Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/40565FA23C8311ECA86D031EC4F9AE02.roa
File:                     40565FA23C8311ECA86D031EC4F9AE02.roa (raw, json)
Hash identifier:          AcOK+or8IBRyx2MYpgbbtYCs/ZUAEOaOnVDcLAu/Hbk=
Subject key identifier:   B6:FC:3D:37:9B:84:F8:9E:A9:84:9A:55:7E:03:23:91:55:63:19:EE
Certificate issuer:       /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial:       056D
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/40565FA23C8311ECA86D031EC4F9AE02.roa
Signing time:             Mon 04 May 2026 23:29:46 +0000
ROA not before:           Mon 04 May 2026 23:29:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9744
IP address blocks:        103.212.96.0/22 maxlen: 24
                          139.5.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
                          rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
        Validity
            Not Before: May  4 23:29:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f92bea-5d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:62:d4:b2:a6:2a:a5:2e:04:84:93:7b:83:
                    63:a9:41:b6:20:43:6d:a5:60:94:c0:d6:33:fd:37:
                    7a:74:c3:14:ee:c8:c5:eb:b7:32:33:ce:67:98:0c:
                    63:ab:d2:59:f5:07:87:e3:6e:9e:5e:c9:63:fe:bf:
                    e7:66:02:21:31:17:26:ee:8a:9f:08:f6:ea:1c:8c:
                    7d:3c:7d:b7:c3:96:10:b4:3a:65:04:4b:62:a8:d7:
                    ce:c0:a1:f4:c1:f3:1f:02:b5:33:ae:52:30:8b:bb:
                    34:9e:21:ad:eb:c6:f5:5e:4b:f5:bf:f7:5e:77:7d:
                    2c:e8:86:f9:d2:71:d5:54:d1:99:dc:74:2c:84:9a:
                    b6:13:a0:6d:b5:64:46:72:b3:c4:71:d2:67:40:a5:
                    80:96:e5:dd:42:9c:f9:8f:78:16:c1:34:7f:e8:f0:
                    7c:a0:a2:3a:28:eb:bb:98:01:b0:90:b2:19:99:79:
                    69:f1:48:3b:f3:7a:b5:15:00:6f:5a:1d:20:13:80:
                    d9:eb:e3:c0:c1:73:87:a6:59:73:1a:27:57:df:2c:
                    68:59:5f:e6:c6:db:47:da:5f:04:57:b3:42:4c:e3:
                    70:36:13:1f:0e:2d:74:65:04:db:98:cf:6b:21:c0:
                    35:e4:1e:32:4c:fc:27:28:6e:9d:1f:7f:ce:78:b0:
                    cf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FC:3D:37:9B:84:F8:9E:A9:84:9A:55:7E:03:23:91:55:63:19:EE
            X509v3 Authority Key Identifier:
                keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/40565FA23C8311ECA86D031EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.96.0/22
                  139.5.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:c7:ee:90:0a:73:3a:65:7f:f1:2d:dc:a6:7b:f4:54:d0:ea:
         ab:e0:e6:d5:ab:d8:44:91:cb:8b:2d:c5:d8:72:49:e6:ed:2f:
         fa:1f:ba:f4:1e:92:e3:a9:7c:6b:ab:7a:36:b9:b2:ff:7c:da:
         40:8d:41:b3:e9:f2:8c:21:78:18:32:2a:04:49:01:49:86:e5:
         21:69:86:e3:b2:8d:20:dc:f4:96:ec:2e:c9:fd:14:cc:ab:8f:
         21:dd:79:b6:d2:97:9d:a8:88:3b:d0:06:ae:43:b8:a7:90:0c:
         ca:84:d2:13:bd:70:e9:d3:28:08:a7:50:b0:d5:1a:08:33:b3:
         89:3a:4c:41:76:a9:47:7b:6e:5c:9c:91:dd:70:e5:c4:b0:1b:
         e8:e8:7b:f3:6a:2b:57:42:1c:a9:60:f0:ea:2e:6c:2f:5c:12:
         9e:d1:14:7f:6a:59:17:33:43:36:fc:c8:fd:3c:24:51:5b:2a:
         0f:5c:fe:25:fa:9a:13:22:3e:c1:a2:39:d3:80:e3:18:d2:6e:
         9a:65:90:ff:ed:20:80:0b:4d:b1:37:5d:c1:68:96:ce:03:09:
         48:fd:7e:1b:fa:ab:cc:cc:15:47:db:5a:03:f3:71:ae:f7:22:
         73:91:d3:5b:f5:24:a9:42:a5:47:1a:06:a1:30:b7:8f:3b:a2:
         02:05:24:93
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1
RjIyRjI0ODIwHhcNMjYwNTA0MjMyOTQ2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY5MmJlYS01ZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArGNi1LKmKqUuBISTe4NjqUG2IENtpWCUwNYz/Td6dMMU7sjF67cyM85nmAxj
q9JZ9QeH426eXslj/r/nZgIhMRcm7oqfCPbqHIx9PH23w5YQtDplBEtiqNfOwKH0
wfMfArUzrlIwi7s0niGt68b1Xkv1v/ded30s6Ib50nHVVNGZ3HQshJq2E6BttWRG
crPEcdJnQKWAluXdQpz5j3gWwTR/6PB8oKI6KOu7mAGwkLIZmXlp8Ug783q1FQBv
Wh0gE4DZ6+PAwXOHpllzGidX3yxoWV/mxttH2l8EV7NCTONwNhMfDi10ZQTbmM9r
IcA15B4yTPwnKG6dH3/OeLDP3wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLb8PTeb
hPieqYSaVX4DI5FVYxnuMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw
QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjFEQ0YvMzY5NzhBN0MzMEJDMTFFQ0EzMDNFRjg2QzRGOUFFMDIvNDA1NjVGQTIz
QzgzMTFFQ0E4NkQwMzFFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ9RgAwQCiwXIMA0GCSqGSIb3DQEBCwUAA4IBAQBEx+6QCnM6ZX/x
Ldyme/RU0Oqr4ObVq9hEkcuLLcXYcknm7S/6H7r0HpLjqXxrq3o2ubL/fNpAjUGz
6fKMIXgYMioESQFJhuUhaYbjso0g3PSW7C7J/RTMq48h3Xm20pedqIg70AauQ7in
kAzKhNITvXDp0ygIp1Cw1RoIM7OJOkxBdqlHe25cnJHdcOXEsBvo6HvzaitXQhyp
YPDqLmwvXBKe0RR/alkXM0M2/Mj9PCRRWyoPXP4l+poTIj7BojnTgOMY0m6aZZD/
7SCAC02xN13BaJbOAwlI/X4b+qvMzBVH21oD83Gu9yJzkdNb9SSpQqVHGgahMLeP
O6ICBSST
-----END CERTIFICATE-----
Generated at Wed May 13 08:59:39 2026 by rpki-client