Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/9AB3F8BABB3111F1BAB9CEAE6D11F970.roa
File:                     9AB3F8BABB3111F1BAB9CEAE6D11F970.roa (raw, json)
Hash identifier:          FR5egO3pKbKnicc08FWFpCRQO3WPuUafCXH62c8iCos=
Subject key identifier:   24:3F:3B:DA:F5:9F:27:85:B2:97:CD:9D:B7:7A:FD:C2:36:01:95:C9
Certificate issuer:       /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
Certificate serial:       0DDD
Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/9AB3F8BABB3111F1BAB9CEAE6D11F970.roa
Signing time:             Mon 28 Sep 2026 11:41:55 +0000
ROA not before:           Mon 28 Sep 2026 11:41:55 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     140038
IP address blocks:        103.143.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl
                          rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3549 (0xddd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
        Validity
            Not Before: Sep 28 11:41:55 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6aba5283-1337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:85:98:49:8e:21:d3:11:81:26:a0:b7:18:
                    90:cd:73:c3:30:0f:49:ec:42:2f:f9:f0:54:bb:7c:
                    d9:89:a7:ec:11:c5:45:bc:d5:2b:ed:b3:b1:9d:fd:
                    90:96:62:0c:5e:35:21:12:82:f8:ce:9c:3b:39:8c:
                    da:05:f9:01:83:03:df:c2:44:f9:de:a9:09:0e:18:
                    9b:3d:7d:7f:29:37:bf:8c:45:6b:ea:b9:03:48:61:
                    bb:97:bb:16:5f:e2:2f:e6:24:8c:b0:ac:fc:22:23:
                    31:5a:fe:bd:47:05:6c:b1:78:f3:3f:2a:a0:e5:9e:
                    04:b0:aa:e7:7d:9d:b4:28:16:15:00:9f:23:1f:7d:
                    1b:ad:c0:bf:9e:d2:da:e0:12:fb:80:e8:fa:ec:e9:
                    06:5d:b8:f7:7d:71:59:34:87:16:a6:5c:57:5e:79:
                    5e:ef:19:be:7a:9d:5b:45:41:89:5c:b9:a0:45:08:
                    3e:af:51:62:52:0e:e5:a4:02:55:a4:6b:fe:07:9d:
                    13:e9:c3:f2:55:30:6e:20:da:7a:01:30:99:c2:17:
                    7c:00:c0:31:eb:be:5f:96:51:b6:71:7a:26:4d:d1:
                    45:fc:df:c1:b7:25:4a:86:2a:fe:82:ec:4a:fb:83:
                    db:3c:07:dd:9a:b5:5d:5b:15:a2:51:a0:75:10:8e:
                    b7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3F:3B:DA:F5:9F:27:85:B2:97:CD:9D:B7:7A:FD:C2:36:01:95:C9
            X509v3 Authority Key Identifier:
                keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/9AB3F8BABB3111F1BAB9CEAE6D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:2a:cf:d4:41:a7:7b:23:21:0b:27:a8:8d:bf:67:1c:af:82:
         91:f4:a3:b2:32:c9:bf:27:20:8b:d6:80:1f:4d:a1:12:d4:e1:
         14:fe:94:d3:41:4f:95:7d:d9:9a:9b:76:36:4f:7e:59:b5:45:
         7a:9a:fd:fd:94:14:ae:2d:01:4c:3c:ed:1a:85:48:a8:48:7d:
         08:a7:54:0b:65:f1:96:ba:4a:97:7b:72:f5:f7:09:c2:9a:0d:
         0a:ce:c9:f2:54:49:d4:65:39:9b:8d:61:f1:70:3d:76:6a:3e:
         4e:9a:cd:99:09:d8:06:35:6b:d1:c8:6c:77:3f:3a:89:fd:e2:
         2c:55:ac:92:fb:34:bc:b8:5b:2f:85:77:5f:0a:05:a0:3d:95:
         31:6e:ae:e5:62:7b:81:30:dc:0e:17:b2:ec:cd:36:dc:17:43:
         79:ac:4b:f7:a0:22:b9:b7:df:07:2f:66:5f:ee:f5:44:ed:2d:
         ce:58:1f:22:db:7c:eb:e6:c0:ce:ef:a7:be:bb:8a:5c:a5:d9:
         8a:8f:90:89:8c:83:e5:11:5f:6c:8a:18:ab:e3:1d:21:ad:d8:
         e9:71:ee:1e:23:51:55:1a:93:09:27:66:51:7f:98:e7:15:2d:
         4c:f6:59:e1:a2:89:fc:3f:eb:6b:fa:25:f5:44:39:ac:a1:c1:
         b3:e4:65:8c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx
RTNGQzRGRDkwHhcNMjYwOTI4MTE0MTU1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJhNTI4My0xMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuICFmEmOIdMRgSagtxiQzXPDMA9J7EIv+fBUu3zZiafsEcVFvNUr7bOxnf2Q
lmIMXjUhEoL4zpw7OYzaBfkBgwPfwkT53qkJDhibPX1/KTe/jEVr6rkDSGG7l7sW
X+Iv5iSMsKz8IiMxWv69RwVssXjzPyqg5Z4EsKrnfZ20KBYVAJ8jH30brcC/ntLa
4BL7gOj67OkGXbj3fXFZNIcWplxXXnle7xm+ep1bRUGJXLmgRQg+r1FiUg7lpAJV
pGv+B50T6cPyVTBuINp6ATCZwhd8AMAx675fllG2cXomTdFF/N/BtyVKhir+guxK
+4PbPAfdmrVdWxWiUaB1EI63FQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCQ/O9r1
nyeFspfNnbd6/cI2AZXJMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz
RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU
OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUNCQjcvNUUxRkNFQkNGM0Y5MTFFOUI4QTgzMTBBQzRGOUFFMDIvOUFCM0Y4QkFC
QjMxMTFGMUJBQjlDRUFFNkQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4+UMA0GCSqGSIb3DQEBCwUAA4IBAQBdKs/UQad7IyELJ6iNv2cc
r4KR9KOyMsm/JyCL1oAfTaES1OEU/pTTQU+Vfdmam3Y2T35ZtUV6mv39lBSuLQFM
PO0ahUioSH0Ip1QLZfGWukqXe3L19wnCmg0KzsnyVEnUZTmbjWHxcD12aj5Oms2Z
CdgGNWvRyGx3PzqJ/eIsVayS+zS8uFsvhXdfCgWgPZUxbq7lYnuBMNwOF7LszTbc
F0N5rEv3oCK5t98HL2Zf7vVE7S3OWB8i23zr5sDO76e+u4pcpdmKj5CJjIPlEV9s
ihir4x0hrdjpce4eI1FVGpMJJ2ZRf5jnFS1M9lnhoon8P+tr+iX1RDmsocGz5GWM
-----END CERTIFICATE-----
Generated at Thu Oct 8 09:25:33 2026 by rpki-client