Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/E75FB4F0CE4A11EE95C15E20C4F9AE02.roa
File:                     E75FB4F0CE4A11EE95C15E20C4F9AE02.roa (raw, json)
Hash identifier:          VOuSl10nDbGYce++IROj56tt7FaPfuOY+khidDuWXx0=
Subject key identifier:   43:00:E6:52:10:BB:E9:DF:E8:BC:1F:8C:5C:DC:69:41:27:11:5B:9F
Certificate issuer:       /CN=A91A1CAA/serialNumber=617F054E3CE451E0C3E7F446DD09F7864652B656
Certificate serial:       01AE
Authority key identifier: 61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/E75FB4F0CE4A11EE95C15E20C4F9AE02.roa
Signing time:             Mon 11 May 2026 04:36:16 +0000
ROA not before:           Mon 11 May 2026 04:36:16 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     30402
IP address blocks:        103.147.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl
                          rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1CAA, serialNumber=617F054E3CE451E0C3E7F446DD09F7864652B656
        Validity
            Not Before: May 11 04:36:16 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a015cc0-689e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:6d:3a:0d:19:40:4f:cb:c4:31:53:26:44:
                    74:b8:3a:10:20:3d:6c:d4:b9:81:47:20:f3:e7:22:
                    14:2d:e5:0c:d4:86:73:05:e3:26:ec:cc:51:4c:cb:
                    df:53:d1:8c:99:e3:e0:d3:0d:07:eb:e4:9a:b2:f4:
                    61:29:5e:41:13:de:e3:31:f5:7a:87:8b:27:7f:d9:
                    ef:09:7a:a9:c0:a1:03:f7:71:7e:bd:a5:18:d0:1b:
                    f0:06:69:b8:3d:23:97:d6:86:a9:27:8a:a7:07:03:
                    6d:51:04:32:71:14:23:12:f2:c5:93:1a:a0:5c:69:
                    8d:10:9c:cf:16:d2:df:fd:26:6f:2e:1f:f8:94:45:
                    4b:50:e6:21:96:ea:e5:4d:d8:65:ca:39:3d:dd:07:
                    51:0c:f7:2c:f2:21:96:c5:1b:75:d1:42:d6:fa:21:
                    4a:de:82:be:d6:50:e1:05:13:98:45:96:63:d5:1b:
                    d6:09:f3:10:85:b8:88:04:2e:67:f5:77:26:d1:ad:
                    78:91:b9:41:dd:50:60:65:b7:62:65:21:8e:81:0b:
                    6e:0e:d0:fb:15:77:89:05:32:f0:89:1e:0e:5c:a7:
                    e5:5b:99:72:85:a0:8b:e5:ab:0f:1e:c2:0a:8d:19:
                    2f:4d:f6:2c:8d:32:91:36:ed:83:13:41:3c:a9:ac:
                    6a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:00:E6:52:10:BB:E9:DF:E8:BC:1F:8C:5C:DC:69:41:27:11:5B:9F
            X509v3 Authority Key Identifier:
                keyid:61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/E75FB4F0CE4A11EE95C15E20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:16:89:79:39:94:a4:0f:ee:01:f0:8d:80:1c:7c:28:21:b0:
         2b:c4:c9:16:33:0e:9e:c8:32:b4:ed:0d:6f:b8:89:07:e5:50:
         2b:30:f8:5b:c6:53:3f:48:07:da:32:47:a7:ed:25:c4:31:be:
         a8:df:23:cc:9d:f1:21:0e:74:34:22:2b:67:69:4e:8d:26:d3:
         6b:a4:5d:2f:f6:ec:ac:eb:7c:cd:0f:7d:75:3b:fa:a2:5d:b1:
         a9:e2:e4:22:3f:10:dd:ed:d4:0d:2f:36:79:68:f6:6f:44:79:
         82:87:ed:81:71:5d:5b:7d:fa:2e:76:2b:b1:9f:9e:86:83:60:
         12:a0:60:38:84:55:c8:71:db:6d:ea:41:aa:fc:27:a2:bb:92:
         58:2a:14:69:01:ce:33:ee:f0:38:41:97:45:ea:1c:c0:ad:14:
         e5:87:12:38:90:a6:9d:f4:2e:08:83:d9:b6:e1:a4:8c:e5:de:
         a4:67:34:38:17:e7:e0:22:db:7e:a9:e5:ee:44:0f:e9:49:2d:
         a9:50:38:3f:82:96:56:ac:ab:ac:b9:e8:57:b5:0c:65:15:db:
         00:29:a1:42:15:c3:ba:77:52:4d:8d:31:de:d3:8b:82:79:89:
         a1:e1:94:ab:2b:2a:a4:de:2a:db:85:d5:97:76:72:bc:c6:c9:
         93:93:0b:3f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFDQUExMTAvBgNVBAUTKDYxN0YwNTRFM0NFNDUxRTBDM0U3RjQ0NkREMDlGNzg2
NDY1MkI2NTYwHhcNMjYwNTExMDQzNjE2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTAxNWNjMC02ODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAosttOg0ZQE/LxDFTJkR0uDoQID1s1LmBRyDz5yIULeUM1IZzBeMm7MxRTMvf
U9GMmePg0w0H6+SasvRhKV5BE97jMfV6h4snf9nvCXqpwKED93F+vaUY0BvwBmm4
PSOX1oapJ4qnBwNtUQQycRQjEvLFkxqgXGmNEJzPFtLf/SZvLh/4lEVLUOYhlurl
Tdhlyjk93QdRDPcs8iGWxRt10ULW+iFK3oK+1lDhBROYRZZj1RvWCfMQhbiIBC5n
9Xcm0a14kblB3VBgZbdiZSGOgQtuDtD7FXeJBTLwiR4OXKflW5lyhaCL5asPHsIK
jRkvTfYsjTKRNu2DE0E8qaxqwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEMA5lIQ
u+nf6LwfjFzcaUEnEVufMB8GA1UdIwQYMBaAFGF/BU485FHgw+f0Rt0J94ZGUrZW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNBQS84RTI3NUExRUNF
NEExMUVFOERFOUU1MUZDNEY5QUUwMi9ZWDhGVGp6a1VlREQ1X1JHM1FuM2hrWlN0
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lYOEZUanprVWVERDVfUkczUW4zaGtaU3RsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTFDQUEvOEUyNzVBMUVDRTRBMTFFRThERTlFNTFGQzRGOUFFMDIvRTc1RkI0RjBD
RTRBMTFFRTk1QzE1RTIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5MtMA0GCSqGSIb3DQEBCwUAA4IBAQAqFol5OZSkD+4B8I2AHHwo
IbArxMkWMw6eyDK07Q1vuIkH5VArMPhbxlM/SAfaMken7SXEMb6o3yPMnfEhDnQ0
IitnaU6NJtNrpF0v9uys63zND311O/qiXbGp4uQiPxDd7dQNLzZ5aPZvRHmCh+2B
cV1bffoudiuxn56Gg2ASoGA4hFXIcdtt6kGq/Ceiu5JYKhRpAc4z7vA4QZdF6hzA
rRTlhxI4kKad9C4Ig9m24aSM5d6kZzQ4F+fgItt+qeXuRA/pSS2pUDg/gpZWrKus
uehXtQxlFdsAKaFCFcO6d1JNjTHe04uCeYmh4ZSrKyqk3irbhdWXdnK8xsmTkws/
-----END CERTIFICATE-----
Generated at Wed May 13 10:20:02 2026 by rpki-client