Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/C78C216A070211EDB5178252C4F9AE02.roa
File:                     C78C216A070211EDB5178252C4F9AE02.roa (raw, json)
Hash identifier:          fyu14Jx6k1oTAKIdxEeJ8rrmDDiNJP7D4BIKAgsLJek=
Subject key identifier:   A1:CC:8B:EE:21:3C:C4:23:B7:07:74:4A:E2:E2:44:C2:B6:15:FD:D3
Certificate issuer:       /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial:       0358
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/C78C216A070211EDB5178252C4F9AE02.roa
Signing time:             Tue 21 Apr 2026 01:33:45 +0000
ROA not before:           Tue 21 Apr 2026 01:33:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13631
IP address blocks:        103.187.70.0/23 maxlen: 24
                          202.130.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
                          rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
        Validity
            Not Before: Apr 21 01:33:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e6d3f9-255a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:78:db:af:0d:c7:6e:90:eb:fd:1a:5a:b0:
                    37:0f:73:9c:3e:00:08:da:2d:85:82:45:8e:da:12:
                    f6:67:17:e1:83:f9:76:8b:0f:8b:d7:8b:0f:36:e3:
                    e9:05:43:0f:39:cf:dd:eb:30:c0:0e:e8:b6:01:be:
                    37:da:16:2b:15:25:b7:2a:17:4e:35:28:21:be:87:
                    8f:7f:c6:a5:d0:1a:ad:2c:49:74:46:cc:87:b4:04:
                    f9:59:93:1b:33:b9:c7:0d:81:2b:06:d5:8f:19:2b:
                    50:ba:99:2d:f7:d7:6f:f8:af:2b:75:5b:1d:80:b5:
                    b9:9a:1f:06:26:2d:8c:9e:6b:68:81:99:f0:0e:5f:
                    4e:ba:66:d3:d2:de:91:a8:00:2c:b1:de:ae:65:51:
                    d3:20:24:be:7f:15:ab:b0:17:c5:aa:81:d7:e2:2d:
                    03:89:4b:01:09:3b:de:06:8a:6a:f6:68:fb:d8:a9:
                    cb:48:07:59:95:49:11:71:e7:2c:00:68:95:df:b6:
                    f8:e3:e6:34:8d:b0:33:05:af:88:91:dc:61:ef:7d:
                    85:44:16:2c:eb:20:ef:51:cf:00:99:33:2e:b6:2e:
                    7b:05:cc:e8:bc:a0:bf:15:97:1f:76:5a:26:fe:68:
                    4e:6e:f0:d5:03:83:ce:63:b5:cf:17:5a:28:b7:f3:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CC:8B:EE:21:3C:C4:23:B7:07:74:4A:E2:E2:44:C2:B6:15:FD:D3
            X509v3 Authority Key Identifier:
                keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/C78C216A070211EDB5178252C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.70.0/23
                  202.130.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:53:41:df:36:4b:99:3b:3a:bf:4b:cd:e9:b3:0b:ea:bf:28:
         10:5b:99:9b:d4:0b:82:4d:50:52:a2:10:7c:45:12:38:1c:66:
         af:f7:e9:55:f7:cf:50:da:38:94:fc:a2:60:75:c5:d0:b1:1d:
         7e:fa:8d:4b:c8:f6:0f:98:6e:65:16:3b:0b:55:e6:52:0e:50:
         36:34:eb:62:d7:4c:ea:e6:dd:99:41:d4:9b:30:1f:69:44:f7:
         12:a2:b2:31:d8:85:8c:db:d3:6f:63:62:10:87:38:43:29:d0:
         c7:7c:75:9f:8c:f6:9c:15:ac:cf:f0:af:cc:8e:92:37:15:1e:
         6b:01:d7:10:f7:91:3d:8b:3a:86:4a:35:29:c5:89:2b:3a:71:
         df:08:35:b6:6e:86:81:dd:45:e2:f8:31:40:30:32:b0:57:7b:
         62:e1:1e:bc:2e:ab:b0:72:cc:c9:8a:c0:92:a3:15:e2:f9:b3:
         e0:cf:f1:3f:f5:f4:2e:50:0d:bb:3f:e7:63:6c:15:ae:fc:29:
         9a:50:43:8f:57:0e:b0:5e:e1:94:4c:f6:c4:b2:cf:39:83:e7:
         3a:e4:63:bc:9b:55:f4:8a:a1:da:92:fd:dc:f3:cc:75:69:bf:
         67:28:e4:8d:6d:c3:69:13:54:16:cf:94:ba:8e:09:5e:f9:fe:
         6e:6b:6c:42
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM4NzMxMTAvBgNVBAUTKDNCNDdBQTBEMDMyMDkxOTVGMDU1NUM2MEFERTMyOTRG
MkQzN0EyQTEwHhcNMjYwNDIxMDEzMzQ1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWU2ZDNmOS0yNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupx4268Nx26Q6/0aWrA3D3OcPgAI2i2FgkWO2hL2Zxfhg/l2iw+L14sPNuPp
BUMPOc/d6zDADui2Ab432hYrFSW3KhdONSghvoePf8al0BqtLEl0RsyHtAT5WZMb
M7nHDYErBtWPGStQupkt99dv+K8rdVsdgLW5mh8GJi2MnmtogZnwDl9OumbT0t6R
qAAssd6uZVHTICS+fxWrsBfFqoHX4i0DiUsBCTveBopq9mj72KnLSAdZlUkRcecs
AGiV37b44+Y0jbAzBa+Ikdxh732FRBYs6yDvUc8AmTMuti57BczovKC/FZcfdlom
/mhObvDVA4POY7XPF1oot/MO0wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKHMi+4h
PMQjtwd0SuLiRMK2Ff3TMB8GA1UdIwQYMBaAFDtHqg0DIJGV8FVcYK3jKU8tN6Kh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzg3My8xMTJFQzE5NkZE
QjgxMUVDOEUzODY5MTNDNEY5QUUwMi9PMGVxRFFNZ2taWHdWVnhncmVNcFR5MDNv
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL08wZXFEUU1na1pYd1ZWeGdyZU1wVHkwM29xRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTM4NzMvMTEyRUMxOTZGREI4MTFFQzhFMzg2OTEzQzRGOUFFMDIvQzc4QzIxNkEw
NzAyMTFFREI1MTc4MjUyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZ7tGAwQAyoLWMA0GCSqGSIb3DQEBCwUAA4IBAQAaU0HfNkuZOzq/
S83pswvqvygQW5mb1AuCTVBSohB8RRI4HGav9+lV989Q2jiU/KJgdcXQsR1++o1L
yPYPmG5lFjsLVeZSDlA2NOti10zq5t2ZQdSbMB9pRPcSorIx2IWM29NvY2IQhzhD
KdDHfHWfjPacFazP8K/MjpI3FR5rAdcQ95E9izqGSjUpxYkrOnHfCDW2boaB3UXi
+DFAMDKwV3ti4R68LquwcszJisCSoxXi+bPgz/E/9fQuUA27P+djbBWu/CmaUEOP
Vw6wXuGUTPbEss85g+c65GO8m1X0iqHakv3c88x1ab9nKOSNbcNpE1QWz5S6jgle
+f5ua2xC
-----END CERTIFICATE-----
Generated at Wed May 13 06:29:38 2026 by rpki-client