Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/56E0B60AFC1F11EF8049634BC4F9AE02.roa
File:                     56E0B60AFC1F11EF8049634BC4F9AE02.roa (raw, json)
Hash identifier:          u6RBL1wCnkoCEYC9o8nCXGx/B/CjQLd9J84B3gl+uE8=
Subject key identifier:   7C:A9:D5:3A:2A:02:EC:B0:6D:A5:14:01:18:61:66:C0:5F:AB:F3:6F
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       06C4
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/56E0B60AFC1F11EF8049634BC4F9AE02.roa
Signing time:             Tue 22 Sep 2026 22:45:04 +0000
ROA not before:           Tue 22 Sep 2026 22:45:04 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     40065
IP address blocks:        103.172.134.0/24 maxlen: 24
                          103.172.135.0/24 maxlen: 24
                          2407:d340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
                          rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Sep 22 22:45:04 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab304f0-81b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8b:76:43:c3:0c:db:cd:71:48:b1:9b:b2:4b:
                    50:1a:a9:0d:7e:80:06:98:69:b5:a0:bd:53:86:44:
                    4d:3e:77:db:c3:7e:09:24:88:99:39:0e:28:a7:d6:
                    c1:b3:c6:4c:25:85:32:ff:22:68:a5:76:13:c2:9d:
                    66:96:2c:21:d8:ec:02:81:c7:67:64:1e:42:ff:fd:
                    56:34:51:c4:da:6e:e4:59:32:74:0e:6c:97:f0:cc:
                    94:93:bf:7e:9b:40:56:71:57:7a:77:bb:7e:e8:5d:
                    18:b0:7c:96:13:a9:6e:c8:cc:6d:26:94:60:19:5f:
                    25:6f:48:7d:ee:37:3d:d3:02:89:6f:ee:bc:5a:95:
                    52:97:0d:88:8a:52:cc:49:58:31:fa:b4:81:fd:41:
                    31:42:b1:6e:d2:ee:86:c8:da:f2:9b:fb:f4:2b:37:
                    9d:2f:a4:1c:dc:58:52:f1:01:fb:56:d3:90:2e:b5:
                    27:15:8d:97:36:ac:5c:94:3b:6e:4b:5e:12:53:4b:
                    0d:6e:16:1e:f1:5a:52:de:bf:84:41:7c:fe:09:73:
                    78:e9:b2:ff:68:c5:ff:0d:25:fd:20:de:0a:a5:ac:
                    48:2d:18:eb:15:dc:19:f6:87:c7:27:08:cd:90:84:
                    dc:d1:d0:37:5f:09:5f:28:de:9e:67:96:1f:35:a2:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A9:D5:3A:2A:02:EC:B0:6D:A5:14:01:18:61:66:C0:5F:AB:F3:6F
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/56E0B60AFC1F11EF8049634BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.134.0/23
                IPv6:
                  2407:d340::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:e5:05:95:64:fb:35:95:52:3d:a2:8f:a7:6f:69:05:85:33:
         13:13:18:b5:cf:6e:5f:3a:37:bc:b8:85:01:6a:99:2a:55:95:
         1f:0f:12:9a:25:bb:ec:61:08:e9:2f:49:25:10:57:58:17:c5:
         e9:ca:53:85:a4:af:d1:fb:3c:e3:04:b6:b1:ae:ce:d0:6c:a8:
         b2:b7:76:a3:2b:8e:0b:bf:14:2f:97:84:0c:a0:8e:8e:d3:84:
         df:83:10:64:c2:d3:2e:02:d6:98:a2:72:86:78:76:60:dd:10:
         20:b3:b6:9a:3f:1a:16:92:e3:a4:4c:63:cc:ab:c9:db:a6:af:
         65:48:72:79:2b:7f:f1:f4:b7:f8:6a:c0:d0:76:23:82:75:a9:
         32:c5:88:02:0f:36:e7:f0:33:61:17:8b:83:f8:7c:41:73:b1:
         99:cf:1a:99:02:43:ef:4e:23:5d:a1:25:cc:03:8c:3c:f4:e4:
         b0:6b:f3:96:66:c9:fa:6b:c7:37:80:ae:a2:04:89:f1:ad:bc:
         25:0b:9c:1c:3b:82:33:fc:54:bd:75:0f:1b:c1:c8:1c:ae:33:
         26:67:17:2b:d6:c3:9b:02:c1:87:bb:de:bb:f1:ef:8e:67:70:
         3c:2a:e6:6d:f3:b5:40:46:78:0d:0d:60:33:55:c5:36:fc:6a:
         b9:34:1c:2f
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2
QzY2MkFGRDUwHhcNMjYwOTIyMjI0NTA0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIzMDRmMC04MWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8ot2Q8MM281xSLGbsktQGqkNfoAGmGm1oL1ThkRNPnfbw34JJIiZOQ4op9bB
s8ZMJYUy/yJopXYTwp1mliwh2OwCgcdnZB5C//1WNFHE2m7kWTJ0DmyX8MyUk79+
m0BWcVd6d7t+6F0YsHyWE6luyMxtJpRgGV8lb0h97jc90wKJb+68WpVSlw2IilLM
SVgx+rSB/UExQrFu0u6GyNrym/v0KzedL6Qc3FhS8QH7VtOQLrUnFY2XNqxclDtu
S14SU0sNbhYe8VpS3r+EQXz+CXN46bL/aMX/DSX9IN4KpaxILRjrFdwZ9ofHJwjN
kITc0dA3XwlfKN6eZ5YfNaLrWwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHyp1Toq
AuywbaUUARhhZsBfq/NvMB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC
MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvNTZFMEI2MEFG
QzFGMTFFRjgwNDk2MzRCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ6yGMA0EAgACMAcDBQAkB9NAMA0GCSqGSIb3DQEBCwUAA4IBAQBP
5QWVZPs1lVI9oo+nb2kFhTMTExi1z25fOje8uIUBapkqVZUfDxKaJbvsYQjpL0kl
EFdYF8XpylOFpK/R+zzjBLaxrs7QbKiyt3ajK44LvxQvl4QMoI6O04TfgxBkwtMu
AtaYonKGeHZg3RAgs7aaPxoWkuOkTGPMq8nbpq9lSHJ5K3/x9Lf4asDQdiOCdaky
xYgCDzbn8DNhF4uD+HxBc7GZzxqZAkPvTiNdoSXMA4w89OSwa/OWZsn6a8c3gK6i
BInxrbwlC5wcO4Iz/FS9dQ8bwcgcrjMmZxcr1sObAsGHu9678e+OZ3A8KuZt87VA
RngNDWAzVcU2/Gq5NBwv
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:28:08 2026 by rpki-client