Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/4FE5F30290D411F0B8A56049C4F9AE02.roa
File:                     4FE5F30290D411F0B8A56049C4F9AE02.roa (raw, json)
Hash identifier:          OZfqrjbEGsjJJgQ6UcSJaExSwVyD/+FwRIk4CqmGSSs=
Subject key identifier:   80:D3:35:37:54:41:F4:E9:9D:20:4D:33:9F:D3:72:59:07:63:DE:60
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       0718
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/4FE5F30290D411F0B8A56049C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:11:33 +0000
ROA not before:           Wed 22 Oct 2025 23:42:11 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        103.99.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816 (0x718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Oct 22 23:42:11 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48155-21f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:46:a3:fe:82:40:36:2e:7b:e5:13:61:07:
                    0b:20:26:9d:f4:50:c1:f0:82:80:d4:68:e5:49:51:
                    a4:81:84:ed:ad:50:88:f8:30:40:4d:5b:a6:11:72:
                    b3:4f:b4:72:a4:7b:29:ab:1d:59:b1:c8:f0:5f:10:
                    d7:59:49:6d:95:4b:4e:d1:b2:ca:c7:91:fc:6a:6b:
                    3f:fd:3c:b3:d0:56:a8:6e:b9:34:72:65:b3:ff:60:
                    a4:80:78:99:fd:4f:30:c6:e4:0d:6e:e1:c0:0a:c6:
                    f6:35:d0:16:33:4a:91:74:9a:d8:d5:9b:64:f6:2c:
                    1b:2c:0e:a9:6f:b0:84:c5:27:38:5c:f0:77:c5:d2:
                    09:00:a9:c1:f9:57:79:3c:3f:b9:51:94:1a:a2:4a:
                    61:e7:19:f6:65:f1:ba:a1:94:db:f5:c7:19:29:7a:
                    1e:d7:44:98:40:34:2d:5b:24:d4:92:87:7d:45:0b:
                    7f:f0:7b:a9:db:b6:8a:cf:28:72:87:aa:84:e2:74:
                    a2:99:9e:1e:43:61:ab:f9:05:32:01:44:86:cd:3b:
                    e5:41:92:98:74:9b:17:a0:7a:81:12:1e:74:bc:a5:
                    cb:9a:02:72:32:04:64:b8:f5:be:f8:c5:51:00:07:
                    15:d6:bf:ea:41:5a:ed:62:16:4e:37:25:07:ae:f8:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D3:35:37:54:41:F4:E9:9D:20:4D:33:9F:D3:72:59:07:63:DE:60
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/4FE5F30290D411F0B8A56049C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:5b:49:b2:5f:d3:7b:dd:af:a2:c1:cb:a5:0b:ed:64:32:
         76:a3:2c:5e:04:b5:04:f2:e5:15:ec:6b:b3:68:1e:9b:03:ee:
         7b:cf:93:4a:7d:8d:e9:b1:4e:0a:4b:1f:d7:97:96:c8:23:c1:
         de:01:5d:47:c2:0b:9a:9b:27:31:f8:fc:1a:7c:77:8d:bc:b6:
         d0:a0:b6:88:35:7a:7f:91:be:70:28:1c:03:84:0c:88:36:45:
         f9:6c:30:e9:9f:65:f4:c7:5b:85:77:ad:ae:8a:fd:7e:69:46:
         89:b0:bb:88:37:53:a4:13:5b:7c:d0:6c:c4:93:da:59:ec:13:
         c2:e7:86:97:c2:79:98:b4:18:97:2b:de:67:b7:75:ee:0b:88:
         22:b5:83:8f:20:78:80:51:63:54:b4:f2:e6:7d:f6:db:e0:f6:
         5f:3d:41:b4:53:8e:04:c1:ff:5b:c1:48:ab:84:00:7f:50:04:
         3c:65:a8:2a:1a:15:64:cd:d6:97:fd:12:73:f3:5a:48:11:98:
         97:d2:f0:2e:19:68:99:2c:69:f0:cd:7e:d0:33:eb:fe:74:95:
         51:28:79:da:90:3a:98:96:95:82:73:55:6a:00:e8:f8:c0:2b:
         1f:06:a6:0b:9c:f6:0f:ba:52:72:4c:fe:8a:a9:ec:14:1b:c0:
         a5:f6:d1:dd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB
RjA5Rjg0MTEwHhcNMjUxMDIyMjM0MjExWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODE1NS0yMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA14JGo/6CQDYue+UTYQcLICad9FDB8IKA1GjlSVGkgYTtrVCI+DBATVumEXKz
T7RypHspqx1ZscjwXxDXWUltlUtO0bLKx5H8ams//Tyz0Faobrk0cmWz/2CkgHiZ
/U8wxuQNbuHACsb2NdAWM0qRdJrY1Ztk9iwbLA6pb7CExSc4XPB3xdIJAKnB+Vd5
PD+5UZQaokph5xn2ZfG6oZTb9ccZKXoe10SYQDQtWyTUkod9RQt/8Hup27aKzyhy
h6qE4nSimZ4eQ2Gr+QUyAUSGzTvlQZKYdJsXoHqBEh50vKXLmgJyMgRkuPW++MVR
AAcV1r/qQVrtYhZONyUHrvhpoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIDTNTdU
QfTpnSBNM5/TclkHY95gMB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw
NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjI5RjgvOTJEMEJFMDI5MDY4MTFFQjlFM0ZDNjZDQzRGOUFFMDIvNEZFNUYzMDI5
MEQ0MTFGMEI4QTU2MDQ5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ2M/MA0GCSqGSIb3DQEBCwUAA4IBAQA6fVtJsl/Te92vosHLpQvt
ZDJ2oyxeBLUE8uUV7GuzaB6bA+57z5NKfY3psU4KSx/Xl5bII8HeAV1Hwguamycx
+PwafHeNvLbQoLaINXp/kb5wKBwDhAyINkX5bDDpn2X0x1uFd62uiv1+aUaJsLuI
N1OkE1t80GzEk9pZ7BPC54aXwnmYtBiXK95nt3XuC4gitYOPIHiAUWNUtPLmffbb
4PZfPUG0U44Ewf9bwUirhAB/UAQ8ZagqGhVkzdaX/RJz81pIEZiX0vAuGWiZLGnw
zX7QM+v+dJVRKHnakDqYlpWCc1VqAOj4wCsfBqYLnPYPulJyTP6KqewUG8Cl9tHd
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:25 2026 by rpki-client