Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/C93A47F63ABB11EE8A78BE4CC4F9AE02.roa
File:                     C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (raw, json)
Hash identifier:          kt58U+JdwwoWOrJfOurK3ZzukKhfcE+5o9qCOQ61N04=
Subject key identifier:   34:06:2E:96:0D:48:87:B9:93:2A:6F:CF:49:E6:67:10:70:64:68:9A
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       0282
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/C93A47F63ABB11EE8A78BE4CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:06:10 +0000
ROA not before:           Tue 15 Jul 2025 03:09:26 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150178
IP address blocks:        103.167.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
                          rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: Jul 15 03:09:26 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a455e2-082f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:d7:be:3c:c0:ed:ad:fa:f5:f2:57:bf:4e:
                    6a:b4:36:c7:ea:91:f8:b9:48:31:32:fd:87:9d:fc:
                    ef:b5:0b:ea:f1:7e:99:18:21:77:e4:ce:91:f9:d3:
                    e2:fa:83:82:8a:71:b5:62:dc:f3:e0:73:b4:32:a6:
                    84:26:99:bd:48:f2:9f:8a:a7:72:37:36:79:d9:1e:
                    a6:50:b3:92:14:84:e2:65:b2:04:84:97:61:1a:39:
                    8d:69:ba:8f:de:f1:de:a5:86:e8:17:53:a5:96:61:
                    bf:74:c1:a4:b1:32:3a:7b:2a:7e:64:cd:3d:e1:65:
                    bd:ff:24:10:c0:66:3e:bf:a5:9e:9c:fe:c0:58:b8:
                    d9:cf:9c:1e:d7:03:a2:49:a3:12:2f:9f:71:e2:20:
                    d4:c8:29:71:fc:3d:f1:5b:90:ce:8c:48:53:2e:38:
                    55:e4:7d:7d:5b:f2:99:e7:0e:d4:2c:ec:12:db:c0:
                    72:80:e9:ec:8d:de:33:f8:6b:f4:d6:24:d8:26:4a:
                    59:8e:11:a4:64:22:61:92:21:f5:cf:b1:7b:4e:ba:
                    bb:0d:7a:d2:ea:74:03:c0:a2:d6:66:c7:9b:c5:49:
                    ad:57:3e:2e:83:e7:23:c4:e5:35:2b:aa:0a:74:2a:
                    25:00:39:a4:20:fa:46:25:60:6b:81:16:cb:55:0a:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:06:2E:96:0D:48:87:B9:93:2A:6F:CF:49:E6:67:10:70:64:68:9A
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/C93A47F63ABB11EE8A78BE4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:84:9b:8a:63:c0:8e:82:ec:53:33:08:4e:1f:85:26:8d:82:
         f0:01:6e:95:44:1d:d7:ce:bd:2e:dd:6b:45:bc:4d:3c:2a:ab:
         49:e2:ac:2c:cb:b7:63:1a:ef:7c:98:0a:2d:b3:e9:30:7a:f3:
         bf:07:ca:97:54:e8:b8:0b:42:16:bf:a5:c1:d2:44:88:4d:92:
         bb:3b:95:61:4e:3c:f3:86:2a:f0:a0:8f:4c:ca:26:72:4b:f4:
         29:b9:0c:e2:3f:b4:55:b2:fc:4a:e8:61:d3:9e:c5:7e:fb:25:
         4c:71:6c:7e:5f:93:e2:08:9f:ac:1d:84:8a:07:18:b9:88:29:
         b1:b1:bd:f4:43:2d:f7:22:55:f9:11:92:fb:5b:4f:36:07:9a:
         07:96:78:d6:11:08:b7:c8:2f:4b:b9:4c:f3:05:1b:63:22:43:
         78:ac:24:f4:2f:80:21:63:f6:08:f5:0c:84:42:1f:26:71:8f:
         c6:f3:2c:92:2e:8d:24:12:1e:fd:7a:50:1a:18:38:16:e3:d2:
         5e:51:98:a5:54:a0:78:0b:bb:19:95:03:d0:ec:bc:54:09:07:
         be:c0:7d:dc:eb:0b:92:0d:0b:3b:9e:3f:85:96:6e:97:54:23:
         3e:25:6a:86:e4:19:ac:e7:a4:6e:78:d5:1a:65:78:ee:90:95:
         6b:9b:40:40
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw
QkIyQzUwREIwHhcNMjUwNzE1MDMwOTI2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTVlMi0wODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzR7XvjzA7a369fJXv05qtDbH6pH4uUgxMv2HnfzvtQvq8X6ZGCF35M6R+dPi
+oOCinG1Ytzz4HO0MqaEJpm9SPKfiqdyNzZ52R6mULOSFITiZbIEhJdhGjmNabqP
3vHepYboF1OllmG/dMGksTI6eyp+ZM094WW9/yQQwGY+v6WenP7AWLjZz5we1wOi
SaMSL59x4iDUyClx/D3xW5DOjEhTLjhV5H19W/KZ5w7ULOwS28BygOnsjd4z+Gv0
1iTYJkpZjhGkZCJhkiH1z7F7Trq7DXrS6nQDwKLWZsebxUmtVz4ug+cjxOU1K6oK
dColADmkIPpGJWBrgRbLVQp56wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDQGLpYN
SIe5kypvz0nmZxBwZGiaMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC
OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODk2RDQvNUU5RTY0MzQ3Qjk2MTFFRDhCREZFMzExQzRGOUFFMDIvQzkzQTQ3RjYz
QUJCMTFFRThBNzhCRTRDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6fQMA0GCSqGSIb3DQEBCwUAA4IBAQC7hJuKY8COguxTMwhOH4Um
jYLwAW6VRB3Xzr0u3WtFvE08KqtJ4qwsy7djGu98mAots+kwevO/B8qXVOi4C0IW
v6XB0kSITZK7O5VhTjzzhirwoI9MyiZyS/QpuQziP7RVsvxK6GHTnsV++yVMcWx+
X5PiCJ+sHYSKBxi5iCmxsb30Qy33IlX5EZL7W082B5oHlnjWEQi3yC9LuUzzBRtj
IkN4rCT0L4AhY/YI9QyEQh8mcY/G8yySLo0kEh79elAaGDgW49JeUZilVKB4C7sZ
lQPQ7LxUCQe+wH3c6wuSDQs7nj+Flm6XVCM+JWqG5Bms56RueNUaZXjukJVrm0BA
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:27:53 2026 by rpki-client