Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa
File:                     5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (raw, json)
Hash identifier:          Q/eW/jjSE1MG2v5NlEStDHyoTqbWbFolM/mjc8hiojU=
Subject key identifier:   B8:CE:31:62:3D:21:CC:18:D9:3C:51:8B:94:25:CE:72:F0:02:9B:BE
Certificate issuer:       /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
Certificate serial:       0658
Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa
Signing time:             Sun 28 Jun 2026 23:28:10 +0000
ROA not before:           Sun 28 Jun 2026 23:28:10 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136573
IP address blocks:        103.92.204.0/22 maxlen: 22
                          103.92.204.0/23 maxlen: 23
                          103.92.204.0/24 maxlen: 24
                          103.92.205.0/24 maxlen: 24
                          103.92.206.0/23 maxlen: 23
                          103.92.206.0/24 maxlen: 24
                          103.92.207.0/24 maxlen: 24
                          2401:20c0::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl
                          rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1624 (0x658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8CD2, serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
        Validity
            Not Before: Jun 28 23:28:10 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a41ae0a-2325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:93:e8:dd:09:da:59:54:6a:e9:bd:51:82:
                    ed:27:8e:bf:2b:64:c3:ab:e7:b6:84:1a:c8:b9:df:
                    7a:86:2c:a3:10:55:07:b9:32:67:73:d4:44:0a:51:
                    40:e9:cb:60:6a:f1:c0:ed:03:a5:92:fc:5e:83:8e:
                    e2:23:8d:f8:cb:9e:81:58:97:45:20:39:b9:f3:28:
                    c8:6f:8c:2d:ca:6c:34:92:a9:0a:d7:1c:48:b4:4f:
                    0b:b9:e7:bf:a1:29:d8:a7:e7:f2:7b:3c:e6:57:80:
                    76:cc:ce:44:63:1c:7d:91:02:e9:3d:b7:f4:49:11:
                    94:1e:b5:e7:53:46:ca:75:a1:78:bb:1b:9e:63:43:
                    65:d9:1f:2a:ca:ed:32:94:34:0d:84:35:b2:42:aa:
                    7f:aa:38:ee:73:d8:79:49:53:2b:bc:9a:e6:77:84:
                    68:6d:86:74:26:5f:78:07:c8:c1:eb:46:61:59:f8:
                    55:67:63:cb:26:10:04:17:f8:59:c9:7b:4b:1f:71:
                    c3:d0:18:ef:c0:61:2e:2b:b0:a6:9d:de:fc:4f:92:
                    67:b0:63:cb:0a:77:e9:27:34:df:8d:57:96:49:05:
                    14:fb:f0:d7:92:3b:9b:33:7a:8e:aa:83:f6:9a:2a:
                    1c:45:c0:7d:25:8d:2b:f3:66:c4:f1:e0:a6:18:66:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CE:31:62:3D:21:CC:18:D9:3C:51:8B:94:25:CE:72:F0:02:9B:BE
            X509v3 Authority Key Identifier:
                keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.204.0/22
                IPv6:
                  2401:20c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:78:c2:5f:ec:b8:61:00:3f:11:f2:db:8c:a5:6c:df:e3:ce:
         8b:2d:b8:b8:cc:ec:30:df:4c:4c:ce:c6:b7:ed:6b:67:45:1d:
         30:ce:bf:16:0b:09:d1:65:59:a7:bd:6e:83:9f:b7:b9:1b:fb:
         e4:10:24:e0:7b:59:b6:36:67:8f:08:7d:f9:61:bf:9a:6d:e2:
         20:48:9a:a3:b1:4f:ab:12:af:5c:6c:20:f5:94:b8:0f:c3:83:
         ca:2a:30:e6:b2:c7:11:52:ad:0e:25:97:bf:5e:5a:61:45:57:
         00:99:47:15:b2:08:74:d4:2d:b6:ab:08:5c:f2:2f:65:dd:a2:
         22:e8:13:13:53:95:8b:40:75:03:ff:70:61:90:46:d9:a7:d5:
         86:83:9f:fd:fa:75:45:82:dc:c2:cc:91:24:b4:89:55:03:7c:
         58:0f:d9:70:55:13:02:2e:06:e8:de:22:ca:b0:a6:bd:36:27:
         ac:fd:b3:77:73:02:80:3b:16:e3:ef:45:62:fe:f4:c5:58:4f:
         27:5b:dc:68:23:59:a7:a9:b1:62:a3:68:ac:76:f8:10:dc:b5:
         49:59:90:38:ec:80:0d:d9:7e:45:a8:55:a2:e2:22:fc:6a:f1:
         15:70:06:38:56:9e:f1:d0:e2:2f:32:4f:0c:78:40:15:61:aa:
         26:48:15:11
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThDRDIxMTAvBgNVBAUTKDZFMzNENTEzOTkyNUMzREI0RDA4NTkzN0NFNjlBQ0Qz
N0JFQTc5NEQwHhcNMjYwNjI4MjMyODEwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQxYWUwYS0yMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4dGT6N0J2llUaum9UYLtJ46/K2TDq+e2hBrIud96hiyjEFUHuTJnc9REClFA
6ctgavHA7QOlkvxeg47iI434y56BWJdFIDm58yjIb4wtymw0kqkK1xxItE8Luee/
oSnYp+fyezzmV4B2zM5EYxx9kQLpPbf0SRGUHrXnU0bKdaF4uxueY0Nl2R8qyu0y
lDQNhDWyQqp/qjjuc9h5SVMrvJrmd4RobYZ0Jl94B8jB60ZhWfhVZ2PLJhAEF/hZ
yXtLH3HD0BjvwGEuK7Cmnd78T5JnsGPLCnfpJzTfjVeWSQUU+/DXkjubM3qOqoP2
miocRcB9JY0r82bE8eCmGGaTbQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLjOMWI9
IcwY2TxRi5QlznLwApu+MB8GA1UdIwQYMBaAFG4z1ROZJcPbTQhZN85prNN76nlN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENEMi8wNDNDNkFGNEQ4
RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5dE5DRmszem1tczAzdnFl
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JqUFZFNWtsdzl0TkNGazN6bW1zMDN2cWVVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QThDRDIvMDQzQzZBRjREOEU1MTFFQjgwNjg1RDVGQzRGOUFFMDIvNUQxMERFRjBE
OEU4MTFFQjhBQ0QzQzY2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ1zMMA0EAgACMAcDBQAkASDAMA0GCSqGSIb3DQEBCwUAA4IBAQBE
eMJf7LhhAD8R8tuMpWzf486LLbi4zOww30xMzsa37WtnRR0wzr8WCwnRZVmnvW6D
n7e5G/vkECTge1m2NmePCH35Yb+abeIgSJqjsU+rEq9cbCD1lLgPw4PKKjDmsscR
Uq0OJZe/XlphRVcAmUcVsgh01C22qwhc8i9l3aIi6BMTU5WLQHUD/3BhkEbZp9WG
g5/9+nVFgtzCzJEktIlVA3xYD9lwVRMCLgbo3iLKsKa9Nies/bN3cwKAOxbj70Vi
/vTFWE8nW9xoI1mnqbFio2isdvgQ3LVJWZA47IAN2X5FqFWi4iL8avEVcAY4Vp7x
0OIvMk8MeEAVYaomSBUR
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:04:42 2026 by rpki-client