Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa
File:                     F5D6B6B8810811ED9EA03683C4F9AE02.roa (raw, json)
Hash identifier:          YhFFk2hbxX7ipWmiEtRtt5VM5YND4GHLWqHWN4WPPew=
Subject key identifier:   75:20:6B:0C:2E:0B:92:ED:E0:DF:22:E0:71:98:0D:3A:C4:86:81:09
Certificate issuer:       /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial:       0261
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:05:58 +0000
ROA not before:           Sun 03 Aug 2025 03:10:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.190.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
                          rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
        Validity
            Not Before: Aug  3 03:10:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40f86-b0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:72:f5:6a:ca:60:25:51:a7:44:9d:41:d3:
                    33:5f:3f:bb:d2:e9:b5:1f:9e:16:30:85:0c:b0:01:
                    bb:53:72:62:72:db:4a:29:0d:c7:d4:36:10:da:63:
                    75:1d:1a:5f:41:74:20:22:a6:0d:31:82:36:a6:6e:
                    67:59:7b:d0:46:5e:fd:43:7d:2a:c5:1d:ef:ac:4d:
                    90:bb:d2:43:93:8b:a5:6a:66:65:ed:66:82:6b:d5:
                    15:81:b0:36:26:a9:f1:e7:8d:3c:f0:14:c0:ed:f3:
                    88:b1:39:0b:3a:86:d8:05:fb:6d:9d:5c:c9:16:b2:
                    de:e2:8d:c9:35:fb:b3:7a:19:e3:72:c7:c8:a6:90:
                    f5:9a:5b:12:0f:03:b0:96:70:02:a4:c8:6f:b2:0a:
                    a9:d6:4d:10:7b:73:0e:f5:53:6c:98:4a:06:9b:ef:
                    89:65:f2:d7:d5:2c:0d:c3:4c:2d:9c:96:4c:a0:42:
                    d0:9e:a9:a8:e1:84:32:de:48:e3:bd:ff:e0:8a:57:
                    f0:89:c6:1d:67:89:24:29:57:7a:2c:e3:46:8b:f0:
                    87:b9:f9:0b:7e:e2:10:d6:1c:88:51:bd:38:86:36:
                    93:0f:14:25:6a:3d:59:4a:a3:d5:62:57:8b:b8:51:
                    c3:b7:32:be:cd:05:27:00:30:b8:54:83:eb:d9:11:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:20:6B:0C:2E:0B:92:ED:E0:DF:22:E0:71:98:0D:3A:C4:86:81:09
            X509v3 Authority Key Identifier:
                keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:8e:f3:32:8c:8e:30:c5:c1:a6:3d:50:c7:98:bc:8a:3f:8c:
         68:3d:a2:ea:4d:64:ca:ea:ca:73:38:b0:4f:70:1e:33:03:45:
         8d:2d:91:58:d2:55:14:8e:19:34:f3:ad:6d:dc:9e:97:0d:ff:
         a7:f7:33:4f:02:29:cb:fd:97:7b:93:dc:7c:8b:22:7e:af:e2:
         98:61:96:99:be:cd:b5:3b:68:61:e3:55:34:af:56:77:94:a4:
         8c:39:ed:2b:91:88:dd:7f:96:3d:ac:b9:dd:dd:c4:bf:62:10:
         20:03:f3:71:83:98:a5:20:c8:a7:9a:ec:0e:6e:e2:a9:ea:b5:
         3f:c9:8b:ba:7c:60:79:18:3b:e9:81:d5:7c:3e:c6:92:a4:bd:
         06:7e:6e:9d:86:36:76:ba:d5:9b:ac:b6:c3:8d:45:e0:0a:dc:
         9d:86:dd:02:eb:37:ac:ec:4b:51:f5:b4:fb:8f:27:14:e5:d5:
         e8:a9:aa:bb:1e:8e:75:9c:05:51:bf:d8:a7:51:2f:a2:6e:53:
         05:67:ed:93:68:42:e4:6b:ab:37:3d:74:9b:d7:45:17:e4:b5:
         a7:3e:cc:16:59:c3:9d:56:65:f2:fe:be:db:80:56:00:4c:b8:
         cf:63:c9:a7:c8:b6:e9:2f:da:55:47:62:23:c3:63:b1:9c:4d:
         84:50:a8:cd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1
N0U4QzEzQ0UwHhcNMjUwODAzMDMxMDM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGY4Ni1iMGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApnxy9WrKYCVRp0SdQdMzXz+70um1H54WMIUMsAG7U3JicttKKQ3H1DYQ2mN1
HRpfQXQgIqYNMYI2pm5nWXvQRl79Q30qxR3vrE2Qu9JDk4ulamZl7WaCa9UVgbA2
Jqnx54088BTA7fOIsTkLOobYBfttnVzJFrLe4o3JNfuzehnjcsfIppD1mlsSDwOw
lnACpMhvsgqp1k0Qe3MO9VNsmEoGm++JZfLX1SwNw0wtnJZMoELQnqmo4YQy3kjj
vf/gilfwicYdZ4kkKVd6LONGi/CHufkLfuIQ1hyIUb04hjaTDxQlaj1ZSqPVYleL
uFHDtzK+zQUnADC4VIPr2RHTgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHUgawwu
C5Lt4N8i4HGYDTrEhoEJMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx
MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzgxQzAvMkYyODlFRDY4MTA0MTFFREJFQzY1MDg3QzRGOUFFMDIvRjVENkI2Qjg4
MTA4MTFFRDlFQTAzNjgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ76mMA0GCSqGSIb3DQEBCwUAA4IBAQA4jvMyjI4wxcGmPVDHmLyK
P4xoPaLqTWTK6spzOLBPcB4zA0WNLZFY0lUUjhk0861t3J6XDf+n9zNPAinL/Zd7
k9x8iyJ+r+KYYZaZvs21O2hh41U0r1Z3lKSMOe0rkYjdf5Y9rLnd3cS/YhAgA/Nx
g5ilIMinmuwObuKp6rU/yYu6fGB5GDvpgdV8PsaSpL0Gfm6dhjZ2utWbrLbDjUXg
Ctydht0C6zes7EtR9bT7jycU5dXoqaq7Ho51nAVRv9inUS+iblMFZ+2TaELka6s3
PXSb10UX5LWnPswWWcOdVmXy/r7bgFYATLjPY8mnyLbpL9pVR2Ijw2OxnE2EUKjN
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:21 2026 by rpki-client