Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/6303AF646F8911EA92087E39C4F9AE02.roa
File:                     6303AF646F8911EA92087E39C4F9AE02.roa (raw, json)
Hash identifier:          AkREMdUY9iw5osiiQhe7w1xnANjcqb+Bqi344RCqSk0=
Subject key identifier:   57:78:ED:6A:50:6B:C1:76:B4:20:5F:59:57:BC:AA:36:61:8F:00:78
Certificate issuer:       /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial:       0AB9
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/6303AF646F8911EA92087E39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:47:50 +0000
ROA not before:           Fri 18 Jul 2025 20:01:00 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     4913
IP address blocks:        103.27.160.0/24 maxlen: 24
                          103.27.161.0/24 maxlen: 24
                          103.27.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
                          rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2745 (0xab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
        Validity
            Not Before: Jul 18 20:01:00 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a42766-fb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:82:11:f1:98:16:81:b5:b6:76:14:b4:27:
                    c4:8a:3c:2c:94:bb:3c:da:fd:7b:88:d7:f4:7f:9d:
                    d5:c4:fd:52:75:ca:e5:88:74:6b:06:5d:08:cc:de:
                    34:f9:94:f3:23:cd:e7:f1:08:75:b0:2f:c7:84:1f:
                    c6:09:3e:0b:13:8b:df:68:3c:d1:67:21:9e:94:85:
                    92:55:cc:61:5e:63:63:ce:e2:70:1d:01:b9:92:91:
                    56:bf:e6:e9:86:0d:f0:60:ae:eb:65:89:25:96:39:
                    f4:b6:77:3f:c8:9f:a0:e8:16:81:a1:35:bc:0e:3b:
                    51:0d:4c:1b:22:13:28:03:bf:8e:e3:be:c6:d1:2a:
                    2c:4f:51:36:94:73:ab:30:e8:98:35:4b:79:87:7f:
                    76:35:31:dd:33:44:52:d6:5d:0b:02:06:46:0f:c6:
                    76:93:d5:eb:f4:fa:1d:03:7a:0e:e2:6f:55:28:04:
                    4f:86:8a:6c:bd:fd:f7:2a:5a:b1:0d:bc:3d:48:06:
                    67:af:0b:a1:de:c2:c4:9d:36:5d:53:61:51:a4:03:
                    53:8a:7a:9d:0e:c2:5d:28:d7:66:31:fa:da:6a:7c:
                    b3:26:1f:11:48:c1:f4:c4:45:dc:36:36:06:a8:dd:
                    81:2e:b8:1a:45:0e:4b:2d:67:d2:e3:29:cb:5f:2b:
                    6b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:78:ED:6A:50:6B:C1:76:B4:20:5F:59:57:BC:AA:36:61:8F:00:78
            X509v3 Authority Key Identifier:
                keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/6303AF646F8911EA92087E39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.160.0-103.27.162.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:57:c7:c7:7b:04:ea:eb:1d:b2:64:72:58:58:d9:98:a7:
         a4:08:22:ee:ce:d0:7a:74:af:b1:68:63:e6:45:b1:6b:d0:96:
         ac:81:a6:62:de:d7:63:34:67:97:8f:29:db:70:32:c8:81:32:
         b0:8b:8e:df:ec:e9:06:71:d2:04:bc:d6:65:c3:d7:0c:0b:50:
         78:fb:11:38:63:94:88:4c:d3:4f:ec:e3:70:4a:06:df:8b:e1:
         c0:9c:3f:1f:64:cd:06:3a:c8:91:e2:d8:71:a2:26:3a:4e:c2:
         94:e9:f9:61:55:17:8f:c8:a5:a1:d0:96:fc:23:e8:5f:0e:eb:
         47:e5:6c:42:63:52:cf:1f:2a:a5:8a:6a:9b:3f:3e:bd:8b:37:
         4a:9f:01:f2:d5:32:49:fe:e5:71:05:f1:e8:92:33:25:72:21:
         84:9d:52:20:c9:29:c3:e8:70:9a:38:4c:c7:b5:52:c0:f1:bf:
         d0:7a:db:d6:02:c7:9f:4c:b8:28:2f:27:63:e6:d8:2d:7d:6d:
         22:f0:df:00:16:9a:3b:18:9c:77:3d:5b:ab:ca:44:ab:98:2c:
         09:13:50:60:64:d3:bf:1d:cf:38:92:8d:b5:1a:24:60:7f:f4:
         62:79:99:15:6c:bf:14:34:cc:59:cc:e8:8f:cc:f4:5b:70:00:
         52:b5:8e:24
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICCrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw
NjBEREUwOUEwHhcNMjUwNzE4MjAwMTAwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Mjc2Ni1mYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1a2CEfGYFoG1tnYUtCfEijwslLs82v17iNf0f53VxP1SdcrliHRrBl0IzN40
+ZTzI83n8Qh1sC/HhB/GCT4LE4vfaDzRZyGelIWSVcxhXmNjzuJwHQG5kpFWv+bp
hg3wYK7rZYklljn0tnc/yJ+g6BaBoTW8DjtRDUwbIhMoA7+O477G0SosT1E2lHOr
MOiYNUt5h392NTHdM0RS1l0LAgZGD8Z2k9Xr9PodA3oO4m9VKARPhopsvf33Klqx
Dbw9SAZnrwuh3sLEnTZdU2FRpANTinqdDsJdKNdmMfraanyzJh8RSMH0xEXcNjYG
qN2BLrgaRQ5LLWfS4ynLXytr0wIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFFd47WpQ
a8F2tCBfWVe8qjZhjwB4MB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG
ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTMwOEYvQjlCMzQ0NUM2Rjg3MTFFQTkzQTlGOTMzQzRGOUFFMDIvNjMwM0FGNjQ2
Rjg5MTFFQTkyMDg3RTM5QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBAVnG6ADBABnG6IwDQYJKoZIhvcNAQELBQADggEBAH32V8fHewTq
6x2yZHJYWNmYp6QIIu7O0Hp0r7FoY+ZFsWvQlqyBpmLe12M0Z5ePKdtwMsiBMrCL
jt/s6QZx0gS81mXD1wwLUHj7EThjlIhM00/s43BKBt+L4cCcPx9kzQY6yJHi2HGi
JjpOwpTp+WFVF4/IpaHQlvwj6F8O60flbEJjUs8fKqWKaps/Pr2LN0qfAfLVMkn+
5XEF8eiSMyVyIYSdUiDJKcPocJo4TMe1UsDxv9B629YCx59MuCgvJ2Pm2C19bSLw
3wAWmjsYnHc9W6vKRKuYLAkTUGBk078dzziSjbUaJGB/9GJ5mRVsvxQ0zFnM6I/M
9FtwAFK1jiQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:52 2026 by rpki-client