Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/10A3333E3BAC11F1B91923E195833773.roa
File:                     10A3333E3BAC11F1B91923E195833773.roa (raw, json)
Hash identifier:          3pqC973L+KOda1O2pm3BDounjWB5ZaQd+Mebl0uMU2g=
Subject key identifier:   4F:11:14:F7:93:99:46:47:AA:DB:41:7D:8B:C3:65:56:C3:F1:43:6C
Certificate issuer:       /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Certificate serial:       024D
Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/10A3333E3BAC11F1B91923E195833773.roa
Signing time:             Wed 09 Sep 2026 02:53:47 +0000
ROA not before:           Wed 09 Sep 2026 02:53:47 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     24550
IP address blocks:        103.94.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 03:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7369, serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
        Validity
            Not Before: Sep  9 02:53:47 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0ca3b-fd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:93:41:33:8c:3c:b0:a6:ad:8f:74:38:2a:
                    7f:ad:3d:f3:79:64:53:cd:2d:b3:63:ca:bf:c0:98:
                    8f:c8:10:81:c7:1c:2d:98:1f:9a:64:cf:3b:97:22:
                    ea:30:43:11:ba:f1:f3:5a:80:ec:2e:ec:7e:32:42:
                    13:5a:d3:57:c7:a1:f8:5f:56:0a:d2:86:78:7b:cc:
                    41:1d:44:38:7b:41:97:7e:e5:28:b9:39:8a:cb:04:
                    45:8f:79:a7:e2:e9:19:9f:8b:a9:f2:b5:82:bd:5d:
                    98:26:c4:06:24:e0:98:b4:71:c7:92:fd:ce:25:8c:
                    ed:e6:20:d0:4d:3a:d3:8b:0c:86:ab:0d:6e:8b:e7:
                    9b:ac:78:e2:af:57:e6:2c:47:33:50:2d:14:4f:2f:
                    cd:e9:c0:cb:7d:e9:68:c4:ad:3e:02:6e:c5:3c:30:
                    a6:ab:2a:d7:45:ac:be:db:8c:fb:f8:e4:a0:f6:0f:
                    75:46:fd:eb:c1:14:38:de:c2:1e:84:47:74:23:db:
                    3f:17:94:27:bf:b3:55:66:11:40:a6:76:81:9e:af:
                    99:c7:7b:0a:ce:e3:3f:bb:29:8a:b7:f4:aa:77:7a:
                    88:20:11:04:87:5d:67:d1:74:68:c2:03:5b:a1:6c:
                    32:67:4b:45:dd:f3:44:8e:49:6a:d6:7c:8d:70:a4:
                    77:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:11:14:F7:93:99:46:47:AA:DB:41:7D:8B:C3:65:56:C3:F1:43:6C
            X509v3 Authority Key Identifier:
                keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/10A3333E3BAC11F1B91923E195833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:9c:dd:55:e7:7f:94:f5:b6:3a:57:a4:98:1a:fc:64:51:8b:
         79:6c:2b:c5:a4:ae:f0:08:b4:05:b8:64:90:a8:fd:c0:c8:77:
         b1:53:1c:be:28:00:e2:55:56:05:5f:d9:61:ba:fd:7f:9b:64:
         48:a0:db:32:b0:3e:b9:2f:2d:2d:b5:c4:b1:ba:9d:09:66:76:
         9c:ae:44:55:ee:eb:7f:0f:1f:eb:58:92:99:55:79:f4:e7:1a:
         ab:2c:5c:62:43:7e:d1:da:d9:b7:1b:06:da:3f:d7:d7:7c:ba:
         ae:4d:06:8d:83:76:36:23:fb:82:5d:69:55:ce:77:39:30:b5:
         5d:7f:07:f1:9f:44:57:e0:64:3d:3c:65:bd:95:f4:cf:a6:f6:
         e2:1d:94:04:4a:f1:41:74:cb:2a:c0:b8:66:c2:ff:ef:eb:12:
         fc:e6:b9:b8:20:b5:ef:60:5e:6c:62:86:21:06:af:2b:9b:ce:
         12:3e:9f:bd:47:7b:92:7c:2c:db:a7:9c:d1:56:05:ef:44:ff:
         43:76:8b:d6:4e:c6:12:55:88:33:b9:62:1f:44:2d:e6:7a:96:
         04:dd:59:c0:f4:2a:64:cb:99:ce:0b:54:c5:8f:d4:2d:38:34:
         6a:b2:92:4a:f5:6a:fe:44:8d:16:26:2b:36:c7:a6:c7:10:d5:
         f3:a9:2e:ae
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTczNjkxMTAvBgNVBAUTKEY5MEUyMTBGQ0U3QzY3QTJGMkIzMkRFMTRFRUIwNUEw
NEIwRDEwRTEwHhcNMjYwOTA5MDI1MzQ3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwY2EzYi1mZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPuTQTOMPLCmrY90OCp/rT3zeWRTzS2zY8q/wJiPyBCBxxwtmB+aZM87lyLq
MEMRuvHzWoDsLux+MkITWtNXx6H4X1YK0oZ4e8xBHUQ4e0GXfuUouTmKywRFj3mn
4ukZn4up8rWCvV2YJsQGJOCYtHHHkv3OJYzt5iDQTTrTiwyGqw1ui+ebrHjir1fm
LEczUC0UTy/N6cDLfeloxK0+Am7FPDCmqyrXRay+24z7+OSg9g91Rv3rwRQ43sIe
hEd0I9s/F5Qnv7NVZhFApnaBnq+Zx3sKzuM/uymKt/Sqd3qIIBEEh11n0XRowgNb
oWwyZ0tF3fNEjklq1nyNcKR3fwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE8RFPeT
mUZHqttBfYvDZVbD8UNsMB8GA1UdIwQYMBaAFPkOIQ/OfGei8rMt4U7rBaBLDRDh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzM2OS9CMUQ2MTk0MjQ4
N0YxMUVFQTgwQTAyNENDNEY5QUUwMi8tUTRoRDg1OFo2THlzeTNoVHVzRm9Fc05F
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1RNGhEODU4WjZMeXN5M2hUdXNGb0VzTkVPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTczNjkvQjFENjE5NDI0ODdGMTFFRUE4MEEwMjRDQzRGOUFFMDIvMTBBMzMzM0Uz
QkFDMTFGMUI5MTkyM0UxOTU4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ178MA0GCSqGSIb3DQEBCwUAA4IBAQCBnN1V53+U9bY6V6SYGvxk
UYt5bCvFpK7wCLQFuGSQqP3AyHexUxy+KADiVVYFX9lhuv1/m2RIoNsysD65Ly0t
tcSxup0JZnacrkRV7ut/Dx/rWJKZVXn05xqrLFxiQ37R2tm3GwbaP9fXfLquTQaN
g3Y2I/uCXWlVznc5MLVdfwfxn0RX4GQ9PGW9lfTPpvbiHZQESvFBdMsqwLhmwv/v
6xL85rm4ILXvYF5sYoYhBq8rm84SPp+9R3uSfCzbp5zRVgXvRP9DdovWTsYSVYgz
uWIfRC3mepYE3VnA9Cpky5nOC1TFj9QtODRqspJK9Wr+RI0WJis2x6bHENXzqS6u
-----END CERTIFICATE-----
Generated at Sat Oct 3 07:58:11 2026 by rpki-client