Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/A07D8B96229611F1A7D0762CAF833773.roa
File:                     A07D8B96229611F1A7D0762CAF833773.roa (raw, json)
Hash identifier:          T2vZQOLMibHqgQVOX6XcQKXn3xWaS5ULxK4K1nOSVG8=
Subject key identifier:   2D:C7:CF:E5:FF:36:B7:52:0B:3C:F9:48:E4:6F:E7:8C:5C:7C:84:2D
Certificate issuer:       /CN=A91B6DD0/serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Certificate serial:       41
Authority key identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/A07D8B96229611F1A7D0762CAF833773.roa
Signing time:             Wed 18 Mar 2026 06:49:36 +0000
ROA not before:           Wed 18 Mar 2026 06:49:36 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     23672
IP address blocks:        103.155.182.0/24 maxlen: 24
                          103.155.183.0/24 maxlen: 24
                          203.78.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
                          rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6DD0, serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
        Validity
            Not Before: Mar 18 06:49:36 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69ba4b00-0b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:96:a8:1a:3f:07:44:70:51:b8:9a:04:77:
                    98:f6:b5:8b:fb:f0:fd:7c:cd:c4:0f:c6:46:3f:76:
                    7a:b0:6d:a7:c7:07:db:57:eb:e4:ff:21:b4:11:1f:
                    b4:ff:9b:c6:eb:f3:af:17:7c:91:3f:9f:97:62:41:
                    45:34:98:90:d2:74:90:a3:5f:72:0b:9b:6e:7d:b6:
                    9e:73:c2:20:9f:5b:4b:95:9a:e0:4e:79:e5:af:0f:
                    93:8a:9c:77:b2:ea:7e:0b:90:06:da:de:3c:c9:68:
                    fb:53:8f:0b:81:37:33:68:93:65:79:85:dc:8d:5c:
                    f4:50:14:7a:a7:1c:7a:f7:b3:f9:d2:3f:12:3e:02:
                    5d:55:0f:35:8b:44:94:d7:4c:97:62:18:29:46:08:
                    e5:96:21:6c:05:c7:b4:f6:df:16:93:a7:67:47:d6:
                    9f:a3:8a:8c:16:67:4a:12:8a:58:4f:e3:ee:0a:44:
                    55:3a:e2:c1:f9:78:ac:b0:f7:74:82:80:2c:f4:cd:
                    8c:78:5a:ff:5c:34:4f:2e:25:8a:41:dc:be:25:6b:
                    47:4c:ed:4a:df:3e:46:64:d6:f6:66:72:f5:62:e2:
                    56:eb:f8:d1:ca:81:dc:ef:6f:ad:f9:89:4e:96:8b:
                    15:26:a5:56:6f:88:d7:33:f5:d3:5f:5f:ce:00:c9:
                    65:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C7:CF:E5:FF:36:B7:52:0B:3C:F9:48:E4:6F:E7:8C:5C:7C:84:2D
            X509v3 Authority Key Identifier:
                keyid:EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/A07D8B96229611F1A7D0762CAF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.182.0/23
                  203.78.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:8e:44:97:79:0e:dd:26:c6:93:3e:a9:58:c4:2a:de:4a:75:
         57:92:50:27:43:42:17:d4:60:5b:35:d2:b0:cd:e4:03:7e:83:
         1f:9f:c9:04:10:d9:0b:c3:8d:bf:ba:73:dd:64:04:ee:97:e9:
         9b:6b:97:1b:87:b0:29:df:5d:ef:25:75:62:08:5c:99:a1:af:
         b7:72:8c:d3:bc:a0:3a:31:72:7f:bc:c3:32:bd:7e:c0:14:6c:
         f2:94:3c:2b:80:6e:0f:fb:2b:d3:84:72:88:6b:91:1e:cb:79:
         61:97:0a:ea:7e:0d:3b:0f:1d:d1:be:fb:61:27:fe:7d:07:0c:
         02:b8:d1:1b:76:0f:1f:99:5c:21:d6:cd:c7:60:36:60:46:2e:
         d6:74:3f:0e:7f:ee:cd:8f:e3:2d:f4:4f:cf:f4:49:0c:78:f8:
         99:d3:1a:62:92:b0:cf:7b:cd:e8:3a:36:56:66:87:51:7b:46:
         42:2e:81:ff:c2:a7:e1:75:c6:dd:6f:61:e0:6c:57:7c:4c:6a:
         4f:9f:fe:c9:24:04:3e:df:98:e2:5c:85:53:d6:aa:8d:f0:52:
         b2:0f:05:09:af:2f:d6:aa:b3:3e:88:4d:bf:de:51:20:6f:eb:
         09:6b:75:56:d3:02:22:74:90:fc:2e:99:bb:94:dd:02:8d:49:
         c7:06:92:7e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NkREMDExMC8GA1UEBRMoRUU2MEJFRkM5NEJDMEY3NEJEOUQxMTE1NkUxNUJBMjNG
N0VCRTVBODAeFw0yNjAzMTgwNjQ5MzZaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YmE0YjAwLTBiNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8T5aoGj8HRHBRuJoEd5j2tYv78P18zcQPxkY/dnqwbafHB9tX6+T/IbQRH7T/
m8br868XfJE/n5diQUU0mJDSdJCjX3ILm259tp5zwiCfW0uVmuBOeeWvD5OKnHey
6n4LkAba3jzJaPtTjwuBNzNok2V5hdyNXPRQFHqnHHr3s/nSPxI+Al1VDzWLRJTX
TJdiGClGCOWWIWwFx7T23xaTp2dH1p+jiowWZ0oSilhP4+4KRFU64sH5eKyw93SC
gCz0zYx4Wv9cNE8uJYpB3L4la0dM7UrfPkZk1vZmcvVi4lbr+NHKgdzvb635iU6W
ixUmpVZviNcz9dNfX84AyWXHAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQULcfP5f82
t1ILPPlI5G/njFx8hC0wHwYDVR0jBBgwFoAU7mC+/JS8D3S9nREVbhW6I/fr5agw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2REQwL0NBNzUwQUNBQzQ3
MDExRjBCRDVBNjIzOUM0RjlBRTAyLzdtQy1fSlM4RDNTOW5SRVZiaFc2SV9mcjVh
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN21DLV9KUzhEM1M5blJFVmJoVzZJX2ZyNWFnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkREMC9DQTc1MEFDQUM0NzAxMUYwQkQ1QTYyMzlDNEY5QUUwMi9BMDdEOEI5NjIy
OTYxMUYxQTdEMDc2MkNBRjgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAFnm7YDBADLTqUwDQYJKoZIhvcNAQELBQADggEBAKKORJd5Dt0mxpM+
qVjEKt5KdVeSUCdDQhfUYFs10rDN5AN+gx+fyQQQ2QvDjb+6c91kBO6X6ZtrlxuH
sCnfXe8ldWIIXJmhr7dyjNO8oDoxcn+8wzK9fsAUbPKUPCuAbg/7K9OEcohrkR7L
eWGXCup+DTsPHdG++2En/n0HDAK40Rt2Dx+ZXCHWzcdgNmBGLtZ0Pw5/7s2P4y30
T8/0SQx4+JnTGmKSsM97zeg6NlZmh1F7RkIugf/Cp+F1xt1vYeBsV3xMak+f/skk
BD7fmOJchVPWqo3wUrIPBQmvL9aqsz6ITb/eUSBv6wlrdVbTAiJ0kPwumbuU3QKN
SccGkn4=
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:18:57 2026 by rpki-client