Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/BB25F03886EF11F19E006003A7EE528E.roa
File:                     BB25F03886EF11F19E006003A7EE528E.roa (raw, json)
Hash identifier:          x5eR6QJJd73YD7r25sERB392+s0FmtDf4S5HjM8+TqI=
Subject key identifier:   38:9C:52:C8:92:01:59:4E:28:BA:A8:6A:7B:11:63:EC:D8:2C:CE:2C
Certificate issuer:       /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial:       1F1D
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/BB25F03886EF11F19E006003A7EE528E.roa
Signing time:             Thu 23 Jul 2026 23:39:22 +0000
ROA not before:           Thu 23 Jul 2026 23:39:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     58668
IP address blocks:        103.12.236.0/22 maxlen: 22
                          103.12.236.0/23 maxlen: 24
                          103.12.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7965 (0x1f1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
        Validity
            Not Before: Jul 23 23:39:22 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a62a62a-81b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:53:63:20:13:1f:93:31:a2:b6:82:92:b0:37:
                    27:a2:03:36:22:51:8b:8d:77:bf:9f:3f:95:d6:73:
                    0b:97:02:c0:6a:0d:40:f2:b9:f1:7b:89:5f:ab:ce:
                    33:d3:f1:cb:0f:4f:19:0b:52:20:4f:7b:ae:14:7d:
                    98:db:a7:42:61:bd:76:a9:4c:f7:7b:af:32:67:3f:
                    d1:7e:d3:c6:43:40:83:e3:81:70:91:11:98:85:ae:
                    a7:f1:5d:e7:c5:43:a0:5b:1d:5f:52:bd:f0:0a:60:
                    2e:de:05:b3:ab:72:5c:9e:f2:c7:13:91:6c:f1:35:
                    4a:09:14:a4:5f:0a:93:f3:68:eb:7b:46:fb:4c:c8:
                    7c:30:3f:26:2e:f9:de:dc:1c:51:f3:f8:66:3f:45:
                    86:4c:99:8f:fa:57:ab:3c:57:09:af:58:e6:0e:4d:
                    ba:b5:d8:b0:fe:70:13:1a:6a:9f:5d:dc:7a:1a:10:
                    31:c5:86:c4:9e:3e:95:12:0d:71:19:f1:a3:df:54:
                    c0:35:66:d5:78:f0:68:7a:46:fd:7f:68:9b:d8:44:
                    99:bd:f6:25:60:5e:e1:e8:e1:5f:70:ea:f4:bb:a4:
                    70:53:ef:42:97:4c:70:86:4d:8a:84:ff:bd:d8:22:
                    d8:9d:76:b9:c4:9a:45:30:ef:31:19:d3:ba:25:06:
                    c4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9C:52:C8:92:01:59:4E:28:BA:A8:6A:7B:11:63:EC:D8:2C:CE:2C
            X509v3 Authority Key Identifier:
                keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/BB25F03886EF11F19E006003A7EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:02:7b:5c:f4:75:86:ec:1f:07:c5:66:e3:0d:ea:2c:57:64:
         1d:ea:74:15:57:e4:ce:5a:24:ee:04:1a:fe:2b:32:ef:83:26:
         b1:5b:65:f3:bb:aa:ad:6a:4a:47:96:a6:b7:85:22:70:b1:b6:
         cc:85:14:a6:83:7f:55:94:10:d9:41:2f:f9:48:79:8c:71:a4:
         2a:43:16:94:af:fe:9c:71:e3:8b:ba:78:58:e7:15:00:46:f6:
         aa:c2:02:58:18:fb:c8:73:09:d1:a9:13:00:dd:59:ad:a7:1d:
         58:63:15:4b:90:6b:90:f6:09:d6:8c:07:1d:26:01:d2:44:a4:
         53:53:6a:e9:90:8f:03:63:9a:df:40:05:1c:d4:23:61:99:f5:
         b5:43:50:b6:da:7f:02:6d:03:64:76:f1:3e:aa:45:16:e1:eb:
         a7:b5:17:1a:0b:36:34:a3:4d:95:2e:ad:a6:93:3c:81:a0:6d:
         62:1d:be:91:5d:9f:3b:b6:0e:11:bb:62:be:29:63:e6:61:8e:
         12:6a:72:77:fd:0b:c6:b3:4d:d5:5b:14:ce:2b:35:76:28:57:
         01:fc:75:17:98:40:3c:30:6f:e2:b6:56:d8:07:76:1d:ec:24:
         b6:1a:82:21:40:78:9c:8d:db:2c:05:b4:af:67:c9:04:d3:9d:
         49:37:7b:02
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICHx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw
NDJFQ0U0NjcwHhcNMjYwNzIzMjMzOTIyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYyYTYyYS04MWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1FNjIBMfkzGitoKSsDcnogM2IlGLjXe/nz+V1nMLlwLAag1A8rnxe4lfq84z
0/HLD08ZC1IgT3uuFH2Y26dCYb12qUz3e68yZz/RftPGQ0CD44FwkRGYha6n8V3n
xUOgWx1fUr3wCmAu3gWzq3JcnvLHE5Fs8TVKCRSkXwqT82jre0b7TMh8MD8mLvne
3BxR8/hmP0WGTJmP+lerPFcJr1jmDk26tdiw/nATGmqfXdx6GhAxxYbEnj6VEg1x
GfGj31TANWbVePBoekb9f2ib2ESZvfYlYF7h6OFfcOr0u6RwU+9Cl0xwhk2KhP+9
2CLYnXa5xJpFMO8xGdO6JQbE3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDicUsiS
AVlOKLqoansRY+zYLM4sMB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB
RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0RDQjYvNjdDNkFBNEE4QUYxMTFFNjk4MDc4MzU1QzRGOUFFMDIvQkIyNUYwMzg4
NkVGMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwzsMA0GCSqGSIb3DQEBCwUAA4IBAQBIAntc9HWG7B8HxWbjDeos
V2Qd6nQVV+TOWiTuBBr+KzLvgyaxW2Xzu6qtakpHlqa3hSJwsbbMhRSmg39VlBDZ
QS/5SHmMcaQqQxaUr/6cceOLunhY5xUARvaqwgJYGPvIcwnRqRMA3Vmtpx1YYxVL
kGuQ9gnWjAcdJgHSRKRTU2rpkI8DY5rfQAUc1CNhmfW1Q1C22n8CbQNkdvE+qkUW
4euntRcaCzY0o02VLq2mkzyBoG1iHb6RXZ87tg4Ru2K+KWPmYY4SanJ3/QvGs03V
WxTOKzV2KFcB/HUXmEA8MG/itlbYB3Yd7CS2GoIhQHicjdssBbSvZ8kE051JN3sC
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:22 2026 by rpki-client