Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
File:                     A6ACA298858911E88026B416C4F9AE02.roa (raw, json)
Hash identifier:          1Ux45iFOSsVdyrWsddCQuy1njUNs718cJ5bX5Y5qjgs=
Subject key identifier:   23:0D:7A:25:D3:EE:98:BB:8F:FF:F6:10:B1:B7:0A:BA:38:DA:5B:83
Certificate issuer:       /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial:       19EF
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa
Signing time:             Mon 28 Sep 2026 16:30:35 +0000
ROA not before:           Mon 28 Sep 2026 16:30:35 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     3223
IP address blocks:        103.118.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 16:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6639 (0x19ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
        Validity
            Not Before: Sep 28 16:30:35 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aba962b-7de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:55:c4:fd:f5:33:6d:3a:86:82:44:3c:a3:
                    9d:7f:33:f0:2f:24:dc:74:d4:6b:34:31:b6:35:b0:
                    49:ed:46:6a:f5:ed:13:dd:42:c7:66:91:79:14:81:
                    50:1b:ff:2c:e9:c3:d5:2b:45:84:89:26:65:9e:6e:
                    26:17:32:f4:73:0b:03:bf:51:8f:f0:fd:bd:ac:6b:
                    bd:9e:ad:bd:63:71:63:cd:91:af:87:97:6e:13:7d:
                    2b:7c:40:69:be:32:40:ce:85:83:c0:d5:84:bb:47:
                    b2:43:b2:11:6f:ff:dd:5c:4d:f9:e7:c4:51:38:45:
                    ad:46:3b:95:70:c4:fd:e1:cc:f4:95:cb:4a:73:3e:
                    b8:20:a3:ef:7e:63:73:00:9e:56:9d:48:05:59:fe:
                    da:03:3d:0e:e2:75:77:48:ec:18:42:b1:9a:c9:20:
                    98:12:9c:f4:e9:22:a6:1f:6f:98:21:be:fe:ff:4a:
                    de:c3:19:41:ca:ba:ae:87:fa:08:55:a6:4e:79:e6:
                    2a:34:f2:16:ca:b0:28:58:f9:8b:12:a8:e5:eb:5a:
                    f8:98:df:e3:f9:06:74:0f:d1:58:e4:e5:01:39:9f:
                    f5:07:3a:cf:d4:09:6e:ac:c8:d5:34:a9:4c:23:81:
                    73:f5:9d:02:ef:bf:8c:85:2e:1c:a4:dc:34:3b:6c:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0D:7A:25:D3:EE:98:BB:8F:FF:F6:10:B1:B7:0A:BA:38:DA:5B:83
            X509v3 Authority Key Identifier:
                keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/A6ACA298858911E88026B416C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:6c:68:c3:d8:f7:fd:08:24:63:b2:77:3d:07:c4:bc:72:fb:
         19:cb:67:11:8a:c8:1e:e8:5f:47:e4:4f:e4:d2:d0:15:1e:9e:
         99:6d:81:34:28:ce:8e:d9:df:39:30:0a:13:bd:4a:ce:08:8c:
         d8:a7:52:2c:3c:d8:47:8f:b3:66:3d:f6:c1:b0:97:55:75:8e:
         5e:3a:75:00:fa:b5:a9:11:89:9b:7d:30:d8:41:fc:9d:87:a5:
         ee:32:25:f2:a0:24:bf:74:74:11:21:22:d4:f5:93:a8:ca:34:
         0b:85:30:70:f5:2c:ba:94:49:ff:77:cc:2f:85:38:66:18:12:
         43:30:ec:4b:ce:4a:e1:91:dc:5c:d2:69:6e:6a:70:cd:b3:64:
         eb:51:86:4a:b7:cb:5a:39:fb:9d:2f:05:1c:a0:37:f4:30:42:
         92:fd:7f:ce:d3:cf:a0:22:82:1b:29:7d:d3:85:fd:23:0b:59:
         3a:98:9b:8c:80:51:04:62:32:2e:c2:b3:f5:7b:b8:fa:98:b9:
         3b:51:19:5a:6a:80:94:71:7d:d3:b9:7a:b6:99:c4:3d:53:ca:
         36:a6:98:2f:68:d8:f2:ed:f9:41:a8:88:10:37:27:54:18:64:
         c3:52:39:0c:ff:6b:71:c5:0c:89:33:b0:17:43:2d:a4:8d:c4:
         c8:5b:3d:c7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG
OEFCQUQxQjAwHhcNMjYwOTI4MTYzMDM1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJhOTYyYi03ZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0ZVxP31M206hoJEPKOdfzPwLyTcdNRrNDG2NbBJ7UZq9e0T3ULHZpF5FIFQ
G/8s6cPVK0WEiSZlnm4mFzL0cwsDv1GP8P29rGu9nq29Y3FjzZGvh5duE30rfEBp
vjJAzoWDwNWEu0eyQ7IRb//dXE3558RROEWtRjuVcMT94cz0lctKcz64IKPvfmNz
AJ5WnUgFWf7aAz0O4nV3SOwYQrGaySCYEpz06SKmH2+YIb7+/0rewxlByrquh/oI
VaZOeeYqNPIWyrAoWPmLEqjl61r4mN/j+QZ0D9FY5OUBOZ/1BzrP1AlurMjVNKlM
I4Fz9Z0C77+MhS4cpNw0O2wLpQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCMNeiXT
7pi7j//2ELG3Cro42luDMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2
REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0RFQjMvNUQ3MzVENDY5NkRFMTFFN0JBN0QyQTc3QzRGOUFFMDIvQTZBQ0EyOTg4
NTg5MTFFODgwMjZCNDE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3ZQMA0GCSqGSIb3DQEBCwUAA4IBAQBibGjD2Pf9CCRjsnc9B8S8
cvsZy2cRisge6F9H5E/k0tAVHp6ZbYE0KM6O2d85MAoTvUrOCIzYp1IsPNhHj7Nm
PfbBsJdVdY5eOnUA+rWpEYmbfTDYQfydh6XuMiXyoCS/dHQRISLU9ZOoyjQLhTBw
9Sy6lEn/d8wvhThmGBJDMOxLzkrhkdxc0mluanDNs2TrUYZKt8taOfudLwUcoDf0
MEKS/X/O08+gIoIbKX3Thf0jC1k6mJuMgFEEYjIuwrP1e7j6mLk7URlaaoCUcX3T
uXq2mcQ9U8o2ppgvaNjy7flBqIgQNydUGGTDUjkM/2txxQyJM7AXQy2kjcTIWz3H
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:54:39 2026 by rpki-client