Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9BB673AA479111ECA77ED34DC4F9AE02.roa
File:                     9BB673AA479111ECA77ED34DC4F9AE02.roa (raw, json)
Hash identifier:          9p+9k7Facd+Aj9FTPOqeaWhpizHbwTwIdBQJJ41NhYo=
Subject key identifier:   8E:85:E3:EA:53:D8:98:A2:FB:77:9C:2A:E5:EE:2E:B7:E8:27:4A:DB
Certificate issuer:       /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Certificate serial:       05B5
Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9BB673AA479111ECA77ED34DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:59:19 +0000
ROA not before:           Sat 04 Oct 2025 23:55:01 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.196.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
                          rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
        Validity
            Not Before: Oct  4 23:55:01 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45447-8651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:36:e0:7f:cb:00:ca:d0:1d:40:2e:b9:a7:
                    7a:a3:cc:92:e7:22:35:dc:a9:2c:f2:da:eb:8c:e1:
                    ef:4a:5f:23:8b:fc:e5:37:8a:64:76:f3:78:ed:43:
                    37:c1:a2:84:99:57:8f:82:08:35:5d:fb:21:f7:a3:
                    5f:2d:14:d1:e2:1f:db:75:3e:86:0b:55:3c:50:53:
                    44:38:14:cf:36:68:0b:d8:c5:d5:b7:50:d3:ec:ca:
                    70:e7:4c:48:1b:ca:dd:64:74:bf:17:fc:e2:8c:e3:
                    94:a2:df:b0:51:32:77:7c:81:07:e0:5c:67:e6:98:
                    bb:5f:54:33:a1:1f:58:fa:6d:45:fb:87:50:a1:f1:
                    6c:1b:b3:87:42:1e:56:f2:da:7c:fd:79:64:ff:71:
                    d3:2e:7e:b6:7b:02:9f:4f:57:36:d3:5c:f3:e3:fe:
                    88:52:5f:ab:12:c8:c4:34:4f:6b:27:0e:4c:8c:bd:
                    a9:70:9e:63:47:a8:62:f9:7f:ec:9e:5a:f7:a5:88:
                    d8:50:53:94:16:76:ae:e8:64:45:77:11:65:25:02:
                    16:45:d5:ad:56:be:eb:4d:56:ee:05:42:8b:d6:3b:
                    eb:3b:ec:23:7c:5c:39:05:54:7c:e0:e6:a4:a0:c4:
                    34:8b:d3:8f:a4:0d:f3:45:e8:83:99:c0:2e:61:a3:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:85:E3:EA:53:D8:98:A2:FB:77:9C:2A:E5:EE:2E:B7:E8:27:4A:DB
            X509v3 Authority Key Identifier:
                keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9BB673AA479111ECA77ED34DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:c0:21:00:58:24:73:43:1a:23:3f:4f:9b:4c:09:13:f0:
         38:79:27:67:4b:b2:6a:fa:ed:b0:02:65:2c:41:20:da:a1:3d:
         dc:1d:99:13:db:fe:6e:ac:60:5e:6c:68:05:81:8c:1f:90:91:
         b6:b0:71:24:cb:6f:a6:93:7a:12:e1:99:ed:ee:a3:6f:38:03:
         41:80:7d:0d:83:4c:1f:fd:1b:f6:aa:09:a1:9c:3a:eb:fc:6c:
         f4:40:b7:09:dc:af:7e:46:82:a9:5b:f8:61:17:0b:33:05:31:
         7f:ff:96:83:81:bc:e5:8e:cf:47:5d:34:98:10:e5:1f:00:26:
         6f:de:81:76:57:02:5c:5a:35:27:31:72:c8:25:be:3c:30:16:
         5f:8f:f1:b9:25:cd:26:56:13:0b:8a:8b:19:94:d7:27:1a:25:
         e2:09:7b:dd:89:d8:5c:02:71:aa:60:1d:c0:83:22:90:03:f7:
         f0:b2:58:1f:a3:e4:98:12:6d:bd:af:37:07:9e:f5:f5:36:13:
         e2:c1:e2:85:bd:9d:6c:7f:fd:49:35:7e:ea:23:7e:70:08:71:
         f8:42:14:08:47:be:aa:bf:cc:24:64:d5:bf:f6:9e:8a:fd:0a:
         7d:70:52:c9:b4:26:4e:b0:07:ee:d9:b0:39:07:c5:73:3b:14:
         df:dc:41:0a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1
ODE1MjMxRkYwHhcNMjUxMDA0MjM1NTAxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTQ0Ny04NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtp424H/LAMrQHUAuuad6o8yS5yI13Kks8trrjOHvSl8ji/zlN4pkdvN47UM3
waKEmVePggg1Xfsh96NfLRTR4h/bdT6GC1U8UFNEOBTPNmgL2MXVt1DT7Mpw50xI
G8rdZHS/F/zijOOUot+wUTJ3fIEH4Fxn5pi7X1QzoR9Y+m1F+4dQofFsG7OHQh5W
8tp8/Xlk/3HTLn62ewKfT1c201zz4/6IUl+rEsjENE9rJw5MjL2pcJ5jR6hi+X/s
nlr3pYjYUFOUFnau6GRFdxFlJQIWRdWtVr7rTVbuBUKL1jvrO+wjfFw5BVR84Oak
oMQ0i9OPpA3zReiDmcAuYaPCGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI6F4+pT
2Jii+3ecKuXuLrfoJ0rbMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB
NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN
ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzI3OEIvMDZCMEI2MkEwQTQ4MTFFQ0JDNTczRDVGQzRGOUFFMDIvOUJCNjczQUE0
NzkxMTFFQ0E3N0VEMzREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ8QgMA0GCSqGSIb3DQEBCwUAA4IBAQBtOsAhAFgkc0MaIz9Pm0wJ
E/A4eSdnS7Jq+u2wAmUsQSDaoT3cHZkT2/5urGBebGgFgYwfkJG2sHEky2+mk3oS
4Znt7qNvOANBgH0Ng0wf/Rv2qgmhnDrr/Gz0QLcJ3K9+RoKpW/hhFwszBTF//5aD
gbzljs9HXTSYEOUfACZv3oF2VwJcWjUnMXLIJb48MBZfj/G5Jc0mVhMLiosZlNcn
GiXiCXvdidhcAnGqYB3AgyKQA/fwslgfo+SYEm29rzcHnvX1NhPiweKFvZ1sf/1J
NX7qI35wCHH4QhQIR76qv8wkZNW/9p6K/Qp9cFLJtCZOsAfu2bA5B8VzOxTf3EEK
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:58 2026 by rpki-client