Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B62A6E82D7F511EB82D62F73C4F9AE02.roa
File:                     B62A6E82D7F511EB82D62F73C4F9AE02.roa (raw, json)
Hash identifier:          MOXNPP0Z5FDw+7dHenMPVPHPJqhtHn3B3TzOutXmyJQ=
Subject key identifier:   C6:BB:82:A9:52:3F:A2:1C:C8:98:9B:BB:DD:2E:F2:2F:38:59:7B:30
Certificate issuer:       /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial:       0685
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B62A6E82D7F511EB82D62F73C4F9AE02.roa
Signing time:             Tue 14 Jul 2026 23:24:32 +0000
ROA not before:           Tue 14 Jul 2026 23:24:32 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55953
IP address blocks:        103.230.13.0/24 maxlen: 24
                          103.230.14.0/24 maxlen: 24
                          103.230.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
        Validity
            Not Before: Jul 14 23:24:32 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a56c530-4636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:37:de:d4:aa:48:e4:f9:9e:3d:69:4c:9b:f0:
                    9b:4d:bf:d3:fa:40:50:e6:35:32:6f:94:68:c3:6e:
                    84:0b:08:0e:c5:a6:08:25:9d:18:f4:9f:8c:a5:9d:
                    25:01:a0:98:fb:c2:57:6c:4f:ba:36:75:14:d1:4a:
                    38:87:20:ed:3b:7b:1d:42:5d:9d:78:fa:9d:e5:38:
                    29:68:2a:77:7b:c9:a7:3b:e2:5d:7e:eb:9f:9f:93:
                    ed:8a:92:25:56:24:7c:20:25:f8:56:61:f7:83:c4:
                    0c:ca:e1:b9:13:61:f1:9a:ef:ff:c6:ba:8f:43:d5:
                    e6:8b:cb:45:89:55:73:52:87:9e:f5:45:a9:b7:fb:
                    44:d9:26:1a:05:37:7a:4a:e2:59:8b:1d:0d:1a:3f:
                    d0:f7:a6:bc:e1:5e:f3:d4:77:ae:dc:2a:81:c3:95:
                    b2:ff:14:ac:be:c5:5d:2c:06:2c:bf:2b:1d:43:64:
                    3e:6f:f5:c1:34:b6:d7:c4:3a:e4:f3:93:a1:18:2c:
                    77:4b:91:97:02:52:6b:37:25:6f:ac:c2:da:e7:c7:
                    bb:ed:d7:ec:55:5e:6a:dc:f8:41:c2:04:13:26:a9:
                    34:cc:81:50:a5:54:57:d2:7c:7e:9a:0e:f8:7c:4a:
                    f2:57:86:2d:d4:4b:96:73:94:96:8a:b5:7c:3c:44:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BB:82:A9:52:3F:A2:1C:C8:98:9B:BB:DD:2E:F2:2F:38:59:7B:30
            X509v3 Authority Key Identifier:
                keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B62A6E82D7F511EB82D62F73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.13.0-103.230.15.255

    Signature Algorithm: sha256WithRSAEncryption
         29:f3:5c:21:53:ff:2f:73:a2:f2:94:48:d0:e0:25:6f:30:e1:
         8f:f8:52:31:02:77:35:d3:9e:bc:23:68:c1:77:93:08:33:22:
         31:05:60:1e:77:7d:40:ef:ed:ef:c1:fd:df:78:77:91:9f:fa:
         86:0a:5b:58:ed:b9:a5:9f:b0:d4:1f:83:f9:fe:d0:fd:4c:7c:
         93:be:03:2b:b6:ed:69:c4:78:85:8e:d7:65:c9:b5:b7:93:76:
         e2:ae:aa:ee:8b:de:dd:18:29:e4:52:3e:9f:db:84:63:0e:ab:
         6b:28:9a:90:9b:43:67:2c:2e:9b:12:37:27:7a:9f:ac:d6:16:
         73:b1:66:64:47:0a:93:13:51:fa:26:27:16:48:8b:18:1c:d2:
         2c:24:72:ae:6c:a2:d9:48:d0:40:0a:fd:af:1b:c7:bb:cc:2f:
         7a:70:cc:cf:dd:2e:1b:9d:2a:c9:0b:d1:9c:d8:25:05:e9:b5:
         77:7d:57:fa:c2:4c:1d:57:9a:8e:43:d6:bf:c3:58:de:ba:e5:
         de:cc:97:a1:dc:7b:b2:7d:f9:7d:ba:5b:66:de:37:f0:fa:a0:
         00:4e:1a:61:31:de:03:7d:6b:16:cf:18:26:4c:34:1e:c6:80:
         9a:36:88:e6:fd:60:3f:c2:0e:83:4b:42:87:52:0d:e0:96:2a:
         cd:32:ab:a4
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NFNTQxMTAvBgNVBAUTKDFBQUQwMEE2MUE2NDkwNDBBQjUyNkExNDJCNUQ3QkRF
RTVBMDFDQkYwHhcNMjYwNzE0MjMyNDMyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU2YzUzMC00NjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApzfe1KpI5PmePWlMm/CbTb/T+kBQ5jUyb5Row26ECwgOxaYIJZ0Y9J+MpZ0l
AaCY+8JXbE+6NnUU0Uo4hyDtO3sdQl2dePqd5TgpaCp3e8mnO+Jdfuufn5PtipIl
ViR8ICX4VmH3g8QMyuG5E2Hxmu//xrqPQ9Xmi8tFiVVzUoee9UWpt/tE2SYaBTd6
SuJZix0NGj/Q96a84V7z1Heu3CqBw5Wy/xSsvsVdLAYsvysdQ2Q+b/XBNLbXxDrk
85OhGCx3S5GXAlJrNyVvrMLa58e77dfsVV5q3PhBwgQTJqk0zIFQpVRX0nx+mg74
fEryV4Yt1EuWc5SWirV8PET79wIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFMa7gqlS
P6IcyJibu90u8i84WXswMB8GA1UdIwQYMBaAFBqtAKYaZJBAq1JqFCtde97loBy/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0U1NC9CRjlGQ0FGMEQ3
RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tFQ3JVbW9VSzExNzN1V2dI
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dxMEFwaHBra0VDclVtb1VLMTE3M3VXZ0hMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0NFNTQvQkY5RkNBRjBEN0VEMTFFQjhCNTZENzFBQzRGOUFFMDIvQjYyQTZFODJE
N0Y1MTFFQjgyRDYyRjczQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABn5g0DBARn5gAwDQYJKoZIhvcNAQELBQADggEBACnzXCFT/y9z
ovKUSNDgJW8w4Y/4UjECdzXTnrwjaMF3kwgzIjEFYB53fUDv7e/B/d94d5Gf+oYK
W1jtuaWfsNQfg/n+0P1MfJO+Ayu27WnEeIWO12XJtbeTduKuqu6L3t0YKeRSPp/b
hGMOq2sompCbQ2csLpsSNyd6n6zWFnOxZmRHCpMTUfomJxZIixgc0iwkcq5sotlI
0EAK/a8bx7vML3pwzM/dLhudKskL0ZzYJQXptXd9V/rCTB1Xmo5D1r/DWN665d7M
l6Hce7J9+X26W2beN/D6oABOGmEx3gN9axbPGCZMNB7GgJo2iOb9YD/CDoNLQodS
DeCWKs0yq6Q=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:23:46 2026 by rpki-client