Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/3983EA66217E11F18ECE80E5073D8C67.roa
File:                     3983EA66217E11F18ECE80E5073D8C67.roa (raw, json)
Hash identifier:          /mxloS7ClCcaj5x0floJR4T78S/qjwGI70YG2UCZk8Q=
Subject key identifier:   9B:8F:63:F3:15:1A:4E:C7:9B:2D:5A:8A:0D:2F:FD:AB:CF:26:D7:B0
Certificate issuer:       /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
Certificate serial:       0885
Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/3983EA66217E11F18ECE80E5073D8C67.roa
Signing time:             Mon 16 Mar 2026 21:22:24 +0000
ROA not before:           Mon 16 Mar 2026 21:22:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141233
IP address blocks:        103.156.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl
                          rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
        Validity
            Not Before: Mar 16 21:22:24 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69b87490-4fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:8e:eb:30:31:f0:fa:71:f2:59:4d:94:fd:
                    24:c4:3a:95:82:3f:25:ed:d2:a0:e3:46:6f:d5:69:
                    27:3e:a1:91:1e:ef:6b:2f:c7:6b:21:09:fa:73:08:
                    3b:03:4a:79:e2:c0:1f:fb:90:97:8f:22:5e:ea:e8:
                    4e:b2:4c:9e:45:fe:34:68:13:4d:59:62:1a:b3:f5:
                    9f:43:b8:54:3a:58:99:1c:bc:28:c0:25:23:d8:ed:
                    d0:a0:3c:71:eb:8e:a1:f6:53:89:59:05:98:5f:61:
                    ca:35:e1:55:33:c1:55:7d:25:4e:40:52:37:35:19:
                    d6:13:ce:29:f1:cd:93:d8:17:c0:9f:48:3d:8e:19:
                    43:89:a3:0a:4e:ad:a3:79:98:c0:95:da:53:ac:d6:
                    57:43:76:e6:02:8e:16:42:5a:16:9c:7d:da:9a:e5:
                    9e:bb:90:90:54:2b:70:40:b7:2a:2b:be:79:e3:33:
                    59:f0:54:1c:f5:3e:91:04:ca:c5:a1:54:d9:23:ce:
                    ed:a9:bf:22:52:08:6b:b8:a1:69:56:d2:f6:7e:7a:
                    5f:bb:df:56:d5:40:d1:1e:90:da:8f:d7:1f:6e:dc:
                    15:cb:55:6e:cc:00:bd:51:85:b0:82:33:b7:0d:4e:
                    ff:53:cc:e7:d9:f8:5a:41:e7:87:b6:52:fa:56:15:
                    f7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:63:F3:15:1A:4E:C7:9B:2D:5A:8A:0D:2F:FD:AB:CF:26:D7:B0
            X509v3 Authority Key Identifier:
                keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/3983EA66217E11F18ECE80E5073D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:7d:09:a7:66:2b:69:5e:8c:17:01:55:02:e6:f9:ae:06:18:
         26:55:c9:f5:72:c5:d1:b7:63:6e:57:ae:48:00:05:a9:52:d7:
         70:81:9e:3c:78:c6:d7:ab:0e:bb:a7:d2:c6:a9:94:4b:60:06:
         30:54:5f:d9:d5:d3:69:1c:c5:11:73:da:95:12:bf:f8:f5:21:
         0b:16:d1:67:a4:4f:5f:53:9a:32:1b:fe:13:82:32:bc:7b:d5:
         87:42:d1:c4:b1:c4:17:d1:a7:c5:21:ec:6e:b3:26:38:39:1b:
         1b:96:1c:79:31:5b:6e:32:a9:c3:e0:6a:03:70:4c:73:d7:3e:
         15:68:7d:3d:bd:43:58:c8:00:0a:29:8e:49:44:4a:b6:c9:6b:
         d8:0d:42:c8:9f:1c:f3:7c:6d:c9:b6:ef:49:82:4a:51:a0:ad:
         54:da:a4:e4:37:85:f0:52:ef:b1:a4:02:9b:f2:b0:d2:e5:13:
         41:e7:15:23:57:ed:24:cc:96:8e:15:0b:3e:12:45:6c:83:af:
         ba:e1:43:9d:7b:b1:30:c9:88:af:96:74:7a:10:8d:a6:d4:10:
         9f:50:5e:e4:3f:4c:ce:d7:bf:69:6c:c0:b3:84:98:0f:a5:0b:
         24:2b:11:5b:d1:1f:fb:08:fa:08:7d:d6:25:75:a7:d1:ca:9b:
         1b:87:ec:2a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC
RDMyMUI0NDEwHhcNMjYwMzE2MjEyMjI0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWI4NzQ5MC00ZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtIiO6zAx8Ppx8llNlP0kxDqVgj8l7dKg40Zv1WknPqGRHu9rL8drIQn6cwg7
A0p54sAf+5CXjyJe6uhOskyeRf40aBNNWWIas/WfQ7hUOliZHLwowCUj2O3QoDxx
646h9lOJWQWYX2HKNeFVM8FVfSVOQFI3NRnWE84p8c2T2BfAn0g9jhlDiaMKTq2j
eZjAldpTrNZXQ3bmAo4WQloWnH3amuWeu5CQVCtwQLcqK7554zNZ8FQc9T6RBMrF
oVTZI87tqb8iUghruKFpVtL2fnpfu99W1UDRHpDaj9cfbtwVy1VuzAC9UYWwgjO3
DU7/U8zn2fhaQeeHtlL6VhX3jQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJuPY/MV
Gk7Hmy1aig0v/avPJtewMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz
MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUYzQzYvNjMxQ0MxNjBGMzM4MTFFQUE2M0Q0MTU0QzRGOUFFMDIvMzk4M0VBNjYy
MTdFMTFGMThFQ0U4MEU1MDczRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5zmMA0GCSqGSIb3DQEBCwUAA4IBAQBofQmnZitpXowXAVUC5vmu
BhgmVcn1csXRt2NuV65IAAWpUtdwgZ48eMbXqw67p9LGqZRLYAYwVF/Z1dNpHMUR
c9qVEr/49SELFtFnpE9fU5oyG/4TgjK8e9WHQtHEscQX0afFIexusyY4ORsblhx5
MVtuMqnD4GoDcExz1z4VaH09vUNYyAAKKY5JREq2yWvYDULInxzzfG3Jtu9JgkpR
oK1U2qTkN4XwUu+xpAKb8rDS5RNB5xUjV+0kzJaOFQs+EkVsg6+64UOde7EwyYiv
lnR6EI2m1BCfUF7kP0zO179pbMCzhJgPpQskKxFb0R/7CPoIfdYldafRypsbh+wq
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:34 2026 by rpki-client