Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa
File:                     E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (raw, json)
Hash identifier:          VgbuCbt2B5V4RwKAtDeC1bN0tj3w9fLDaipQp5XINf8=
Subject key identifier:   59:E3:52:8A:1F:9F:46:D1:8E:D0:AA:6E:12:7D:BC:F4:1D:42:4C:43
Certificate issuer:       /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
Certificate serial:       0402
Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:02:52 +0000
ROA not before:           Tue 05 Aug 2025 01:38:19 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136553
IP address blocks:        103.92.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl
                          rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1026 (0x402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B
        Validity
            Not Before: Aug  5 01:38:19 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a40ecc-7feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:eb:2a:34:d2:60:ad:83:1e:da:4b:d8:42:
                    eb:f2:d5:15:97:68:55:74:e9:3a:e8:28:64:dd:6a:
                    39:e9:74:ed:11:9d:13:63:6e:29:e6:2d:0d:f8:ab:
                    03:b6:ac:3c:c7:79:08:a4:08:2d:b0:c3:1b:f3:0d:
                    c5:20:9c:71:8e:2b:f6:d6:b1:5c:01:e8:33:ae:15:
                    82:ef:51:be:ac:f2:61:ff:cc:b3:62:ef:92:5f:ab:
                    f6:f5:3a:e9:43:94:cd:c3:42:fc:d3:48:70:fd:ab:
                    08:fa:c9:42:48:2c:0f:8a:59:d9:29:d9:32:47:c0:
                    5b:72:d1:13:85:2d:6f:34:f5:a4:a7:a0:0b:2d:b7:
                    09:ad:46:6c:7c:03:49:5e:b6:88:6f:f7:25:7f:1b:
                    9a:44:23:9f:32:7f:d8:45:ba:8c:78:37:98:bd:19:
                    c8:0a:92:11:51:a9:08:41:38:47:13:0b:5b:80:1c:
                    46:5e:25:34:51:83:bd:c3:bd:b6:13:45:f7:2e:3d:
                    a0:76:fd:95:fb:0e:8f:aa:73:c5:21:7b:ea:1e:b1:
                    69:b2:19:58:60:a9:bb:dc:5a:90:9b:0a:eb:03:76:
                    fb:94:94:62:25:48:8c:a6:04:60:ca:5f:fd:03:7c:
                    69:e0:f9:19:29:bf:7a:67:c0:0e:99:1a:fc:2a:4d:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E3:52:8A:1F:9F:46:D1:8E:D0:AA:6E:12:7D:BC:F4:1D:42:4C:43
            X509v3 Authority Key Identifier:
                keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:fc:ee:4f:65:fb:3b:06:b9:13:c3:0a:4a:f3:55:9f:a8:
         8a:4f:31:d4:34:be:8a:4f:f5:d0:05:d6:2a:5b:34:1c:1a:72:
         97:32:8a:bb:16:b9:64:06:35:de:7b:78:81:64:e3:0f:f5:47:
         77:da:71:fa:33:08:c9:80:f0:58:b9:f2:13:3d:fe:3a:86:69:
         3c:57:70:4b:73:8b:0c:b5:8e:b0:3f:6a:37:e5:5b:ac:1c:3a:
         67:0d:38:f0:b5:2c:dd:fe:06:f6:a3:fe:c2:0a:8c:21:bf:26:
         70:1e:ed:16:e6:48:0a:d0:74:cc:64:ca:0b:26:45:2d:2d:de:
         0d:9c:16:b8:1b:45:03:6a:ff:1d:c2:d1:c1:0f:aa:e4:43:03:
         df:cf:2a:46:1f:92:72:99:99:e8:40:03:52:0b:e7:df:ed:0a:
         73:b1:d8:4f:e8:c7:1a:19:13:ed:12:81:4f:e8:44:65:9d:29:
         7e:8d:b5:ba:3f:b4:6d:58:d8:42:ca:7c:8a:13:52:a7:e7:0f:
         5a:ab:b8:b4:d8:fe:a9:21:3b:b1:27:a1:45:44:68:bb:23:1e:
         ce:f8:ed:48:a9:e1:fe:30:a4:f8:ab:5a:82:27:28:2e:99:09:
         5f:45:cc:a5:57:61:18:94:b2:7e:3e:6d:40:8e:77:2a:ea:e3:
         fd:55:bf:dd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFDN0YxMTAvBgNVBAUTKERBQjRBNTJBOEVDMUFBRDZDOTI1MkVFQTRENUQxNTY5
RDI3QUY0NkIwHhcNMjUwODA1MDEzODE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGVjYy03ZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAucbrKjTSYK2DHtpL2ELr8tUVl2hVdOk66Chk3Wo56XTtEZ0TY24p5i0N+KsD
tqw8x3kIpAgtsMMb8w3FIJxxjiv21rFcAegzrhWC71G+rPJh/8yzYu+SX6v29Trp
Q5TNw0L800hw/asI+slCSCwPilnZKdkyR8BbctEThS1vNPWkp6ALLbcJrUZsfANJ
XraIb/clfxuaRCOfMn/YRbqMeDeYvRnICpIRUakIQThHEwtbgBxGXiU0UYO9w722
E0X3Lj2gdv2V+w6PqnPFIXvqHrFpshlYYKm73FqQmwrrA3b7lJRiJUiMpgRgyl/9
A3xp4PkZKb96Z8AOmRr8Kk2ReQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFnjUoof
n0bRjtCqbhJ9vPQdQkxDMB8GA1UdIwQYMBaAFNq0pSqOwarWySUu6k1dFWnSevRr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUM3Ri8wOTFFMUVBQUIw
RDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0YkpKUzdxVFYwVmFkSjY5
R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJyU2xLbzdCcXRiSkpTN3FUVjBWYWRKNjlHcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDFDN0YvMDkxRTFFQUFCMEQwMTFFQ0JCMDRBMzc4QzRGOUFFMDIvRTVCMjVEODRC
MEQyMTFFQ0I3QjFCQTdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1zEMA0GCSqGSIb3DQEBCwUAA4IBAQB11/zuT2X7Owa5E8MKSvNV
n6iKTzHUNL6KT/XQBdYqWzQcGnKXMoq7FrlkBjXee3iBZOMP9Ud32nH6MwjJgPBY
ufITPf46hmk8V3BLc4sMtY6wP2o35VusHDpnDTjwtSzd/gb2o/7CCowhvyZwHu0W
5kgK0HTMZMoLJkUtLd4NnBa4G0UDav8dwtHBD6rkQwPfzypGH5JymZnoQANSC+ff
7QpzsdhP6McaGRPtEoFP6ERlnSl+jbW6P7RtWNhCynyKE1Kn5w9aq7i02P6pITux
J6FFRGi7Ix7O+O1IqeH+MKT4q1qCJygumQlfRcylV2EYlLJ+Pm1Ajncq6uP9Vb/d
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:49 2026 by rpki-client