Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/BA7E6B1A30B911EC974C3830C4F9AE02.roa
File:                     BA7E6B1A30B911EC974C3830C4F9AE02.roa (raw, json)
Hash identifier:          xxqSemGox4kEl/WxL9eirDeCZylY2NkVCa0+GT9iexI=
Subject key identifier:   33:D9:60:5E:1B:66:61:80:E2:65:81:F0:B0:5E:2F:20:19:52:3C:2B
Certificate issuer:       /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Certificate serial:       058E
Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/BA7E6B1A30B911EC974C3830C4F9AE02.roa
Signing time:             Thu 23 Jul 2026 00:25:23 +0000
ROA not before:           Thu 23 Jul 2026 00:25:23 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     45753
IP address blocks:        103.117.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
                          rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
        Validity
            Not Before: Jul 23 00:25:23 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a615f73-f6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:be:3a:73:d2:b9:56:64:69:9b:5d:95:8f:
                    32:bb:0c:4b:16:cc:28:bb:35:98:74:87:9a:4d:98:
                    98:f2:f9:c9:d9:4c:d9:57:08:1e:c7:67:27:72:7f:
                    e4:a7:eb:0c:b6:da:55:5b:da:57:80:33:fa:16:f9:
                    31:96:db:29:53:7a:5f:fc:f3:c2:af:56:f3:b7:96:
                    d3:15:5b:e3:09:ed:42:93:a0:ef:5e:fe:86:49:e3:
                    ef:e8:2e:4b:8b:36:34:c5:87:2c:fb:84:b2:9a:48:
                    56:b5:41:ed:9d:45:2a:34:2e:9b:37:be:ab:66:50:
                    0e:56:46:b2:20:b4:fa:4c:85:1c:0d:20:83:f7:1c:
                    c6:bb:5b:9c:3d:1c:74:12:38:bb:d0:76:37:e6:e5:
                    c0:88:6f:29:cb:73:bc:30:3c:97:1b:33:e4:a5:3d:
                    e6:ac:44:24:71:06:f5:4e:99:c9:a6:27:b5:13:d4:
                    0a:89:ce:15:7c:59:af:5e:41:9c:68:38:d9:32:c1:
                    a6:e2:f3:34:48:c8:d1:ff:19:9e:b5:b1:a8:3b:c5:
                    94:4e:86:cb:70:c4:a3:5e:3e:c7:3a:25:21:58:b5:
                    12:63:bc:9c:5f:09:15:75:34:34:04:d8:5e:f1:45:
                    b5:77:e5:c2:7d:f3:f5:f3:e7:d9:70:12:a9:a2:b2:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D9:60:5E:1B:66:61:80:E2:65:81:F0:B0:5E:2F:20:19:52:3C:2B
            X509v3 Authority Key Identifier:
                keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/BA7E6B1A30B911EC974C3830C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:bd:86:02:7b:6d:ca:0f:6a:03:18:74:c6:6e:93:e0:9d:51:
         6e:db:a7:28:94:53:30:e9:e3:f3:4d:ca:f4:28:9e:e4:72:42:
         65:f6:a9:1f:91:b4:00:81:ff:02:28:4d:a8:d1:b5:22:b6:9d:
         b7:15:22:d8:8d:cc:03:eb:3f:20:67:c2:eb:a7:a6:4c:69:6c:
         ce:6c:64:96:1b:0e:8f:1b:6b:a4:03:d5:af:b4:5d:eb:ba:f7:
         2a:bf:b0:9f:fe:70:9d:e3:22:ae:78:3c:67:3c:60:0b:d4:2c:
         b0:c1:b8:fd:03:6f:4d:2a:a8:cb:88:7e:a0:4a:83:a0:83:31:
         21:da:b6:b8:ae:00:91:97:14:63:bc:52:eb:83:e5:41:59:59:
         36:93:8c:26:0c:26:81:9d:90:0d:1b:83:2c:9a:19:f6:a3:28:
         f1:51:3b:38:b1:86:c0:a2:7c:60:30:d8:e7:32:54:60:ae:e5:
         dc:43:d6:b8:0d:49:7e:7a:c8:39:d3:5b:d7:1d:cd:59:78:ee:
         de:b6:d6:da:4c:bd:57:46:9d:47:76:19:74:19:82:c1:83:e6:
         d0:33:3e:bf:52:16:0c:c1:73:87:ab:f1:c7:fe:9a:3d:bf:f3:
         f8:69:ce:0e:12:2c:7c:19:2f:8b:9e:0f:0f:fd:7c:3d:4e:6a:
         87:3e:67:44
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx
QzhEMjIzNTIwHhcNMjYwNzIzMDAyNTIzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYxNWY3My1mNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAry++OnPSuVZkaZtdlY8yuwxLFswouzWYdIeaTZiY8vnJ2UzZVwgex2cncn/k
p+sMttpVW9pXgDP6FvkxltspU3pf/PPCr1bzt5bTFVvjCe1Ck6DvXv6GSePv6C5L
izY0xYcs+4SymkhWtUHtnUUqNC6bN76rZlAOVkayILT6TIUcDSCD9xzGu1ucPRx0
Eji70HY35uXAiG8py3O8MDyXGzPkpT3mrEQkcQb1TpnJpie1E9QKic4VfFmvXkGc
aDjZMsGm4vM0SMjR/xmetbGoO8WUTobLcMSjXj7HOiUhWLUSY7ycXwkVdTQ0BNhe
8UW1d+XCffP18+fZcBKporLfTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDPZYF4b
ZmGA4mWB8LBeLyAZUjwrMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw
QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ
MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzg3OTAvMzNGRTM2MjYzMEI3MTFFQzlCMDI5NDJEQzRGOUFFMDIvQkE3RTZCMUEz
MEI5MTFFQzk3NEMzODMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3WQMA0GCSqGSIb3DQEBCwUAA4IBAQCpvYYCe23KD2oDGHTGbpPg
nVFu26colFMw6ePzTcr0KJ7kckJl9qkfkbQAgf8CKE2o0bUitp23FSLYjcwD6z8g
Z8Lrp6ZMaWzObGSWGw6PG2ukA9WvtF3ruvcqv7Cf/nCd4yKueDxnPGAL1Cywwbj9
A29NKqjLiH6gSoOggzEh2ra4rgCRlxRjvFLrg+VBWVk2k4wmDCaBnZANG4Msmhn2
oyjxUTs4sYbAonxgMNjnMlRgruXcQ9a4DUl+esg501vXHc1ZeO7ettbaTL1XRp1H
dhl0GYLBg+bQMz6/UhYMwXOHq/HH/po9v/P4ac4OEix8GS+Lng8P/Xw9TmqHPmdE
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:36 2026 by rpki-client