Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa
File:                     06A2C3E2C1E211EC86C79687C4F9AE02.roa (raw, json)
Hash identifier:          i4wGybB1WdffwImrTNHdx7mWqUy/NNLm8IvjBsrlwTs=
Subject key identifier:   30:44:7E:30:71:65:79:18:60:95:64:76:36:40:A1:0B:3C:89:91:C8
Certificate issuer:       /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Certificate serial:       03CC
Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:28:06 +0000
ROA not before:           Thu 05 Jun 2025 01:07:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58507
IP address blocks:        103.186.28.0/23 maxlen: 24
                          2400:6ce0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
                          rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
        Validity
            Not Before: Jun  5 01:07:39 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a59e76-45ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:ad:d3:88:60:84:99:91:35:86:b5:a5:c4:
                    67:04:8f:8b:11:c7:60:a4:95:57:3c:e7:a4:04:3d:
                    71:e5:ec:12:aa:27:eb:c6:cb:6e:b9:fa:07:93:ae:
                    40:d0:0e:2d:f0:f5:67:18:f7:65:6b:cd:59:14:8f:
                    87:2a:ea:f5:30:8c:aa:86:d0:1f:09:62:19:6a:aa:
                    c4:d7:17:8e:e2:8e:4a:59:d2:a7:aa:96:5b:81:14:
                    48:0b:10:f5:d8:61:f6:bf:a1:8e:77:35:14:3c:2b:
                    18:19:bf:98:b1:aa:d9:89:90:a1:93:8a:9c:b1:54:
                    02:30:16:e6:82:5d:23:74:c0:40:fb:0f:70:94:07:
                    7b:13:6b:a6:1c:f3:ca:da:cc:83:07:af:1f:6e:6f:
                    e5:7a:2e:f5:46:53:32:bb:ea:60:7b:61:6f:ab:ba:
                    e0:98:9c:7a:a5:dc:e4:f8:c9:83:ab:32:c3:74:78:
                    2b:89:75:61:f7:14:0a:87:88:c9:28:51:6e:b3:f1:
                    51:05:f9:f9:a0:ff:da:1f:60:22:0b:3f:c8:f5:93:
                    de:90:08:8c:a2:85:d0:f6:20:8c:3f:90:46:23:35:
                    d3:e7:8f:1f:7a:e7:09:10:11:cd:e3:00:d2:a1:04:
                    4a:9e:b5:54:af:9c:5c:0b:06:53:57:dc:d0:de:ed:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:44:7E:30:71:65:79:18:60:95:64:76:36:40:A1:0B:3C:89:91:C8
            X509v3 Authority Key Identifier:
                keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.28.0/23
                IPv6:
                  2400:6ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:27:00:ac:cd:78:01:75:0c:26:67:f8:bd:ed:11:af:21:99:
         cc:98:b3:a8:44:61:96:73:e8:f0:2f:be:14:10:db:bb:4d:73:
         9b:2e:c4:97:a2:c7:69:1a:80:52:f2:6f:cd:c2:34:d4:f1:f9:
         55:bc:10:fb:89:9c:d5:d0:80:0e:31:7d:79:6b:1e:81:55:18:
         a8:d7:b8:27:ce:43:d9:39:0f:47:93:ed:45:0e:76:e7:a4:08:
         4f:8d:e1:e8:37:72:d2:f7:a4:1c:52:97:06:c6:64:5f:7a:41:
         f6:f1:c8:4d:76:59:55:7e:86:ce:bc:49:4d:c4:61:2b:8d:e8:
         17:51:0d:81:a4:42:ec:4c:9a:72:e3:60:1e:4d:d2:d8:25:c5:
         7a:ba:de:f2:78:a8:ac:58:b7:01:25:ea:88:d4:67:c2:ef:96:
         9a:b7:ed:18:81:33:63:1b:de:dd:e9:4e:3a:76:45:8f:cd:3d:
         aa:75:08:48:49:0b:22:5e:43:59:31:f5:8f:15:0a:31:f0:f7:
         ca:b3:c4:eb:8d:6a:7c:3e:dc:34:b1:0a:64:27:22:09:95:15:
         5c:3c:dc:ea:be:c4:34:d7:50:13:dc:42:e0:46:95:8a:6c:56:
         de:12:50:47:30:08:e3:3b:17:72:f0:bf:02:a2:04:4f:96:e1:
         6e:c6:9e:5d
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx
NEVCREM5OTAwHhcNMjUwNjA1MDEwNzM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWU3Ni00NWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdqt04hghJmRNYa1pcRnBI+LEcdgpJVXPOekBD1x5ewSqifrxstuufoHk65A
0A4t8PVnGPdla81ZFI+HKur1MIyqhtAfCWIZaqrE1xeO4o5KWdKnqpZbgRRICxD1
2GH2v6GOdzUUPCsYGb+YsarZiZChk4qcsVQCMBbmgl0jdMBA+w9wlAd7E2umHPPK
2syDB68fbm/lei71RlMyu+pge2Fvq7rgmJx6pdzk+MmDqzLDdHgriXVh9xQKh4jJ
KFFus/FRBfn5oP/aH2AiCz/I9ZPekAiMooXQ9iCMP5BGIzXT548feucJEBHN4wDS
oQRKnrVUr5xcCwZTV9zQ3u2pgQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDBEfjBx
ZXkYYJVkdjZAoQs8iZHIMB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx
REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQ4REYvRjAyQjVEQkNDMUREMTFFQ0I5N0I5QzdGQzRGOUFFMDIvMDZBMkMzRTJD
MUUyMTFFQzg2Qzc5Njg3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ7ocMA0EAgACMAcDBQAkAGzgMA0GCSqGSIb3DQEBCwUAA4IBAQC5
JwCszXgBdQwmZ/i97RGvIZnMmLOoRGGWc+jwL74UENu7TXObLsSXosdpGoBS8m/N
wjTU8flVvBD7iZzV0IAOMX15ax6BVRio17gnzkPZOQ9Hk+1FDnbnpAhPjeHoN3LS
96QcUpcGxmRfekH28chNdllVfobOvElNxGErjegXUQ2BpELsTJpy42AeTdLYJcV6
ut7yeKisWLcBJeqI1GfC75aat+0YgTNjG97d6U46dkWPzT2qdQhISQsiXkNZMfWP
FQox8PfKs8TrjWp8Ptw0sQpkJyIJlRVcPNzqvsQ011AT3ELgRpWKbFbeElBHMAjj
Oxdy8L8CogRPluFuxp5d
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:26 2026 by rpki-client