Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/3EF3C6EEF8B511EAAD434755C4F9AE02.roa
File:                     3EF3C6EEF8B511EAAD434755C4F9AE02.roa (raw, json)
Hash identifier:          fffjJpFpj/z4UNsYvzkaYrSCN55neJCtG8ZFfHxTto8=
Subject key identifier:   45:FF:B5:9F:5E:B6:8E:1C:4F:02:31:68:B6:83:F8:45:6E:CB:2D:E2
Certificate issuer:       /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449
Certificate serial:       0D93
Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/3EF3C6EEF8B511EAAD434755C4F9AE02.roa
Signing time:             Mon 24 Aug 2026 18:35:23 +0000
ROA not before:           Mon 24 Aug 2026 18:35:23 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     138163
IP address blocks:        103.121.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl
                          rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3475 (0xd93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449
        Validity
            Not Before: Aug 24 18:35:23 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8c8eeb-1a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:aa:3f:da:78:1a:13:59:d3:db:9d:ae:e8:
                    fd:a2:62:a6:fe:6e:4f:97:83:4f:6c:bd:ac:32:e9:
                    21:fd:b8:73:4b:64:fa:77:e0:c0:1c:c2:dd:8f:a8:
                    00:15:16:2d:10:68:fd:77:5e:ae:83:5e:eb:ee:35:
                    cc:0e:82:cd:73:8b:b0:6a:b8:32:9d:55:a0:2f:98:
                    09:4b:c4:0c:44:17:80:3e:05:fb:02:8e:08:95:d5:
                    32:73:d7:b9:ff:ca:3d:89:42:a3:fe:3d:83:5f:b0:
                    20:ec:f8:26:79:ef:02:f4:b5:e0:2b:40:c5:2d:b2:
                    ed:03:df:b6:74:a5:a0:9d:19:a8:3a:76:4a:76:0f:
                    c6:3e:16:ee:fa:a4:0c:c4:ec:1f:bb:79:72:b6:3f:
                    7b:33:95:8c:17:56:67:db:d8:2c:37:99:60:d9:41:
                    d2:44:99:36:2e:1f:82:05:f4:48:4f:b6:2e:c5:94:
                    65:8a:11:02:2a:99:21:45:9b:2b:a2:f5:22:54:bf:
                    51:97:61:f6:0c:47:a2:b0:d2:f4:78:af:f6:51:c1:
                    0f:2b:ea:f3:92:4a:09:c0:b7:9a:a1:17:72:f1:79:
                    38:9f:34:53:15:a4:be:db:6e:d2:be:3d:6b:f4:75:
                    65:29:d8:01:17:3f:17:db:d7:f1:e1:c6:b5:f7:4d:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:B5:9F:5E:B6:8E:1C:4F:02:31:68:B6:83:F8:45:6E:CB:2D:E2
            X509v3 Authority Key Identifier:
                keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/3EF3C6EEF8B511EAAD434755C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:9d:0a:6b:df:00:44:43:75:23:f2:ae:15:95:99:d2:b6:33:
         87:a2:71:7a:c4:97:2e:c8:f2:de:f3:de:6b:d4:9e:54:fe:5e:
         14:5b:3f:35:30:d3:a5:1f:ac:7c:90:3c:45:69:a4:fe:74:df:
         e9:94:6c:86:af:eb:ea:6b:47:ec:ce:68:29:5c:05:b6:f7:fe:
         f5:87:bd:90:87:b5:75:b6:dd:ed:45:b7:d5:c3:82:d1:6a:0b:
         7c:0d:d6:a6:14:37:76:8c:e1:40:f8:07:40:6b:6d:93:20:9a:
         90:69:64:38:9b:32:fb:df:21:0a:43:c5:0a:bf:91:c6:29:38:
         14:97:e6:72:92:6f:e7:ba:90:9b:fb:51:05:d6:2b:ca:71:4c:
         a9:38:b6:3e:b2:f9:6b:3f:00:d6:aa:7b:18:fd:6e:d0:64:56:
         ef:ed:ad:29:e6:9c:ec:e0:fe:fb:49:a4:a1:cb:c8:db:68:8f:
         bf:3d:14:64:14:b4:bf:95:78:b2:67:87:16:40:a3:29:d5:a3:
         87:f9:19:ec:1b:46:ef:05:e0:3a:ce:fe:04:77:1b:73:4d:f9:
         62:ea:91:88:68:9d:26:fe:1d:da:63:84:a3:d8:d5:43:a2:2d:
         ac:58:20:7a:96:e3:ea:f5:37:a2:b7:d0:6a:e8:f1:b4:29:bf:
         e9:73:1a:1a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx
QjU1NUE0NDkwHhcNMjYwODI0MTgzNTIzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThjOGVlYi0xYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvf6qP9p4GhNZ09udruj9omKm/m5Pl4NPbL2sMukh/bhzS2T6d+DAHMLdj6gA
FRYtEGj9d16ug17r7jXMDoLNc4uwargynVWgL5gJS8QMRBeAPgX7Ao4IldUyc9e5
/8o9iUKj/j2DX7Ag7Pgmee8C9LXgK0DFLbLtA9+2dKWgnRmoOnZKdg/GPhbu+qQM
xOwfu3lytj97M5WMF1Zn29gsN5lg2UHSRJk2Lh+CBfRIT7YuxZRlihECKpkhRZsr
ovUiVL9Rl2H2DEeisNL0eK/2UcEPK+rzkkoJwLeaoRdy8Xk4nzRTFaS+227Svj1r
9HVlKdgBFz8X29fx4ca1903WdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEX/tZ9e
to4cTwIxaLaD+EVuyy3iMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0
QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTgwRjkvNDk3NzNBRDBGNEE0MTFFOThDQzc1RTM3QzRGOUFFMDIvM0VGM0M2RUVG
OEI1MTFFQUFENDM0NzU1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ3nCMA0GCSqGSIb3DQEBCwUAA4IBAQC2nQpr3wBEQ3Uj8q4VlZnS
tjOHonF6xJcuyPLe895r1J5U/l4UWz81MNOlH6x8kDxFaaT+dN/plGyGr+vqa0fs
zmgpXAW29/71h72Qh7V1tt3tRbfVw4LRagt8DdamFDd2jOFA+AdAa22TIJqQaWQ4
mzL73yEKQ8UKv5HGKTgUl+Zykm/nupCb+1EF1ivKcUypOLY+svlrPwDWqnsY/W7Q
ZFbv7a0p5pzs4P77SaShy8jbaI+/PRRkFLS/lXiyZ4cWQKMp1aOH+RnsG0bvBeA6
zv4EdxtzTfli6pGIaJ0m/h3aY4Sj2NVDoi2sWCB6luPq9Teit9Bq6PG0Kb/pcxoa
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:41:04 2026 by rpki-client