Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa
File:                     73381ABCAB3611EF809A470EC4F9AE02.roa (raw, json)
Hash identifier:          Bpp0NNGhjuRJlO9EuR/4FtD6FXUS1sXJlpMkM9VSK2Q=
Subject key identifier:   95:23:E5:EC:89:F4:A3:6B:A5:46:20:A3:48:FB:1B:DC:90:FF:12:9F
Certificate issuer:       /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial:       069D
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa
Signing time:             Fri 08 May 2026 23:28:11 +0000
ROA not before:           Fri 08 May 2026 23:28:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152700
IP address blocks:        103.136.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
        Validity
            Not Before: May  8 23:28:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fe718a-2cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:8f:7e:f0:d9:84:9a:f9:09:d8:df:3f:d5:
                    c3:43:1a:48:42:2b:fd:fd:75:bc:0e:2e:84:2d:11:
                    25:ed:71:6a:2c:e0:12:44:6c:a6:39:81:ad:c5:16:
                    35:93:a5:8b:31:e7:5d:8e:bf:2a:f6:3f:95:c4:23:
                    95:bf:b8:e2:10:e4:01:d9:6b:b1:8d:e1:bf:6d:8b:
                    34:eb:26:47:5e:0c:65:06:ab:5b:98:d5:d8:94:eb:
                    62:45:cc:ff:0f:63:8d:79:95:16:23:94:a9:dc:e4:
                    8f:ad:3e:8e:fc:14:e8:3a:02:13:13:8b:e7:f8:f6:
                    18:78:0a:f1:7e:a3:62:57:e5:00:26:2f:6d:e7:f8:
                    5f:5b:65:a7:0d:6d:6f:06:6f:8f:6a:d8:d1:44:05:
                    38:62:71:d1:99:48:ff:e6:be:d9:15:34:e8:f4:cb:
                    9a:0d:17:ea:eb:c0:e8:4e:ad:1e:45:a6:57:cf:0b:
                    37:2a:20:49:57:39:1c:0a:72:92:43:83:6e:d7:bd:
                    bc:4f:8d:6d:a9:42:31:d9:6c:9c:49:a0:78:b5:ef:
                    a7:44:2c:6f:ce:7b:fe:05:8b:ca:10:eb:30:66:9a:
                    20:88:82:4f:a8:2a:7d:8e:1d:fd:92:87:8b:bb:5b:
                    db:2a:43:d4:25:1d:49:ed:07:80:24:16:bf:99:72:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:23:E5:EC:89:F4:A3:6B:A5:46:20:A3:48:FB:1B:DC:90:FF:12:9F
            X509v3 Authority Key Identifier:
                keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:1c:88:80:64:0d:85:ce:0c:57:8d:93:58:2c:29:7b:64:f1:
         93:a3:5b:43:0e:5a:58:8a:e7:93:d1:13:3e:fb:fc:f3:71:15:
         f3:a1:fc:99:ab:73:a7:1a:04:51:fc:60:4b:91:5e:25:a4:3d:
         b6:e2:65:61:ab:4e:d7:ea:36:4e:7b:93:76:7c:1e:4e:33:86:
         39:2d:4c:fb:0c:6a:2d:0b:38:e5:d6:b4:58:2d:91:0b:28:a9:
         00:ca:d8:26:0e:17:a7:05:95:84:b3:8d:bf:2f:63:f9:23:c8:
         f4:51:52:96:f7:cc:db:89:18:f8:44:51:58:24:5f:37:69:e7:
         19:47:de:61:60:43:39:7e:bb:b3:f6:56:f0:67:16:72:21:b0:
         84:ef:c9:be:d8:a0:79:c4:8b:f0:24:8f:43:c1:b7:ac:db:98:
         59:e6:0f:90:92:c5:3c:ea:1d:8f:3e:1e:cf:e1:15:9d:4b:e6:
         f0:42:9c:83:a4:34:46:1f:9b:2d:d8:0d:7c:cc:91:f6:28:1b:
         fe:77:34:18:a0:18:81:a2:f7:cb:82:07:77:db:04:d6:00:21:
         7d:8b:09:74:0c:fc:81:d3:03:99:8e:b9:d7:be:4e:c8:27:c9:
         63:7b:a5:f9:48:bd:78:c2:cf:6e:22:8e:f4:fb:76:fb:11:3a:
         e2:f6:3e:46
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3
OTlBRUY3NjcwHhcNMjYwNTA4MjMyODExWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZlNzE4YS0yY2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzjiPfvDZhJr5CdjfP9XDQxpIQiv9/XW8Di6ELREl7XFqLOASRGymOYGtxRY1
k6WLMeddjr8q9j+VxCOVv7jiEOQB2WuxjeG/bYs06yZHXgxlBqtbmNXYlOtiRcz/
D2ONeZUWI5Sp3OSPrT6O/BToOgITE4vn+PYYeArxfqNiV+UAJi9t5/hfW2WnDW1v
Bm+PatjRRAU4YnHRmUj/5r7ZFTTo9MuaDRfq68DoTq0eRaZXzws3KiBJVzkcCnKS
Q4Nu1728T41tqUIx2WycSaB4te+nRCxvznv+BYvKEOswZpogiIJPqCp9jh39koeL
u1vbKkPUJR1J7QeAJBa/mXLAdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJUj5eyJ
9KNrpUYgo0j7G9yQ/xKfMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw
MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0IwOUUvNDcxMTlEMDBEMDBCMTFFQkI1ODkwRTdCQzRGOUFFMDIvNzMzODFBQkNB
QjM2MTFFRjgwOUE0NzBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4iUMA0GCSqGSIb3DQEBCwUAA4IBAQDZHIiAZA2FzgxXjZNYLCl7
ZPGTo1tDDlpYiueT0RM++/zzcRXzofyZq3OnGgRR/GBLkV4lpD224mVhq07X6jZO
e5N2fB5OM4Y5LUz7DGotCzjl1rRYLZELKKkAytgmDhenBZWEs42/L2P5I8j0UVKW
98zbiRj4RFFYJF83aecZR95hYEM5fruz9lbwZxZyIbCE78m+2KB5xIvwJI9Dwbes
25hZ5g+QksU86h2PPh7P4RWdS+bwQpyDpDRGH5st2A18zJH2KBv+dzQYoBiBovfL
ggd32wTWACF9iwl0DPyB0wOZjrnXvk7IJ8lje6X5SL14ws9uIo70+3b7ETri9j5G
-----END CERTIFICATE-----
Generated at Wed May 13 06:38:54 2026 by rpki-client