Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/9659D3F6D81111EB8C3ACC5DC4F9AE02.roa
File:                     9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (raw, json)
Hash identifier:          /lzYlyTLMVfaGt+Jef9OOqRfUsRdfvmKL6qV7+rtCAM=
Subject key identifier:   5D:1B:36:E6:BD:93:B7:AA:5F:89:FA:A5:C7:60:DA:4B:33:45:E1:2D
Certificate issuer:       /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial:       0684
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/9659D3F6D81111EB8C3ACC5DC4F9AE02.roa
Signing time:             Tue 14 Jul 2026 23:24:30 +0000
ROA not before:           Tue 14 Jul 2026 23:24:30 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     133905
IP address blocks:        103.230.13.0/24 maxlen: 24
                          103.230.14.0/24 maxlen: 24
                          103.230.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1668 (0x684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
        Validity
            Not Before: Jul 14 23:24:30 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a56c52e-24da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:3d:db:22:a8:c2:4a:85:f1:b4:3e:ea:5e:
                    1c:3e:7b:42:90:a8:8e:e0:72:96:2a:53:09:ad:c4:
                    3e:7f:61:ab:c6:84:10:b6:64:06:d1:e0:1f:81:fd:
                    02:60:09:cf:15:95:23:62:a9:02:c0:07:8f:82:b5:
                    3e:1a:b5:78:33:d7:ff:9b:79:b1:ae:33:ef:3a:8f:
                    b9:45:a4:d5:73:d9:61:56:72:08:70:a4:c6:ee:9d:
                    ca:72:ff:de:75:2f:8b:4a:12:b5:90:30:52:47:5f:
                    39:fa:7d:59:5a:0c:ba:8f:e8:a8:f5:20:a8:2c:db:
                    47:b7:62:01:83:60:90:74:27:eb:92:6c:56:ec:96:
                    53:61:66:7b:ab:c2:9c:d6:b9:7b:b2:b6:fc:24:eb:
                    73:99:0e:6d:cd:7c:68:a3:f6:41:6a:3e:13:33:8a:
                    d3:07:25:5e:8b:72:42:6d:a6:25:85:60:ca:0f:14:
                    c7:f2:f4:b7:3c:8c:6c:28:4b:25:3b:56:b8:6e:16:
                    b4:e0:d0:e5:b8:6e:e4:9f:82:9a:ff:a8:f3:ee:b3:
                    ff:fa:30:1a:7a:a7:3b:63:3d:54:a1:ec:fc:e8:d0:
                    17:ec:bf:bf:c9:84:28:36:da:5f:aa:f2:fd:d5:e7:
                    ac:ae:f6:10:52:b5:a8:b3:dd:38:b9:4a:73:22:17:
                    fe:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1B:36:E6:BD:93:B7:AA:5F:89:FA:A5:C7:60:DA:4B:33:45:E1:2D
            X509v3 Authority Key Identifier:
                keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/9659D3F6D81111EB8C3ACC5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.13.0-103.230.15.255

    Signature Algorithm: sha256WithRSAEncryption
         01:84:8e:eb:f7:f9:14:ef:f2:81:b3:43:90:ea:ea:75:10:fb:
         0f:b4:c6:b4:9f:4f:b9:c3:74:53:b0:4a:01:55:7b:21:52:eb:
         02:9b:b1:44:75:01:e8:d0:54:ed:b5:32:25:e7:85:1a:2a:17:
         90:0b:ff:7f:c1:5b:9b:22:37:f3:ca:3d:17:84:83:c5:78:d5:
         85:36:1a:d4:a2:61:09:80:11:75:42:ca:0e:78:eb:8d:3e:17:
         52:1b:b6:62:22:69:c8:eb:b6:6e:07:ad:a2:f8:b5:bb:30:02:
         c0:e8:66:a7:19:a8:18:c9:dd:5b:bb:92:b2:fe:1d:85:ad:c3:
         bb:1c:8d:72:0f:30:99:2a:d4:6e:32:ba:7a:14:7b:9c:3c:5a:
         a7:be:54:f3:db:9c:54:0d:81:17:7f:88:ba:e1:8c:11:42:f5:
         84:ff:48:7d:c7:ad:f4:a9:ad:f9:74:05:2e:a8:03:01:d9:aa:
         c0:3e:0e:00:68:e7:c1:b2:e2:34:b8:86:aa:81:45:1c:4a:28:
         b4:11:7e:7f:01:de:23:e8:7e:db:54:e2:88:c5:18:49:07:00:
         71:05:5f:ad:69:49:37:cc:00:fb:de:e7:f1:f1:a4:37:e4:b0:
         1e:f7:b1:4f:b7:7b:e3:47:f2:76:dd:80:5b:31:c2:26:8e:cc:
         23:dd:16:26
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NFNTQxMTAvBgNVBAUTKDFBQUQwMEE2MUE2NDkwNDBBQjUyNkExNDJCNUQ3QkRF
RTVBMDFDQkYwHhcNMjYwNzE0MjMyNDMwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU2YzUyZS0yNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAud092yKowkqF8bQ+6l4cPntCkKiO4HKWKlMJrcQ+f2GrxoQQtmQG0eAfgf0C
YAnPFZUjYqkCwAePgrU+GrV4M9f/m3mxrjPvOo+5RaTVc9lhVnIIcKTG7p3Kcv/e
dS+LShK1kDBSR185+n1ZWgy6j+io9SCoLNtHt2IBg2CQdCfrkmxW7JZTYWZ7q8Kc
1rl7srb8JOtzmQ5tzXxoo/ZBaj4TM4rTByVei3JCbaYlhWDKDxTH8vS3PIxsKEsl
O1a4bha04NDluG7kn4Ka/6jz7rP/+jAaeqc7Yz1Uoez86NAX7L+/yYQoNtpfqvL9
1eesrvYQUrWos904uUpzIhf+wQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFF0bNua9
k7eqX4n6pcdg2kszReEtMB8GA1UdIwQYMBaAFBqtAKYaZJBAq1JqFCtde97loBy/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0U1NC9CRjlGQ0FGMEQ3
RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tFQ3JVbW9VSzExNzN1V2dI
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dxMEFwaHBra0VDclVtb1VLMTE3M3VXZ0hMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0NFNTQvQkY5RkNBRjBEN0VEMTFFQjhCNTZENzFBQzRGOUFFMDIvOTY1OUQzRjZE
ODExMTFFQjhDM0FDQzVEQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABn5g0DBARn5gAwDQYJKoZIhvcNAQELBQADggEBAAGEjuv3+RTv
8oGzQ5Dq6nUQ+w+0xrSfT7nDdFOwSgFVeyFS6wKbsUR1AejQVO21MiXnhRoqF5AL
/3/BW5siN/PKPReEg8V41YU2GtSiYQmAEXVCyg54640+F1IbtmIiacjrtm4HraL4
tbswAsDoZqcZqBjJ3Vu7krL+HYWtw7scjXIPMJkq1G4yunoUe5w8Wqe+VPPbnFQN
gRd/iLrhjBFC9YT/SH3HrfSprfl0BS6oAwHZqsA+DgBo58Gy4jS4hqqBRRxKKLQR
fn8B3iPofttU4ojFGEkHAHEFX61pSTfMAPve5/HxpDfksB73sU+3e+NH8nbdgFsx
wiaOzCPdFiY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:37:39 2026 by rpki-client