Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/B70755C04C7311F1ACB58F89C4833773.roa
File:                     B70755C04C7311F1ACB58F89C4833773.roa (raw, json)
Hash identifier:          LSxJplD9UL5reXwNEwfkGB8ity1ZcN9w6tgZf+NqgRI=
Subject key identifier:   F6:79:9B:92:79:CB:AD:6D:7F:9B:7B:81:3F:8D:99:BA:45:0A:08:A0
Certificate issuer:       /CN=A91B6899/serialNumber=3A6EE6F015941F5072AE71391B172058A0190142
Certificate serial:       02
Authority key identifier: 3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/B70755C04C7311F1ACB58F89C4833773.roa
Signing time:             Sun 10 May 2026 13:25:30 +0000
ROA not before:           Sun 10 May 2026 13:25:30 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     17088
IP address blocks:        103.22.167.0/24 maxlen: 24
                          103.28.73.0/24 maxlen: 24
                          103.241.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl
                          rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6899, serialNumber=3A6EE6F015941F5072AE71391B172058A0190142
        Validity
            Not Before: May 10 13:25:30 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a00874a-7475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:c1:f9:9f:b7:56:0e:66:12:79:53:ac:42:
                    c2:87:a2:54:23:80:9c:b1:e8:ad:c5:be:4f:1e:a9:
                    b7:23:1d:7f:44:5e:aa:42:60:80:e6:ff:54:33:2e:
                    ad:70:f8:6c:f4:b0:35:8b:23:b4:c0:be:8b:83:f6:
                    c6:33:75:68:9d:b1:37:55:e9:bd:62:67:18:85:35:
                    2a:7b:59:e2:f5:f2:a3:47:17:72:3b:d7:80:a5:3d:
                    58:a8:2f:2e:be:af:3c:15:a7:4e:66:3e:a7:31:82:
                    51:07:6b:76:a6:bc:e7:ca:a2:5d:85:85:b4:d7:bf:
                    ce:27:40:ea:16:d3:ce:a7:39:7b:e4:83:e9:11:46:
                    23:61:b7:03:2e:21:e8:ed:2b:64:41:c1:de:3e:69:
                    0c:40:61:84:ed:4e:57:5c:50:39:51:c8:ff:95:44:
                    0b:ab:5a:c4:0c:43:6d:34:c5:49:17:1b:8c:e2:f2:
                    6b:b8:96:ce:d8:e9:75:24:81:c0:fa:09:8b:fe:ea:
                    66:02:7d:18:60:f8:17:5a:10:16:c5:b1:22:5d:72:
                    7b:dd:0b:9f:50:68:db:2b:59:f8:28:e9:6a:4f:a3:
                    e2:b2:8d:5c:00:08:91:42:cb:82:e4:9d:98:47:b9:
                    00:39:f9:e8:c1:e8:b8:2b:69:19:53:7f:c3:4c:f2:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:79:9B:92:79:CB:AD:6D:7F:9B:7B:81:3F:8D:99:BA:45:0A:08:A0
            X509v3 Authority Key Identifier:
                keyid:3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/B70755C04C7311F1ACB58F89C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.167.0/24
                  103.28.73.0/24
                  103.241.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:17:a1:56:6a:4c:01:c3:26:92:99:d9:7c:e6:35:b4:ca:ff:
         c6:b4:de:33:64:eb:23:6b:94:51:26:0f:4d:f2:0a:7e:d7:0b:
         9a:de:f3:45:c9:33:c6:55:04:5a:dc:50:38:0a:ee:9f:74:7c:
         ad:7d:bc:55:3b:03:b1:e5:6a:8e:eb:15:c7:73:19:cc:e0:4e:
         12:59:60:ec:84:a3:f9:6c:82:6c:e3:10:69:bd:43:fc:cf:94:
         a5:00:85:e3:25:99:3f:74:35:04:c0:ff:b4:46:52:bb:07:33:
         9e:99:d8:5d:5a:78:f9:5a:eb:fd:af:87:1d:0c:3e:10:f3:90:
         f5:54:e0:ef:37:6a:6d:47:33:f7:7b:26:62:ef:b4:f6:31:d3:
         f9:f9:de:be:a4:8f:cd:86:d5:be:a1:4b:f2:da:72:a8:be:d4:
         ae:5d:77:c3:b6:0d:56:35:a8:c5:b6:9f:cd:96:dc:ac:47:14:
         dc:67:19:c4:af:6c:4c:a1:90:9f:89:d0:a5:81:f1:7a:c0:94:
         93:6f:8b:7b:90:56:f4:ae:d4:e8:7c:05:7f:20:e9:fd:36:fc:
         77:58:27:2e:69:1f:e8:83:13:3c:95:22:0b:1e:ae:d0:d3:8f:
         46:ae:50:06:fa:c9:30:30:1a:4b:87:91:e1:34:59:7c:f0:46:
         1f:f6:28:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
Njg5OTExMC8GA1UEBRMoM0E2RUU2RjAxNTk0MUY1MDcyQUU3MTM5MUIxNzIwNThB
MDE5MDE0MjAeFw0yNjA1MTAxMzI1MzBaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMDA4NzRhLTc0NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDuMH5n7dWDmYSeVOsQsKHolQjgJyx6K3Fvk8eqbcjHX9EXqpCYIDm/1QzLq1w
+Gz0sDWLI7TAvouD9sYzdWidsTdV6b1iZxiFNSp7WeL18qNHF3I714ClPVioLy6+
rzwVp05mPqcxglEHa3amvOfKol2FhbTXv84nQOoW086nOXvkg+kRRiNhtwMuIejt
K2RBwd4+aQxAYYTtTldcUDlRyP+VRAurWsQMQ200xUkXG4zi8mu4ls7Y6XUkgcD6
CYv+6mYCfRhg+BdaEBbFsSJdcnvdC59QaNsrWfgo6WpPo+KyjVwACJFCy4LknZhH
uQA5+ejB6LgraRlTf8NM8vzbAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQU9nmbknnL
rW1/m3uBP42ZukUKCKAwHwYDVR0jBBgwFoAUOm7m8BWUH1ByrnE5GxcgWKAZAUIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODk5LzYwQTIwRkZFNEM3
MzExRjE5QUJERTAwNUM0ODMzNzczL09tN204QldVSDFCeXJuRTVHeGNnV0tBWkFV
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT203bThCV1VIMUJ5cm5FNUd4Y2dXS0FaQVVJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Njg5OS82MEEyMEZGRTRDNzMxMUYxOUFCREUwMDVDNDgzMzc3My9CNzA3NTVDMDRD
NzMxMUYxQUNCNThGODlDNDgzMzc3My5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE
AgABMBIDBABnFqcDBABnHEkDBABn8WgwDQYJKoZIhvcNAQELBQADggEBAIcXoVZq
TAHDJpKZ2XzmNbTK/8a03jNk6yNrlFEmD03yCn7XC5re80XJM8ZVBFrcUDgK7p90
fK19vFU7A7Hlao7rFcdzGczgThJZYOyEo/lsgmzjEGm9Q/zPlKUAheMlmT90NQTA
/7RGUrsHM56Z2F1aePla6/2vhx0MPhDzkPVU4O83am1HM/d7JmLvtPYx0/n53r6k
j82G1b6hS/Lacqi+1K5dd8O2DVY1qMW2n82W3KxHFNxnGcSvbEyhkJ+J0KWB8XrA
lJNvi3uQVvSu1Oh8BX8g6f02/HdYJy5pH+iDEzyVIgsertDTj0auUAb6yTAwGkuH
keE0WXzwRh/2KOs=
-----END CERTIFICATE-----
Generated at Wed May 13 06:01:16 2026 by rpki-client