Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/32538B4EBCE311EA953FBB5EC4F9AE02.roa
File:                     32538B4EBCE311EA953FBB5EC4F9AE02.roa (raw, json)
Hash identifier:          QqncPmQ+MTjJkRRgLJA4ctdRvr1q1n2VS0I4uFV/Q7g=
Subject key identifier:   0F:9A:CF:A0:DB:A3:0F:3E:28:10:E1:38:24:6E:4D:66:47:95:AB:05
Certificate issuer:       /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial:       3205
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/32538B4EBCE311EA953FBB5EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:26:22 +0000
ROA not before:           Mon 02 Jun 2025 15:32:24 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132827
IP address blocks:        103.10.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
                          rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12805 (0x3205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
        Validity
            Not Before: Jun  2 15:32:24 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a476bd-f1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8f:36:2f:01:bb:7a:cf:7e:7c:e9:a7:02:d8:
                    cb:af:1f:7b:77:5e:7a:8d:4d:74:fc:bd:ac:c9:59:
                    36:9f:32:1a:ec:3d:13:48:56:36:97:81:48:2b:5e:
                    a4:a0:25:56:e0:ae:73:ec:15:97:b0:83:ea:52:3a:
                    45:a7:0a:04:a2:7c:bf:fd:c1:56:b0:03:ed:78:99:
                    37:9b:f4:5c:ac:e8:1f:e3:89:31:ce:18:8f:89:be:
                    eb:5b:03:cb:0a:bb:b0:95:07:d5:1f:54:74:b6:65:
                    31:f0:00:3a:6f:9c:d9:f6:f4:71:08:af:44:73:2c:
                    ac:b5:a3:66:c7:d1:08:c4:d4:0d:b5:f8:97:63:4a:
                    c1:a1:08:fd:6d:4d:52:9b:2e:96:6e:10:2d:db:fd:
                    c1:82:21:ce:c0:e6:c4:9e:35:0c:34:22:db:88:a3:
                    ae:ea:84:0e:ae:b5:c1:0b:ea:a9:d0:85:96:9d:85:
                    80:45:56:52:61:eb:b2:b0:f8:6a:ff:45:94:99:45:
                    6e:a2:25:d4:9f:06:23:ac:5d:68:c8:7e:75:0d:81:
                    07:64:3f:6f:a8:3f:5d:30:7f:5b:9f:54:58:df:a7:
                    54:83:1b:73:cc:e3:f9:1b:83:1a:61:bf:8f:0b:10:
                    a0:bf:22:14:64:c8:be:87:31:2b:f5:d2:54:d0:8c:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9A:CF:A0:DB:A3:0F:3E:28:10:E1:38:24:6E:4D:66:47:95:AB:05
            X509v3 Authority Key Identifier:
                keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/32538B4EBCE311EA953FBB5EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:8f:97:45:2e:1e:39:74:4e:5d:43:c0:12:f4:f2:e3:9a:
         5d:5b:e0:08:ce:38:1d:f8:23:6d:09:0e:19:d2:43:cb:e3:f3:
         26:f3:00:5a:93:85:fa:37:3f:5f:9a:09:07:d1:10:43:37:30:
         4b:d0:d7:87:d2:05:ee:a8:90:5f:7d:66:5c:eb:c6:f6:54:29:
         bb:c3:49:50:35:47:da:3e:98:31:88:c5:39:b4:79:db:f9:12:
         6d:06:f6:94:8f:5e:74:6f:9a:c7:d1:af:83:58:fe:25:ca:0a:
         fd:93:5c:67:0f:d8:77:20:ae:0b:ca:72:67:7e:85:fb:5d:0f:
         73:f8:cd:60:45:55:7c:39:3c:b7:0e:14:43:58:92:03:37:a2:
         75:f6:c9:5d:33:60:c2:2c:3a:de:3a:e7:d3:20:84:3d:d0:06:
         ee:d2:fa:3b:02:89:80:b1:9e:b3:6d:d8:6d:23:62:23:b2:43:
         3e:8f:82:5f:e4:ff:35:32:f6:78:ae:85:58:0c:af:c7:29:df:
         ee:ba:04:42:26:ca:22:fe:58:38:98:be:1c:bf:6a:8b:20:4c:
         b8:00:0c:89:68:b6:a7:80:2f:f7:c9:c7:da:00:83:2a:ae:9e:
         96:48:ea:75:b4:79:59:5e:82:93:63:3c:99:54:a7:29:b2:0b:
         4e:60:71:f5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG
OEJEMEY1QzkwHhcNMjUwNjAyMTUzMjI0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzZiZC1mMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7482LwG7es9+fOmnAtjLrx97d156jU10/L2syVk2nzIa7D0TSFY2l4FIK16k
oCVW4K5z7BWXsIPqUjpFpwoEony//cFWsAPteJk3m/RcrOgf44kxzhiPib7rWwPL
CruwlQfVH1R0tmUx8AA6b5zZ9vRxCK9EcyystaNmx9EIxNQNtfiXY0rBoQj9bU1S
my6WbhAt2/3BgiHOwObEnjUMNCLbiKOu6oQOrrXBC+qp0IWWnYWARVZSYeuysPhq
/0WUmUVuoiXUnwYjrF1oyH51DYEHZD9vqD9dMH9bn1RY36dUgxtzzOP5G4MaYb+P
CxCgvyIUZMi+hzEr9dJU0Iyn7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA+az6Db
ow8+KBDhOCRuTWZHlasFMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE
RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjE0NjEvRkNFOUE2ODBCREY1MTFFMjhBOTA0RkI0Njg4NjVDRUUvMzI1MzhCNEVC
Q0UzMTFFQTk1M0ZCQjVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZwomMA0GCSqGSIb3DQEBCwUAA4IBAQAGn4+XRS4eOXROXUPAEvTy
45pdW+AIzjgd+CNtCQ4Z0kPL4/Mm8wBak4X6Nz9fmgkH0RBDNzBL0NeH0gXuqJBf
fWZc68b2VCm7w0lQNUfaPpgxiMU5tHnb+RJtBvaUj150b5rH0a+DWP4lygr9k1xn
D9h3IK4LynJnfoX7XQ9z+M1gRVV8OTy3DhRDWJIDN6J19sldM2DCLDreOufTIIQ9
0Abu0vo7AomAsZ6zbdhtI2IjskM+j4Jf5P81MvZ4roVYDK/HKd/uugRCJsoi/lg4
mL4cv2qLIEy4AAyJaLangC/3ycfaAIMqrp6WSOp1tHlZXoKTYzyZVKcpsgtOYHH1
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:30 2026 by rpki-client