Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa
File:                     A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (raw, json)
Hash identifier:          juRf6DKubWHLyUVCkZq0DoXL3LBiJ5IdHL3Dkg0ZIH0=
Subject key identifier:   22:D1:4C:B8:79:E2:41:1D:22:72:95:CE:C7:D4:84:F9:B0:B8:6D:2F
Certificate issuer:       /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial:       093D
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:41:39 +0000
ROA not before:           Sun 02 Nov 2025 20:39:40 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132827
IP address blocks:        103.6.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
                          rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2365 (0x93d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
        Validity
            Not Before: Nov  2 20:39:40 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45e33-53d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:eb:ff:6e:5c:63:d2:92:30:42:a0:32:ef:
                    b5:46:6f:19:fe:1c:1a:f4:09:af:e8:37:f2:a3:55:
                    28:48:e6:4b:d5:24:12:36:8d:ec:12:69:44:16:34:
                    4f:51:86:48:75:15:e9:6f:71:cd:3c:29:d2:f7:5a:
                    4b:66:ec:65:48:87:70:d5:e0:f0:a4:1f:b5:6d:35:
                    c5:d1:48:9b:c6:59:c9:fe:6f:e3:1c:c0:9a:ba:34:
                    6f:97:f8:08:90:9b:66:4b:d2:d5:78:50:93:79:2f:
                    33:d2:08:b8:77:4e:23:a0:36:9d:e4:b1:8e:84:80:
                    e8:62:8f:3a:ca:bc:25:a4:09:0a:d3:c2:51:1a:5d:
                    54:90:aa:21:44:05:c2:e7:97:13:79:74:a2:ab:6e:
                    3d:58:cd:e6:cb:50:5a:62:e8:7e:49:6f:c1:21:6d:
                    06:d2:1d:d4:b2:83:dc:ef:9c:1c:ab:f5:38:2a:45:
                    8b:9a:e9:e7:8b:52:37:3e:7c:e9:86:e2:97:55:8a:
                    d7:73:0f:0d:ab:30:63:d3:0a:45:9e:2a:ae:94:b0:
                    64:f4:1b:35:7c:d1:d5:2b:35:cb:cc:c7:b2:1a:d7:
                    42:70:05:a4:7d:35:d8:d2:92:06:8c:92:13:f3:17:
                    6c:92:fe:29:2c:3d:dd:89:b6:cc:8e:ae:a7:a6:11:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D1:4C:B8:79:E2:41:1D:22:72:95:CE:C7:D4:84:F9:B0:B8:6D:2F
            X509v3 Authority Key Identifier:
                keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:51:e4:7f:47:f9:f3:e1:1a:2c:90:f4:61:64:18:cb:b5:ab:
         2a:ef:25:12:60:b4:7a:80:bd:83:27:36:40:e8:e6:6f:99:f1:
         dd:19:68:30:40:aa:fc:75:18:14:09:f7:f6:b6:a2:a0:89:a1:
         77:29:a8:da:7d:03:5f:b5:c5:b4:81:02:c1:37:15:6d:ec:d0:
         f7:47:75:ae:68:60:4c:d3:83:d0:4d:6b:25:9e:36:1a:4c:0f:
         3e:ee:af:c9:63:04:96:1b:e4:b6:96:97:75:a9:6a:a1:46:d9:
         4a:9f:e5:66:54:55:d8:a6:c0:63:a5:b6:21:ad:19:c2:5a:9c:
         b3:52:80:7a:b1:5d:c1:37:83:5b:30:7f:b8:f4:3d:08:e6:26:
         a8:3c:d3:9a:a4:b4:f2:16:36:d0:0e:33:1e:36:85:ba:ff:1c:
         a4:1c:2a:4f:89:3e:75:7a:f0:de:d4:c4:fa:21:e8:05:29:4c:
         95:f5:dc:62:d9:99:4f:27:be:c6:06:8a:a8:af:c3:c9:86:0c:
         81:ad:d8:25:6f:71:cf:3f:c9:4d:ed:19:17:2e:1e:55:0f:b3:
         27:99:02:12:b1:1a:04:91:cb:a8:1b:ca:71:3f:99:de:79:74:
         b6:06:d6:f3:89:f4:a7:44:fa:58:39:b5:68:82:5f:df:c9:71:
         c6:3c:96:ac
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3
QzNBRkU0MDMwHhcNMjUxMTAyMjAzOTQwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWUzMy01M2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlrLr/25cY9KSMEKgMu+1Rm8Z/hwa9Amv6Dfyo1UoSOZL1SQSNo3sEmlEFjRP
UYZIdRXpb3HNPCnS91pLZuxlSIdw1eDwpB+1bTXF0UibxlnJ/m/jHMCaujRvl/gI
kJtmS9LVeFCTeS8z0gi4d04joDad5LGOhIDoYo86yrwlpAkK08JRGl1UkKohRAXC
55cTeXSiq249WM3my1BaYuh+SW/BIW0G0h3UsoPc75wcq/U4KkWLmunni1I3Pnzp
huKXVYrXcw8NqzBj0wpFniqulLBk9Bs1fNHVKzXLzMeyGtdCcAWkfTXY0pIGjJIT
8xdskv4pLD3dibbMjq6nphGdgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCLRTLh5
4kEdInKVzsfUhPmwuG0vMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB
QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1
QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjUyRjcvN0NDNDVGQUVCQUFGMTFFQUE2REQxQTNEQzRGOUFFMDIvQTI5QTY2RkUy
RjFDMTFFREEzRTI5QjA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwbwMA0GCSqGSIb3DQEBCwUAA4IBAQBJUeR/R/nz4RoskPRhZBjL
tasq7yUSYLR6gL2DJzZA6OZvmfHdGWgwQKr8dRgUCff2tqKgiaF3KajafQNftcW0
gQLBNxVt7ND3R3WuaGBM04PQTWslnjYaTA8+7q/JYwSWG+S2lpd1qWqhRtlKn+Vm
VFXYpsBjpbYhrRnCWpyzUoB6sV3BN4NbMH+49D0I5iaoPNOapLTyFjbQDjMeNoW6
/xykHCpPiT51evDe1MT6IegFKUyV9dxi2ZlPJ77GBoqor8PJhgyBrdglb3HPP8lN
7RkXLh5VD7MnmQISsRoEkcuoG8pxP5neeXS2BtbzifSnRPpYObVogl/fyXHGPJas
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:39 2026 by rpki-client