Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa
File:                     6901B0861DF211ED95A51A3EC4F9AE02.roa (raw, json)
Hash identifier:          5pvNOF23o2dVE23cjfW7jTVGCNwz3VBA/OSl53p3le0=
Subject key identifier:   F6:4B:AD:67:1C:4F:35:2B:98:7E:E1:81:89:03:F6:53:DF:93:69:A3
Certificate issuer:       /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Certificate serial:       0328
Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa
Signing time:             Mon 13 Jul 2026 01:26:49 +0000
ROA not before:           Mon 13 Jul 2026 01:26:49 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     150164
IP address blocks:        103.142.0.0/23 maxlen: 24
                          2001:df1:2440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
                          rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
        Validity
            Not Before: Jul 13 01:26:49 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a543ed9-3611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:18:52:13:58:db:12:94:2d:cc:69:01:96:
                    66:10:96:99:14:3a:9e:64:d6:35:f2:0c:44:40:1e:
                    fa:10:24:a1:18:5f:cb:65:bb:4b:13:4d:a5:48:9a:
                    27:2b:d8:71:d9:9d:25:f5:6f:ce:80:0c:8d:ba:3d:
                    52:01:0f:01:57:64:bf:28:16:69:6b:92:0e:2a:c0:
                    a3:da:4b:9c:bc:8c:30:50:7e:36:e1:c0:b8:d2:53:
                    0c:f1:8c:6c:86:ef:35:0e:5b:0e:a4:78:f1:8a:c6:
                    cb:7b:25:01:d2:bb:f5:4f:be:69:fa:9d:5c:df:ac:
                    d2:81:2d:23:ef:72:fd:3c:ab:80:24:21:50:2d:e4:
                    6f:d7:9b:35:40:9a:0e:00:b2:43:27:fc:8b:6f:26:
                    cf:6a:75:6d:33:51:12:43:0b:7f:11:77:f6:39:e1:
                    8f:e9:63:2d:06:0c:f6:5c:e7:3c:e5:83:ab:e3:72:
                    16:3b:31:df:97:a4:77:88:12:0b:b8:26:f6:d3:b4:
                    fc:e9:7c:08:8a:65:84:dd:9c:76:d4:6b:e8:c1:58:
                    d6:cc:ff:72:87:10:4d:e5:59:0e:73:3d:50:9a:df:
                    2a:40:48:11:d1:8f:e0:bb:ba:6c:e3:8c:d1:28:05:
                    df:b2:fc:ff:b2:c5:5d:14:da:b1:95:c2:90:43:78:
                    f6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4B:AD:67:1C:4F:35:2B:98:7E:E1:81:89:03:F6:53:DF:93:69:A3
            X509v3 Authority Key Identifier:
                keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.0.0/23
                IPv6:
                  2001:df1:2440::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:f8:fe:cd:31:73:b8:63:ac:50:d3:6d:fd:f2:ab:97:a2:59:
         3a:82:b5:b7:59:ca:69:8c:c7:9c:d6:cb:f9:83:79:a5:4e:c0:
         91:2a:cf:83:14:f6:c9:fe:e7:05:58:cd:b2:c7:61:4f:71:e7:
         e2:92:fe:86:db:c5:bf:69:db:4e:ee:7b:42:61:e9:68:32:48:
         3c:9b:37:b3:06:d5:24:e0:1c:a0:31:7d:72:6b:b8:49:e0:80:
         ff:ee:79:db:98:b7:78:e5:3f:23:a9:c2:c0:4e:df:bb:2c:15:
         22:6a:19:de:c3:27:ef:99:29:a8:80:5c:98:94:8a:e0:64:a5:
         fb:15:dc:9f:15:d8:ee:92:73:73:19:2c:6a:5b:03:0d:32:1c:
         11:b5:fa:e4:54:26:8b:41:bd:dd:95:e7:d1:21:11:ba:7e:d7:
         14:22:28:01:98:b8:16:f4:3a:b4:f6:ac:0d:40:97:33:d1:ae:
         1c:03:fc:d8:4b:39:03:2a:c5:a3:a7:e2:5b:34:bb:97:fd:f9:
         61:8b:2e:ef:93:b0:bf:40:71:d1:5a:b4:67:b1:20:42:a4:93:
         3d:a7:26:66:4c:95:3f:59:a1:5e:f0:8e:b5:d4:7c:ad:ed:bc:
         04:12:8a:87:73:6d:87:00:aa:94:91:9d:a1:69:76:c8:9e:f2:
         48:f6:7b:9f
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEzRkExMTAvBgNVBAUTKDE2MDRCRUU4NEVCQTA4RkRDOTQ2RTQ4QjRDMTRFOERD
MjU0MjE5M0EwHhcNMjYwNzEzMDEyNjQ5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU0M2VkOS0zNjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqbQYUhNY2xKULcxpAZZmEJaZFDqeZNY18gxEQB76ECShGF/LZbtLE02lSJon
K9hx2Z0l9W/OgAyNuj1SAQ8BV2S/KBZpa5IOKsCj2kucvIwwUH424cC40lMM8Yxs
hu81DlsOpHjxisbLeyUB0rv1T75p+p1c36zSgS0j73L9PKuAJCFQLeRv15s1QJoO
ALJDJ/yLbybPanVtM1ESQwt/EXf2OeGP6WMtBgz2XOc85YOr43IWOzHfl6R3iBIL
uCb207T86XwIimWE3Zx21GvowVjWzP9yhxBN5VkOcz1Qmt8qQEgR0Y/gu7ps44zR
KAXfsvz/ssVdFNqxlcKQQ3j2xQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPZLrWcc
TzUrmH7hgYkD9lPfk2mjMB8GA1UdIwQYMBaAFBYEvuhOugj9yUbki0wU6NwlQhk6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNGQS8zMjkzOTc2NjFE
RUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQM0pSdVNMVEJUbzNDVkNH
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnUy02RTY2Q1AzSlJ1U0xUQlRvM0NWQ0dUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEzRkEvMzI5Mzk3NjYxREVFMTFFRDk0NzJDMTM2QzRGOUFFMDIvNjkwMUIwODYx
REYyMTFFRDk1QTUxQTNFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ44AMA8EAgACMAkDBwAgAQ3xJEAwDQYJKoZIhvcNAQELBQADggEB
AHv4/s0xc7hjrFDTbf3yq5eiWTqCtbdZymmMx5zWy/mDeaVOwJEqz4MU9sn+5wVY
zbLHYU9x5+KS/obbxb9p207ue0Jh6WgySDybN7MG1STgHKAxfXJruEnggP/ueduY
t3jlPyOpwsBO37ssFSJqGd7DJ++ZKaiAXJiUiuBkpfsV3J8V2O6Sc3MZLGpbAw0y
HBG1+uRUJotBvd2V59EhEbp+1xQiKAGYuBb0OrT2rA1AlzPRrhwD/NhLOQMqxaOn
4ls0u5f9+WGLLu+TsL9AcdFatGexIEKkkz2nJmZMlT9ZoV7wjrXUfK3tvAQSiodz
bYcAqpSRnaFpdsie8kj2e58=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:26 2026 by rpki-client