:       /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial:       0275
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/BDBDF8FE2CDB11F1B964405E9D833773.roa
Signing time:             Tue 31 Mar 2026 08:29:32 +0000
ROA not before:           Tue 31 Mar 2026 08:29:32 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     150726
IP address blocks:        103.74.10.0/24 maxlen: 24
                          2001:df1:dd40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
                          rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
        Validity
            Not Before: Mar 31 08:29:32 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69cb85ec-173d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:7e:5d:52:0d:7b:b4:d1:8f:68:39:fc:15:
                    dd:d2:d6:08:72:43:d0:a9:ac:36:36:f1:ff:58:59:
                    e8:c8:a7:80:c9:8d:57:ff:7f:9d:44:dc:d6:42:e1:
                    4f:fc:2e:fd:7d:1a:71:0e:2b:e6:6e:01:31:e8:0a:
                    53:67:05:c7:00:ad:6a:b7:8f:ee:76:e8:11:86:fb:
                    91:a2:3f:37:d5:ff:26:b6:ab:ec:0a:06:a7:35:01:
                    a7:0b:49:8f:63:5a:36:8f:9b:43:57:39:0b:67:44:
                    3c:b6:a8:5b:7e:2c:07:dc:29:d6:a4:bf:68:7d:b9:
                    6e:13:4c:5c:e1:7f:6a:52:aa:7f:df:2f:79:df:36:
                    c5:eb:13:7d:ac:de:9b:96:2c:22:e2:a3:58:d6:c9:
                    5a:eb:bc:8a:fb:b9:66:0f:f6:fe:e4:de:76:45:69:
                    e7:f5:f7:42:1f:59:31:10:71:31:64:84:ba:12:ff:
                    71:28:e5:84:5e:8e:ed:07:e1:50:d6:91:86:e1:52:
                    f6:84:c2:12:62:a7:b2:00:e0:11:a3:73:d2:b4:0c:
                    da:d0:93:1e:26:c8:54:77:58:c3:66:b7:4d:c9:49:
                    64:f8:bb:97:ed:a0:e9:93:9e:dd:56:90:7e:8f:0f:
                    83:7a:f2:2a:58:d3:7b:af:a3:07:ce:e5:bb:1a:82:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8D:20:87:0C:B1:8B:03:5B:F1:16:61:D5:D7:66:CF:20:32:76:8A
            X509v3 Authority Key Identifier:
                keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/BDBDF8FE2CDB11F1B964405E9D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.10.0/24
                IPv6:
                  2001:df1:dd40::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:9a:76:c8:c8:03:c3:82:b1:de:95:1b:43:9c:6b:18:0a:c0:
         39:44:8d:78:ce:97:7e:cc:36:ae:cd:1a:29:96:0c:a4:d6:65:
         dd:36:d4:3c:71:53:47:20:8c:ec:1b:98:a4:d5:cb:8a:94:0e:
         a4:b4:76:dd:24:18:a6:2e:f6:b6:a9:c5:cf:a7:b0:fa:d7:11:
         ad:3f:f9:f2:34:68:37:08:fd:25:86:59:ec:61:75:10:a1:c8:
         dd:d1:b4:3f:37:23:4c:a3:9f:93:ac:89:2b:ae:3f:7d:c5:13:
         c5:43:b3:e6:33:13:cb:a0:75:69:f5:1b:24:8d:02:73:59:24:
         a0:89:6d:08:1c:ee:9f:79:95:d7:21:99:66:86:f3:c1:1d:00:
         44:54:b8:23:68:53:a1:ad:84:8b:8b:e3:2e:b7:03:bf:fc:d0:
         90:f7:17:89:2f:21:49:86:ab:9d:ab:1a:1f:48:2b:b1:f3:6c:
         ef:5b:03:d1:5f:3d:40:3f:04:70:2c:c3:67:a0:5d:3f:c4:87:
         6e:c4:96:a9:93:d3:ff:95:b8:e3:a5:b8:e0:91:76:31:8a:dc:
         2b:95:97:44:a4:9a:ed:e6:81:83:44:d1:9e:4a:3f:99:89:b8:
         1a:d7:e9:77:1a:d4:49:e3:df:d9:4f:e2:c5:ba:b0:5c:48:70:
         56:bc:07:9b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURCQkYxMTAvBgNVBAUTKDg1NEMzQzhEQkZFRURBQUNCQjNCMkE0MjRCNThCMjU5
QTE0QzlGMEIwHhcNMjYwMzMxMDgyOTMyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNiODVlYy0xNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApXR+XVINe7TRj2g5/BXd0tYIckPQqaw2NvH/WFnoyKeAyY1X/3+dRNzWQuFP
/C79fRpxDivmbgEx6ApTZwXHAK1qt4/udugRhvuRoj831f8mtqvsCganNQGnC0mP
Y1o2j5tDVzkLZ0Q8tqhbfiwH3CnWpL9ofbluE0xc4X9qUqp/3y953zbF6xN9rN6b
liwi4qNY1sla67yK+7lmD/b+5N52RWnn9fdCH1kxEHExZIS6Ev9xKOWEXo7tB+FQ
1pGG4VL2hMISYqeyAOARo3PStAza0JMeJshUd1jDZrdNyUlk+LuX7aDpk57dVpB+
jw+DevIqWNN7r6MHzuW7GoKY3QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDONIIcM
sYsDW/EWYdXXZs8gMnaKMB8GA1UdIwQYMBaAFIVMPI2/7tqsuzsqQktYslmhTJ8L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REJCRi9CNTk1QTY2ODlC
RjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJxeTdPeXBDUzFpeVdhRk1u
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hVdzhqYl91MnF5N095cENTMWl5V2FGTW53cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OURCQkYvQjU5NUE2Njg5QkY3MTFFREExREM1RTZGQzRGOUFFMDIvQkRCREY4RkUy
Q0RCMTFGMUI5NjQ0MDVFOUQ4MzM3NzMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ0oKMA8EAgACMAkDBwAgAQ3x3UAwDQYJKoZIhvcNAQELBQADggEB
AI+adsjIA8OCsd6VG0OcaxgKwDlEjXjOl37MNq7NGimWDKTWZd021DxxU0cgjOwb
mKTVy4qUDqS0dt0kGKYu9rapxc+nsPrXEa0/+fI0aDcI/SWGWexhdRChyN3RtD83
I0yjn5OsiSuuP33FE8VDs+YzE8ugdWn1GySNAnNZJKCJbQgc7p95ldchmWaG88Ed
AERUuCNoU6GthIuL4y63A7/80JD3F4kvIUmGq52rGh9IK7HzbO9bA9FfPUA/BHAs
w2egXT/Eh27ElqmT0/+VuOOluOCRdjGK3CuVl0Skmu3mgYNE0Z5KP5mJuBrX6Xca
1Enj39lP4sW6sFxIcFa8B5s=
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:08:15 2026 by rpki-client