Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/921935A27F2D11F1886CE3C28DA30FBC.roa
File:                     921935A27F2D11F1886CE3C28DA30FBC.roa (raw, json)
Hash identifier:          vtLEoqPGykODmNwJqfTaMIZyx7FncJ7Zotaqf3xPNUc=
Subject key identifier:   CA:86:F4:AA:B7:F1:90:3D:49:72:AA:77:BD:43:F1:54:87:13:A3:AD
Certificate issuer:       /CN=A9194093/serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
Certificate serial:       90
Authority key identifier: 2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/921935A27F2D11F1886CE3C28DA30FBC.roa
Signing time:             Tue 14 Jul 2026 02:41:53 +0000
ROA not before:           Tue 14 Jul 2026 02:41:53 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     136050
IP address blocks:        103.175.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl
                          rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194093, serialNumber=2D7356DA171BFD6403CD9F33E3DB95B44CB4BF1D
        Validity
            Not Before: Jul 14 02:41:53 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a55a1f1-b29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:62:df:7a:f1:20:6b:39:f2:32:0b:c5:6c:
                    66:30:36:11:15:0e:5a:10:9b:88:9d:cd:9f:fd:ea:
                    fb:dc:aa:49:b6:02:f1:e9:e6:90:db:e3:4b:44:21:
                    7f:14:69:2c:c0:c9:8a:4b:25:27:f6:66:72:32:67:
                    e9:ab:88:3a:d8:09:69:16:c8:c5:34:de:54:5b:8c:
                    4c:8e:3c:6e:4d:4e:86:51:ac:ce:47:87:62:76:e6:
                    06:2e:09:1c:da:eb:69:a9:5c:6e:31:69:5b:f0:46:
                    35:67:f8:8f:0b:c2:ba:fe:3e:66:0b:df:98:9d:a4:
                    de:b8:61:41:18:43:86:69:54:9f:5e:de:ae:bf:d2:
                    91:ab:f4:2a:ce:4d:ec:2f:49:74:3b:32:63:84:15:
                    65:ec:df:a4:00:78:93:56:4b:5b:6a:f9:8d:09:cb:
                    ff:36:d0:7f:7e:96:4b:46:22:97:82:05:c6:2e:31:
                    f6:25:0d:f1:8a:85:58:91:bd:53:82:3d:99:57:88:
                    01:19:fb:e6:05:ff:2d:76:27:d9:e2:7e:6b:92:2e:
                    41:89:b9:d1:37:32:a2:c4:af:18:a9:2d:43:c8:82:
                    22:43:b5:4c:b5:4b:1a:c0:6e:89:2c:e4:de:e6:4f:
                    1d:65:00:f7:24:3d:47:d1:e3:ae:39:9c:42:f7:d2:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:86:F4:AA:B7:F1:90:3D:49:72:AA:77:BD:43:F1:54:87:13:A3:AD
            X509v3 Authority Key Identifier:
                keyid:2D:73:56:DA:17:1B:FD:64:03:CD:9F:33:E3:DB:95:B4:4C:B4:BF:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/LXNW2hcb_WQDzZ8z49uVtEy0vx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXNW2hcb_WQDzZ8z49uVtEy0vx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194093/CFA0F992C7A311F087190122C4F9AE02/921935A27F2D11F1886CE3C28DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:4f:17:6e:ea:71:70:c9:52:86:40:7d:c9:9c:66:fd:a7:84:
         a7:3a:a6:d3:1d:e8:17:41:a0:3c:39:19:08:88:30:fe:b4:a2:
         1c:7c:d3:01:ce:76:f9:1e:78:0c:b6:eb:ab:cc:44:03:68:32:
         f0:e3:c7:49:93:1b:f7:7b:30:91:74:aa:f7:54:f6:2a:92:2e:
         79:04:f9:19:cb:8c:57:ac:81:18:e8:40:82:c2:2a:16:f2:ff:
         24:c5:87:c6:d8:a8:45:7c:cb:bc:da:19:25:65:64:bc:38:fc:
         8b:db:4a:fa:7e:7c:db:45:5a:c1:4b:5a:11:de:ad:fe:87:ba:
         5e:95:d1:d8:63:ef:63:64:80:8a:70:21:6f:1f:7b:75:63:1d:
         31:1c:88:7d:d9:ee:ae:ca:70:c4:9f:91:38:ee:11:43:df:b5:
         fb:66:e3:f4:b2:6f:42:0f:d0:d7:63:49:96:15:19:e9:59:23:
         0b:ec:37:c3:d4:e0:25:40:8d:d7:94:be:80:80:a4:2b:ec:d0:
         76:37:04:f3:7d:86:58:17:10:b9:dd:29:21:1d:54:93:d5:84:
         ab:bc:34:fa:ad:63:37:02:90:95:46:39:f0:10:60:bc:10:03:
         87:9f:2f:c1:5d:a2:da:fe:ee:72:1c:e0:e5:55:4c:e9:c7:83:
         b9:7e:9e:c5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQwOTMxMTAvBgNVBAUTKDJENzM1NkRBMTcxQkZENjQwM0NEOUYzM0UzREI5NUI0
NENCNEJGMUQwHhcNMjYwNzE0MDI0MTUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU1YTFmMS1iMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsldi33rxIGs58jILxWxmMDYRFQ5aEJuInc2f/er73KpJtgLx6eaQ2+NLRCF/
FGkswMmKSyUn9mZyMmfpq4g62AlpFsjFNN5UW4xMjjxuTU6GUazOR4diduYGLgkc
2utpqVxuMWlb8EY1Z/iPC8K6/j5mC9+YnaTeuGFBGEOGaVSfXt6uv9KRq/Qqzk3s
L0l0OzJjhBVl7N+kAHiTVktbavmNCcv/NtB/fpZLRiKXggXGLjH2JQ3xioVYkb1T
gj2ZV4gBGfvmBf8tdifZ4n5rki5BibnRNzKixK8YqS1DyIIiQ7VMtUsawG6JLOTe
5k8dZQD3JD1H0eOuOZxC99LztQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMqG9Kq3
8ZA9SXKqd71D8VSHE6OtMB8GA1UdIwQYMBaAFC1zVtoXG/1kA82fM+PblbRMtL8d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDA5My9DRkEwRjk5MkM3
QTMxMUYwODcxOTAxMjJDNEY5QUUwMi9MWE5XMmhjYl9XUUR6Wjh6NDl1VnRFeTB2
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xYTlcyaGNiX1dRRHpaOHo0OXVWdEV5MHZ4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTQwOTMvQ0ZBMEY5OTJDN0EzMTFGMDg3MTkwMTIyQzRGOUFFMDIvOTIxOTM1QTI3
RjJEMTFGMTg4NkNFM0MyOERBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6+AMA0GCSqGSIb3DQEBCwUAA4IBAQBPTxdu6nFwyVKGQH3JnGb9
p4SnOqbTHegXQaA8ORkIiDD+tKIcfNMBznb5HngMtuurzEQDaDLw48dJkxv3ezCR
dKr3VPYqki55BPkZy4xXrIEY6ECCwioW8v8kxYfG2KhFfMu82hklZWS8OPyL20r6
fnzbRVrBS1oR3q3+h7peldHYY+9jZICKcCFvH3t1Yx0xHIh92e6uynDEn5E47hFD
37X7ZuP0sm9CD9DXY0mWFRnpWSML7DfD1OAlQI3XlL6AgKQr7NB2NwTzfYZYFxC5
3SkhHVST1YSrvDT6rWM3ApCVRjnwEGC8EAOHny/BXaLa/u5yHODlVUzpx4O5fp7F
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:09 2026 by rpki-client