Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/32F4B5BA3F0411F1BF0D1E0CC9833773.roa
File:                     32F4B5BA3F0411F1BF0D1E0CC9833773.roa (raw, json)
Hash identifier:          7D5axyTJpCXlvT4hwQ1+3Thr7ZRX7mL6gQ5Gjrbulvc=
Subject key identifier:   0E:9A:38:BD:A8:CC:05:21:C7:16:0A:05:3A:BA:50:CA:76:83:EB:7D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       0469
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/32F4B5BA3F0411F1BF0D1E0CC9833773.roa
Signing time:             Thu 23 Apr 2026 11:04:29 +0000
ROA not before:           Thu 23 Apr 2026 11:04:29 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153517
IP address blocks:        103.127.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Apr 23 11:04:29 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e9fcbd-d985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:00:62:19:14:3f:53:78:ad:8d:16:54:1d:
                    af:93:bc:57:3c:78:3d:a4:a3:8b:a9:30:ec:2e:bb:
                    5e:1d:8d:1b:48:e0:4e:5d:fa:31:f2:b2:c3:8c:78:
                    6d:13:09:cc:b9:2a:dc:47:fd:4c:3a:48:61:18:38:
                    ba:bb:16:2f:9f:d0:33:16:2f:02:05:4c:94:34:96:
                    0a:e4:b3:3f:7c:2c:c1:65:3e:d8:fd:18:4f:ae:70:
                    3c:12:de:5d:8b:05:d7:ba:80:36:e9:bf:8e:11:ca:
                    7d:50:f9:5d:d4:c5:1f:2e:a3:15:f7:fe:ce:36:c8:
                    fc:ee:87:8f:f9:c0:80:5d:f9:11:60:ba:f7:71:d9:
                    07:8c:b7:2b:be:11:9e:b8:67:7c:28:82:1e:a8:cc:
                    ed:e2:f1:68:ce:df:82:39:38:86:1f:73:30:e4:5f:
                    ca:10:83:9c:14:45:49:b6:2d:d5:66:af:76:9c:a7:
                    c7:80:68:fd:ef:d0:23:f6:67:07:97:87:f3:db:42:
                    01:4f:2c:eb:1e:a7:7e:ab:dd:b0:3b:f1:09:7a:32:
                    95:66:58:38:ce:20:f6:8b:29:92:7e:6f:71:eb:6f:
                    47:3a:57:2d:dc:81:0f:f3:69:4a:a5:c0:aa:77:88:
                    55:5c:a9:03:48:e0:59:aa:a5:64:23:fc:f5:ce:e2:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9A:38:BD:A8:CC:05:21:C7:16:0A:05:3A:BA:50:CA:76:83:EB:7D
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/32F4B5BA3F0411F1BF0D1E0CC9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:87:d8:73:d6:89:be:59:8f:57:33:ff:1c:2e:a3:c1:a9:90:
         77:ff:2b:23:d2:d2:da:89:7c:62:db:25:e0:fa:6c:a7:a1:f1:
         83:5f:05:dc:66:14:8d:68:af:70:1a:d1:ba:8b:9e:14:1b:56:
         4f:bd:07:7a:23:45:d9:3b:f5:8f:67:30:9b:74:fe:71:7e:5a:
         5a:6d:64:79:24:7a:72:ec:db:e7:01:ba:19:18:09:b2:f8:87:
         1b:08:c0:5e:b7:ef:58:8d:38:43:66:47:cf:df:c9:3e:99:4c:
         d9:a3:1b:96:9c:77:14:6e:f3:9f:fd:dd:8c:54:fe:63:75:f4:
         13:f6:09:e8:e9:81:20:9c:c1:87:7d:54:2e:bf:fe:a4:b2:c7:
         f8:bf:50:a8:59:54:8f:8f:d1:08:e9:59:f5:bb:c6:3e:bd:09:
         c5:e3:15:70:03:95:d9:e1:0d:c7:de:23:a1:0b:64:af:5c:80:
         f6:f3:59:35:96:aa:85:0d:4d:fd:03:99:9d:cc:56:3a:81:01:
         74:cb:f8:43:b9:f4:25:cc:c1:94:d4:9a:3b:21:9e:ba:9f:fe:
         c7:36:02:3a:92:de:12:81:b2:c6:ae:de:91:53:7d:c0:c4:11:
         0a:3f:be:b7:11:f2:bc:a6:56:db:b7:52:f9:11:85:3d:3f:43:
         48:b0:c3:e1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3
ODAzMTFBNUQwHhcNMjYwNDIzMTEwNDI5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWU5ZmNiZC1kOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEwAYhkUP1N4rY0WVB2vk7xXPHg9pKOLqTDsLrteHY0bSOBOXfox8rLDjHht
EwnMuSrcR/1MOkhhGDi6uxYvn9AzFi8CBUyUNJYK5LM/fCzBZT7Y/RhPrnA8Et5d
iwXXuoA26b+OEcp9UPld1MUfLqMV9/7ONsj87oeP+cCAXfkRYLr3cdkHjLcrvhGe
uGd8KIIeqMzt4vFozt+COTiGH3Mw5F/KEIOcFEVJti3VZq92nKfHgGj979Aj9mcH
l4fz20IBTyzrHqd+q92wO/EJejKVZlg4ziD2iymSfm9x629HOlct3IEP82lKpcCq
d4hVXKkDSOBZqqVkI/z1zuIV2wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA6aOL2o
zAUhxxYKBTq6UMp2g+t9MB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5
MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjUxQUQvOEZEREY1RTg5OTFEMTFFQzgwOTM5QTU0QzRGOUFFMDIvMzJGNEI1QkEz
RjA0MTFGMUJGMEQxRTBDQzk4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3/wMA0GCSqGSIb3DQEBCwUAA4IBAQArh9hz1om+WY9XM/8cLqPB
qZB3/ysj0tLaiXxi2yXg+mynofGDXwXcZhSNaK9wGtG6i54UG1ZPvQd6I0XZO/WP
ZzCbdP5xflpabWR5JHpy7NvnAboZGAmy+IcbCMBet+9YjThDZkfP38k+mUzZoxuW
nHcUbvOf/d2MVP5jdfQT9gno6YEgnMGHfVQuv/6kssf4v1CoWVSPj9EI6Vn1u8Y+
vQnF4xVwA5XZ4Q3H3iOhC2SvXID281k1lqqFDU39A5mdzFY6gQF0y/hDufQlzMGU
1Jo7IZ66n/7HNgI6kt4SgbLGrt6RU33AxBEKP763EfK8plbbt1L5EYU9P0NIsMPh
-----END CERTIFICATE-----
Generated at Wed May 13 03:17:18 2026 by rpki-client