Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/70B738DADBEB11F189A4DF480C66CEF9.roa
File:                     70B738DADBEB11F189A4DF480C66CEF9.roa (raw, json)
Hash identifier:          UJieSngNUhTP1z8jz/cb1uF5D3TFwVjX0nZnQWADggw=
Subject key identifier:   49:F8:77:3D:D5:59:C1:81:31:52:66:53:B7:A8:0C:73:73:41:85:64
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       0631
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/70B738DADBEB11F189A4DF480C66CEF9.roa
Signing time:             Mon 09 Nov 2026 03:12:48 +0000
ROA not before:           Mon 09 Nov 2026 03:12:48 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     834
IP address blocks:        103.73.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Nov 2026 22:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Nov  9 03:12:48 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6af13a30-84d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:89:81:8f:f9:8a:36:f3:85:d5:c6:ef:d4:
                    26:89:fe:6b:d5:6d:b8:c0:98:16:fc:35:6b:10:41:
                    99:47:76:22:6f:b6:4c:80:dc:3d:7e:f7:16:89:37:
                    98:68:1f:f5:9b:dd:bb:b2:3b:7c:c6:8c:a2:c5:93:
                    fb:46:02:19:1a:a0:ff:90:ba:3c:d0:34:de:f2:f3:
                    45:a7:2c:08:5b:62:dd:40:04:a0:d9:1b:9e:f4:f8:
                    86:dd:03:79:c6:a7:08:e4:ef:7e:42:ff:31:44:93:
                    be:51:bf:5d:c2:37:7b:ff:f2:dd:7c:5a:89:80:88:
                    bb:8a:45:2a:28:99:6a:11:aa:11:12:3c:e4:3e:82:
                    1b:36:fc:7b:40:ff:42:5b:c0:e1:09:38:e7:68:e3:
                    84:5b:72:04:40:63:d7:e7:60:7b:46:8d:77:e3:17:
                    4a:9c:e7:96:91:88:d9:2c:44:71:d5:4f:8b:5e:6b:
                    de:19:1d:40:8c:bd:7d:27:bc:a1:3f:6a:b2:f7:b3:
                    16:b2:b0:23:2f:4b:30:a7:9e:04:a4:c5:74:11:e8:
                    90:c6:e4:f6:85:a0:0e:41:51:17:6d:df:42:d9:73:
                    e7:30:b2:ae:4a:3e:e9:a5:d2:a4:c8:d3:e8:3e:48:
                    8f:b4:47:96:a2:41:00:c9:ee:db:56:15:ae:7a:d8:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F8:77:3D:D5:59:C1:81:31:52:66:53:B7:A8:0C:73:73:41:85:64
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/70B738DADBEB11F189A4DF480C66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d5:28:4c:ab:6a:6c:80:0e:ba:4e:6f:cd:59:08:22:55:2d:
         6d:87:66:d5:ef:27:93:6c:cf:1b:fc:91:ef:0d:05:3b:db:08:
         f5:7e:c7:bc:45:8f:13:43:b7:81:0f:51:94:06:d9:dd:e1:44:
         66:e3:60:f1:01:c9:7c:19:0b:a4:38:4c:1c:2b:81:0e:47:15:
         45:05:22:fd:d9:c8:16:33:9f:f6:f2:37:0e:18:54:24:55:43:
         42:38:67:4a:8e:44:c9:e2:90:1d:9f:c8:4e:94:e0:c8:a0:8d:
         fa:f4:fb:12:a0:ad:90:ae:45:6d:67:21:bb:97:0e:18:92:be:
         13:46:ff:fe:25:b5:38:36:e0:36:79:b8:e2:3f:60:41:ad:5c:
         39:59:29:9a:f0:5f:80:a9:86:3d:48:53:79:5f:94:aa:42:a0:
         85:2d:8b:d4:ea:a5:69:94:b9:01:7f:b6:b1:f7:92:40:bf:b5:
         ec:0d:f9:0e:95:26:29:a3:f6:af:93:1a:6f:70:f3:b4:ef:dc:
         4a:ad:d6:4c:c0:48:10:19:a1:fe:76:b3:5e:d8:ca:17:de:c8:
         f9:22:28:f0:48:c0:71:29:3a:9d:ba:31:c5:64:74:db:f8:2d:
         fa:f7:a4:02:5d:f5:90:36:ea:70:8b:59:37:c4:81:3e:d1:c7:
         df:77:20:2f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew
OTA2RkVEODIwHhcNMjYxMTA5MDMxMjQ4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWYxM2EzMC04NGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnVuJgY/5ijbzhdXG79Qmif5r1W24wJgW/DVrEEGZR3Yib7ZMgNw9fvcWiTeY
aB/1m927sjt8xoyixZP7RgIZGqD/kLo80DTe8vNFpywIW2LdQASg2Rue9PiG3QN5
xqcI5O9+Qv8xRJO+Ub9dwjd7//LdfFqJgIi7ikUqKJlqEaoREjzkPoIbNvx7QP9C
W8DhCTjnaOOEW3IEQGPX52B7Ro134xdKnOeWkYjZLERx1U+LXmveGR1AjL19J7yh
P2qy97MWsrAjL0swp54EpMV0EeiQxuT2haAOQVEXbd9C2XPnMLKuSj7ppdKkyNPo
PkiPtEeWokEAye7bVhWueth97QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEn4dz3V
WcGBMVJmU7eoDHNzQYVkMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF
NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg4RDQvMkY1OEU0NzIyRTUwMTFFQ0EwNEI2QzI1QzRGOUFFMDIvNzBCNzM4REFE
QkVCMTFGMTg5QTRERjQ4MEM2NkNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0neMA0GCSqGSIb3DQEBCwUAA4IBAQAG1ShMq2psgA66Tm/NWQgi
VS1th2bV7yeTbM8b/JHvDQU72wj1fse8RY8TQ7eBD1GUBtnd4URm42DxAcl8GQuk
OEwcK4EORxVFBSL92cgWM5/28jcOGFQkVUNCOGdKjkTJ4pAdn8hOlODIoI369PsS
oK2QrkVtZyG7lw4Ykr4TRv/+JbU4NuA2ebjiP2BBrVw5WSma8F+AqYY9SFN5X5Sq
QqCFLYvU6qVplLkBf7ax95JAv7XsDfkOlSYpo/avkxpvcPO079xKrdZMwEgQGaH+
drNe2MoX3sj5IijwSMBxKTqdujHFZHTb+C3696QCXfWQNupwi1k3xIE+0cffdyAv
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:49:02 2026 by rpki-client