Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/CD8C0430F99011EAB54DF63CC4F9AE02.roa
File:                     CD8C0430F99011EAB54DF63CC4F9AE02.roa (raw, json)
Hash identifier:          dCi6VvBG8Kieh+LiRI/8SoC0c+Kf0Pviv2GOgnuUocs=
Subject key identifier:   93:20:2E:F0:DC:D3:CA:10:22:1B:2B:38:02:C6:3A:85:D8:7D:71:2B
Certificate issuer:       /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Certificate serial:       0853
Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/CD8C0430F99011EAB54DF63CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:07:04 +0000
ROA not before:           Wed 08 Oct 2025 21:21:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141042
IP address blocks:        103.155.43.0/24 maxlen: 24
                          2001:df4:b180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl
                          rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2131 (0x853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91994D1, serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
        Validity
            Not Before: Oct  8 21:21:45 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a44808-c6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:0a:24:db:92:53:70:8f:29:fa:91:6b:f2:
                    74:65:cd:6e:88:e2:9a:08:cc:62:ad:10:7a:80:16:
                    c0:80:98:fb:e6:d1:87:f5:b8:31:0f:6b:27:49:1e:
                    f4:da:d7:9b:d2:de:27:91:95:4c:90:b0:72:8b:7c:
                    61:f1:70:ad:62:7d:80:64:17:36:d1:60:24:d5:f0:
                    ff:b3:8d:1e:86:44:8b:3a:f0:c0:1c:65:fb:ff:97:
                    5a:94:1a:68:d0:2c:2d:da:e5:39:f5:94:f2:85:09:
                    5c:28:a3:ae:d2:f1:da:45:71:fe:1c:92:40:0f:53:
                    b0:b7:30:56:83:96:f9:e9:02:ea:7f:fd:d1:19:72:
                    11:7c:b7:e7:0b:0b:0d:08:1a:0a:9c:14:47:d2:69:
                    dc:d4:f7:9a:74:6f:dc:e8:fa:67:f3:f0:61:03:37:
                    78:95:9c:b6:65:84:23:0f:0c:2c:72:79:ef:8f:ac:
                    8c:88:e7:6e:dd:61:c2:a8:6c:68:41:8c:7e:4b:9e:
                    99:9a:76:ad:0e:08:40:d4:f1:43:d3:ea:cf:e7:dd:
                    ac:7f:32:8c:4e:39:6e:78:7f:67:ba:17:78:0c:9e:
                    35:74:db:d5:96:ea:f9:f0:14:92:8c:5a:3e:24:17:
                    60:65:3d:8e:71:b8:4e:b9:b0:85:8f:74:7f:ff:73:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:20:2E:F0:DC:D3:CA:10:22:1B:2B:38:02:C6:3A:85:D8:7D:71:2B
            X509v3 Authority Key Identifier:
                keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/CD8C0430F99011EAB54DF63CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.43.0/24
                IPv6:
                  2001:df4:b180::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:dd:02:03:e6:87:55:27:58:fa:7e:ea:07:99:c0:4e:f3:20:
         b3:52:25:21:94:fe:1f:96:e6:03:4e:9e:0c:4e:6f:7f:42:34:
         00:7f:08:00:08:0b:47:e7:ee:3e:ec:ba:6b:0a:f0:20:24:72:
         19:0c:2e:0f:2c:8d:83:c3:13:23:37:54:93:2b:1b:c7:18:dd:
         44:c0:4d:48:3c:ad:e8:2b:32:0d:c8:29:52:a8:a9:e9:e2:8d:
         ea:26:e5:59:65:ce:39:b2:17:3b:d8:ce:a4:23:87:f8:2a:d3:
         22:b8:40:99:3b:77:ca:f4:b2:fe:c5:62:14:83:07:3c:8f:ee:
         94:2c:2b:59:99:77:80:1e:f2:6b:d3:f9:ec:0d:e2:13:fb:e9:
         37:06:08:df:01:22:81:e4:c9:df:72:68:18:fc:e0:b4:67:78:
         e3:a1:cd:a1:90:39:7d:d7:29:60:bc:3c:9e:ad:59:00:84:c5:
         30:a3:29:17:6e:91:43:af:3b:b6:b2:f4:5a:77:a8:f1:1e:11:
         26:d3:45:6d:35:bd:c9:4b:0d:09:60:d0:cd:1c:02:8c:b8:a0:
         0b:70:97:bd:c7:67:11:64:b8:c4:a0:89:e7:00:74:b2:b9:20:
         45:08:5b:27:3a:8d:b5:b3:64:b6:5d:e3:ab:34:56:98:f1:6f:
         12:30:ab:14
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk0RDExMTAvBgNVBAUTKEFDQTEyRkQ3REJCMjgzRjMyQ0RENzNDRkNFQ0YwNUQz
Q0I5QTg4QTEwHhcNMjUxMDA4MjEyMTQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDgwOC1jNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxzAKJNuSU3CPKfqRa/J0Zc1uiOKaCMxirRB6gBbAgJj75tGH9bgxD2snSR70
2teb0t4nkZVMkLByi3xh8XCtYn2AZBc20WAk1fD/s40ehkSLOvDAHGX7/5dalBpo
0Cwt2uU59ZTyhQlcKKOu0vHaRXH+HJJAD1OwtzBWg5b56QLqf/3RGXIRfLfnCwsN
CBoKnBRH0mnc1PeadG/c6Ppn8/BhAzd4lZy2ZYQjDwwscnnvj6yMiOdu3WHCqGxo
QYx+S56ZmnatDghA1PFD0+rP592sfzKMTjlueH9nuhd4DJ41dNvVlur58BSSjFo+
JBdgZT2OcbhOubCFj3R//3OsGQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJMgLvDc
08oQIhsrOALGOoXYfXErMB8GA1UdIwQYMBaAFKyhL9fbsoPzLN1zz87PBdPLmoih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTREMS83QkQyMUFGRUY5
N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdfTXMzWFBQenM4RjA4dWFp
S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JLRXYxOXV5Z19NczNYUFB6czhGMDh1YWlLRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTk0RDEvN0JEMjFBRkVGOTdCMTFFQUFDOTA1RTYyQzRGOUFFMDIvQ0Q4QzA0MzBG
OTkwMTFFQUI1NERGNjNDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ5srMA8EAgACMAkDBwAgAQ30sYAwDQYJKoZIhvcNAQELBQADggEB
AIPdAgPmh1UnWPp+6geZwE7zILNSJSGU/h+W5gNOngxOb39CNAB/CAAIC0fn7j7s
umsK8CAkchkMLg8sjYPDEyM3VJMrG8cY3UTATUg8regrMg3IKVKoqenijeom5Vll
zjmyFzvYzqQjh/gq0yK4QJk7d8r0sv7FYhSDBzyP7pQsK1mZd4Ae8mvT+ewN4hP7
6TcGCN8BIoHkyd9yaBj84LRneOOhzaGQOX3XKWC8PJ6tWQCExTCjKRdukUOvO7ay
9Fp3qPEeESbTRW01vclLDQlg0M0cAoy4oAtwl73HZxFkuMSgiecAdLK5IEUIWyc6
jbWzZLZd46s0VpjxbxIwqxQ=
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:22 2026 by rpki-client