Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/7594FBFA2C7311EFA27A6526C4F9AE02.roa
File:                     7594FBFA2C7311EFA27A6526C4F9AE02.roa (raw, json)
Hash identifier:          T8062HDyVNi3svL+yqjfb12/HBkfG6y31NojvgFF9qc=
Subject key identifier:   89:63:23:F2:4F:13:AC:74:DC:DC:07:DA:5A:33:64:2D:F6:BB:30:A4
Certificate issuer:       /CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
Certificate serial:       019D
Authority key identifier: E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/7594FBFA2C7311EFA27A6526C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 04:54:06 +0000
ROA not before:           Fri 07 Aug 2026 04:54:05 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140062
IP address blocks:        103.69.164.0/22 maxlen: 22
                          203.14.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl
                          rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09B8, serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
        Validity
            Not Before: Aug  7 04:54:05 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7564ed-d465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:3b:e1:93:2b:09:5f:bb:c2:7b:56:6d:b9:
                    01:a1:c1:8f:e1:7c:b7:16:50:a6:b9:55:74:03:da:
                    00:94:da:ea:cc:a3:32:aa:55:72:1e:1f:8a:e9:8d:
                    6d:e7:87:07:f0:e5:11:e3:85:70:26:db:85:53:3f:
                    c9:c3:fa:b9:9b:7c:17:72:fd:fe:fc:05:3a:a6:f5:
                    4a:82:9d:db:f2:df:d9:7c:c5:4c:38:7c:4e:89:a7:
                    b0:71:a2:5d:6b:91:bd:5a:87:0c:24:54:47:ca:12:
                    ce:8b:d7:82:f1:d7:3b:a1:f1:7f:1e:3c:fa:32:4e:
                    13:9c:22:79:27:ea:99:71:1e:2e:3a:7a:82:e8:86:
                    6b:d7:47:22:65:a7:c3:ee:17:f7:d0:ab:d8:28:28:
                    c7:05:26:ab:d6:be:69:ea:f9:98:9e:4b:34:db:b1:
                    57:c7:fd:f4:2c:c9:34:34:5c:5d:ae:d9:91:67:e1:
                    3b:bc:a4:08:f5:b9:d5:b1:b4:22:63:e2:3a:90:b2:
                    b0:d4:61:d2:39:eb:51:12:9e:33:35:dc:26:6e:2d:
                    6b:d1:c5:f2:c0:c6:6a:3e:d1:0b:a6:f0:2e:8b:51:
                    fd:34:b2:47:7c:23:2d:54:d3:bf:09:72:ff:60:68:
                    ae:5a:23:85:71:03:9b:0c:29:e6:fb:43:38:22:fd:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:63:23:F2:4F:13:AC:74:DC:DC:07:DA:5A:33:64:2D:F6:BB:30:A4
            X509v3 Authority Key Identifier:
                keyid:E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/7594FBFA2C7311EFA27A6526C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.164.0/22
                  203.14.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:c7:ef:cd:7c:28:e1:d3:ec:cd:85:c3:9c:c5:59:02:6a:5d:
         ea:65:40:86:63:dd:68:87:65:02:a9:04:48:1d:58:f4:75:14:
         02:45:5c:c7:f4:bf:b4:34:61:e7:2e:85:be:93:09:5e:a0:0b:
         90:8b:f8:b2:0e:f3:a7:2a:06:51:45:59:7f:98:32:c5:ff:c0:
         07:a6:07:81:51:bc:bc:c5:89:77:ee:51:83:1f:55:84:d3:52:
         e1:03:74:e8:3f:76:53:a8:bc:cb:7f:51:c9:e0:05:9c:e5:37:
         a8:0e:e9:fb:2f:db:f1:83:56:ea:49:59:cd:08:a0:b2:8c:8a:
         2e:23:1d:48:18:54:71:a3:ee:b6:f2:e5:25:f7:c7:96:6a:82:
         7e:32:b8:60:dc:10:5d:12:4a:5a:39:96:f8:78:5a:a5:92:60:
         06:89:08:82:52:30:bc:c7:92:e9:0f:16:59:29:16:30:ea:96:
         a5:e8:92:9c:17:57:0c:16:76:14:2a:1c:b8:0a:9f:60:7d:9c:
         56:dc:d6:9e:1e:60:2e:51:a4:3e:f8:41:c1:9d:c8:4b:b0:70:
         72:35:c4:fb:29:8d:9f:1b:03:68:56:c4:3c:b6:b0:0f:3c:c6:
         57:96:6b:8b:1e:35:c9:ba:c0:1e:62:d5:0e:4e:fd:52:10:53:
         72:ff:ec:0e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA5QjgxMTAvBgNVBAUTKEUzRThGRjA3OUUwM0ZEQTQzMzQ2ODg5RDkzNzY1Qjk1
OUY2RTFENTkwHhcNMjYwODA3MDQ1NDA1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc1NjRlZC1kNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMk74ZMrCV+7wntWbbkBocGP4Xy3FlCmuVV0A9oAlNrqzKMyqlVyHh+K6Y1t
54cH8OUR44VwJtuFUz/Jw/q5m3wXcv3+/AU6pvVKgp3b8t/ZfMVMOHxOiaewcaJd
a5G9WocMJFRHyhLOi9eC8dc7ofF/Hjz6Mk4TnCJ5J+qZcR4uOnqC6IZr10ciZafD
7hf30KvYKCjHBSar1r5p6vmYnks027FXx/30LMk0NFxdrtmRZ+E7vKQI9bnVsbQi
Y+I6kLKw1GHSOetREp4zNdwmbi1r0cXywMZqPtELpvAui1H9NLJHfCMtVNO/CXL/
YGiuWiOFcQObDCnm+0M4Iv3nxwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIljI/JP
E6x03NwH2lozZC32uzCkMB8GA1UdIwQYMBaAFOPo/weeA/2kM0aInZN2W5Wfbh1Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCOC82QUI5OUUyNjJD
NzIxMUVGQjg5QjBGODRDNEY5QUUwMi80LWpfQjU0RF9hUXpSb2lkazNaYmxaOXVI
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQtal9CNTREX2FRelJvaWRrM1pibFo5dUhWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDA5QjgvNkFCOTlFMjYyQzcyMTFFRkI4OUIwRjg0QzRGOUFFMDIvNzU5NEZCRkEy
QzczMTFFRkEyN0E2NTI2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ0WkAwQAyw7HMA0GCSqGSIb3DQEBCwUAA4IBAQBMx+/NfCjh0+zN
hcOcxVkCal3qZUCGY91oh2UCqQRIHVj0dRQCRVzH9L+0NGHnLoW+kwleoAuQi/iy
DvOnKgZRRVl/mDLF/8AHpgeBUby8xYl37lGDH1WE01LhA3ToP3ZTqLzLf1HJ4AWc
5TeoDun7L9vxg1bqSVnNCKCyjIouIx1IGFRxo+628uUl98eWaoJ+Mrhg3BBdEkpa
OZb4eFqlkmAGiQiCUjC8x5LpDxZZKRYw6pal6JKcF1cMFnYUKhy4Cp9gfZxW3Nae
HmAuUaQ++EHBnchLsHByNcT7KY2fGwNoVsQ8trAPPMZXlmuLHjXJusAeYtUOTv1S
EFNy/+wO
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:27:45 2026 by rpki-client