Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/EF9C17344E9611F1BFD1AE0BBC833773.roa
File:                     EF9C17344E9611F1BFD1AE0BBC833773.roa (raw, json)
Hash identifier:          gAKPkvfXsAOzOcaRCMLahWRXkGysJXYsTu5Osr0QToM=
Subject key identifier:   AC:6D:FB:EC:A3:13:E4:7F:27:E8:7F:81:D6:AD:66:A4:51:06:C5:BF
Certificate issuer:       /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial:       1B69
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/EF9C17344E9611F1BFD1AE0BBC833773.roa
Signing time:             Wed 13 May 2026 06:42:40 +0000
ROA not before:           Wed 13 May 2026 06:42:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        103.93.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
                          rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7017 (0x1b69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
        Validity
            Not Before: May 13 06:42:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a041d60-1461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:14:5c:28:78:2c:74:6f:02:f6:53:90:c8:
                    26:4c:44:ed:e1:50:a8:a0:d1:fd:9f:55:85:b3:a6:
                    8a:48:28:3a:9b:2e:9a:df:4a:e0:cb:8a:ef:7a:6b:
                    04:69:03:85:e9:3d:be:01:bd:69:cd:b8:c1:ba:da:
                    06:ff:48:97:9b:c8:6f:7e:76:35:07:29:f0:85:28:
                    4f:42:9e:6b:5e:91:33:a8:cd:c0:f9:0d:1a:d8:f6:
                    67:79:41:60:bb:fb:2a:32:e7:d8:14:1c:b0:02:90:
                    6c:ec:7b:eb:6a:a9:df:5e:70:02:a2:de:4b:12:e3:
                    bd:99:e2:07:eb:02:73:fc:90:d6:25:6b:46:cb:2c:
                    09:61:bd:5f:9b:5c:e8:c2:2f:3c:09:e4:f2:d5:52:
                    4e:6d:29:da:06:9c:a6:2d:2c:5c:a7:61:10:4d:ef:
                    5f:48:a4:94:7b:d3:aa:6b:a0:fe:5c:47:a4:1b:88:
                    6d:0c:ac:92:fd:f2:19:af:2d:be:cd:9d:44:e7:70:
                    10:26:77:bc:e9:90:b1:22:31:89:90:dd:e6:1b:3d:
                    4d:41:2b:74:4b:d2:b8:a3:4a:9d:b3:46:26:26:fe:
                    98:cd:57:9c:c5:26:f7:e4:cb:d0:4d:6d:4f:1e:7f:
                    77:05:0c:49:a0:61:89:31:fc:50:28:1b:04:6e:47:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6D:FB:EC:A3:13:E4:7F:27:E8:7F:81:D6:AD:66:A4:51:06:C5:BF
            X509v3 Authority Key Identifier:
                keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/EF9C17344E9611F1BFD1AE0BBC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:15:46:44:2a:d0:e7:38:e1:a7:6e:25:01:6a:7f:0b:ab:7b:
         e1:e8:0e:e4:23:d7:75:96:e0:2f:64:1c:ff:c4:03:46:ac:94:
         b7:b3:a0:85:f2:6e:32:73:fd:e1:a1:07:7c:60:29:be:bc:f3:
         bd:36:fe:af:71:78:2c:3e:2c:8c:ab:a1:55:99:88:f8:0e:30:
         9b:b4:4c:e2:e7:83:91:47:aa:b5:f0:98:a3:41:b4:6c:58:49:
         84:14:7d:31:b4:5f:8a:af:b4:16:35:7f:59:9d:bc:b0:c0:df:
         ef:d6:db:57:f3:c4:49:7d:1e:a5:34:de:db:f8:a2:d4:bb:50:
         e4:26:81:e4:39:61:08:df:9e:6b:26:11:bb:43:f8:f9:7f:3c:
         2e:87:64:47:90:1a:42:da:19:aa:3c:39:24:00:34:d4:41:4d:
         4c:06:07:33:a9:49:b5:a0:09:e4:ed:b6:b9:c5:24:4b:5e:ac:
         11:8e:06:03:a5:47:cd:a5:e8:86:9c:2e:fa:14:c6:79:4f:ef:
         45:d1:aa:b5:5d:f3:e5:de:45:86:35:66:f5:f8:6c:2d:fc:90:
         20:66:63:d4:2f:dc:f3:7c:2b:71:b1:c4:a1:59:2d:a4:9e:94:
         f9:9e:e2:1d:77:e6:d2:e1:3b:29:46:0a:d4:6f:5f:5f:f0:d2:
         4c:f0:78:99
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICG2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG
ODhFMzlFRUYwHhcNMjYwNTEzMDY0MjQwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTA0MWQ2MC0xNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtusUXCh4LHRvAvZTkMgmTETt4VCooNH9n1WFs6aKSCg6my6a30rgy4rvemsE
aQOF6T2+Ab1pzbjButoG/0iXm8hvfnY1BynwhShPQp5rXpEzqM3A+Q0a2PZneUFg
u/sqMufYFBywApBs7HvraqnfXnACot5LEuO9meIH6wJz/JDWJWtGyywJYb1fm1zo
wi88CeTy1VJObSnaBpymLSxcp2EQTe9fSKSUe9Oqa6D+XEekG4htDKyS/fIZry2+
zZ1E53AQJne86ZCxIjGJkN3mGz1NQSt0S9K4o0qds0YmJv6YzVecxSb35MvQTW1P
Hn93BQxJoGGJMfxQKBsEbkcKJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKxt++yj
E+R/J+h/gdatZqRRBsW/MB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5
Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUY2QTgvRjNCRDRDMzY0OUNCMTFFN0E0QTg3QzdCQzRGOUFFMDIvRUY5QzE3MzQ0
RTk2MTFGMUJGRDFBRTBCQkM4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ139MA0GCSqGSIb3DQEBCwUAA4IBAQAkFUZEKtDnOOGnbiUBan8L
q3vh6A7kI9d1luAvZBz/xANGrJS3s6CF8m4yc/3hoQd8YCm+vPO9Nv6vcXgsPiyM
q6FVmYj4DjCbtEzi54ORR6q18JijQbRsWEmEFH0xtF+Kr7QWNX9ZnbywwN/v1ttX
88RJfR6lNN7b+KLUu1DkJoHkOWEI355rJhG7Q/j5fzwuh2RHkBpC2hmqPDkkADTU
QU1MBgczqUm1oAnk7ba5xSRLXqwRjgYDpUfNpeiGnC76FMZ5T+9F0aq1XfPl3kWG
NWb1+Gwt/JAgZmPUL9zzfCtxscShWS2knpT5nuIdd+bS4TspRgrUb19f8NJM8HiZ
-----END CERTIFICATE-----
Generated at Wed May 13 14:09:27 2026 by rpki-client