Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/E322A666B65C11F18F489CF26F11F970.roa
File:                     E322A666B65C11F18F489CF26F11F970.roa (raw, json)
Hash identifier:          RwkocUiEJJ/WlBdJ4xcIB1mybwRQyZ+jCn34n3mMFxg=
Subject key identifier:   E4:EB:ED:81:C5:49:26:7B:23:F6:41:DE:07:51:14:FB:71:6C:CC:13
Certificate issuer:       /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial:       A8
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/E322A666B65C11F18F489CF26F11F970.roa
Signing time:             Tue 22 Sep 2026 08:09:09 +0000
ROA not before:           Tue 22 Sep 2026 08:09:09 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139613
IP address blocks:        103.143.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
                          rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
        Validity
            Not Before: Sep 22 08:09:09 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6ab237a5-ed5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:b4:ee:24:99:f9:74:c1:00:be:ef:37:01:
                    3a:d1:e0:fe:22:b6:d2:d7:26:d6:0c:94:28:c0:92:
                    6b:5c:ea:c4:18:f3:15:0f:1e:95:99:9a:9c:9b:69:
                    a9:f8:ad:d6:df:20:d8:21:63:09:d5:88:d6:bc:45:
                    5b:a2:f8:3f:9d:b8:ca:23:01:b9:1b:fe:52:85:0a:
                    9a:fb:3b:23:9d:fa:82:20:53:be:26:22:65:2a:6c:
                    d5:e3:ef:73:68:a7:7f:19:f4:94:5e:fd:e6:43:43:
                    99:6f:25:29:67:0d:ee:fc:7b:8f:64:93:49:a7:fb:
                    a3:a2:1f:9e:3e:8b:d5:e6:52:07:66:bf:d3:44:54:
                    33:3c:8a:e3:9f:bb:0b:99:f1:91:44:d0:87:4a:1a:
                    07:4d:d5:62:15:45:12:f6:27:3b:48:c5:6c:ea:a8:
                    5c:47:ab:3c:b2:72:88:ca:6d:27:63:9e:2e:19:f7:
                    30:01:95:82:61:ed:1b:0d:87:1e:c1:85:b0:1c:42:
                    f2:e8:a2:2a:23:eb:d5:6d:be:a7:0c:0b:72:80:f7:
                    94:45:47:6e:53:3a:3a:79:91:43:e4:ef:a7:8c:66:
                    73:40:fa:95:d4:02:3e:9c:ea:03:5c:70:73:3c:35:
                    bd:2f:7b:92:bc:52:ac:5c:65:2f:a5:60:91:09:76:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EB:ED:81:C5:49:26:7B:23:F6:41:DE:07:51:14:FB:71:6C:CC:13
            X509v3 Authority Key Identifier:
                keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/E322A666B65C11F18F489CF26F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:cb:00:60:8c:20:75:56:26:7d:04:41:b8:1f:ef:a4:a4:6c:
         43:11:3a:7d:e0:30:15:70:30:f7:a9:3d:01:06:7c:97:9f:5a:
         e3:1d:b1:f2:51:69:39:a7:f7:52:d8:ef:6e:c7:e4:f9:d2:d3:
         e4:60:38:33:a4:0a:0e:9a:0e:b9:47:3a:95:f3:33:b2:fe:5d:
         ed:cd:fd:6f:bb:ee:53:fc:33:3a:bc:62:c1:c2:b1:b1:94:6a:
         e5:6f:80:c6:67:5b:16:0e:a9:a2:85:26:75:9f:ee:01:2c:cf:
         db:22:7d:cb:06:54:27:f1:5d:94:b1:1b:55:e5:c6:71:c8:44:
         fa:7f:79:75:d3:f6:f5:c8:3f:17:76:71:30:f5:c4:8d:6d:a8:
         bf:80:be:c5:4a:99:6f:e9:90:46:f9:89:68:fa:b3:23:e1:ce:
         07:76:63:0d:24:0c:3f:6f:6e:c8:a8:37:5e:8b:38:b5:24:62:
         d5:06:aa:f7:83:4c:45:e8:5e:07:b9:98:dc:5b:dd:fc:5f:d2:
         01:75:d4:2e:b4:f8:97:42:75:bf:55:2a:85:52:c0:2d:5c:f6:
         3d:b4:83:21:a0:1c:47:9d:fa:bf:ef:35:8e:4a:98:ad:e4:f4:
         a2:65:06:e9:21:99:03:66:ac:b7:fb:8c:98:b4:c8:86:b0:5c:
         38:4a:0a:33
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI5OEMxMTAvBgNVBAUTKDVGQzI2QjkyOERFREM5MEMzOTFDQzRGNTI5QkE3QjlF
MDlBNTA0NkUwHhcNMjYwOTIyMDgwOTA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIyMzdhNS1lZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+O07iSZ+XTBAL7vNwE60eD+IrbS1ybWDJQowJJrXOrEGPMVDx6VmZqcm2mp
+K3W3yDYIWMJ1YjWvEVbovg/nbjKIwG5G/5ShQqa+zsjnfqCIFO+JiJlKmzV4+9z
aKd/GfSUXv3mQ0OZbyUpZw3u/HuPZJNJp/ujoh+ePovV5lIHZr/TRFQzPIrjn7sL
mfGRRNCHShoHTdViFUUS9ic7SMVs6qhcR6s8snKIym0nY54uGfcwAZWCYe0bDYce
wYWwHELy6KIqI+vVbb6nDAtygPeURUduUzo6eZFD5O+njGZzQPqV1AI+nOoDXHBz
PDW9L3uSvFKsXGUvpWCRCXYd1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOTr7YHF
SSZ7I/ZB3gdRFPtxbMwTMB8GA1UdIwQYMBaAFF/Ca5KN7ckMORzE9Sm6e54JpQRu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4Qy9BQzVFOEFDMkM2
RDAxMUYwQkQ4ODRBNzlDNEY5QUUwMi9YOEpya28zdHlRdzVITVQxS2JwN25nbWxC
RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g4SnJrbzN0eVF3NUhNVDFLYnA3bmdtbEJHNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDI5OEMvQUM1RThBQzJDNkQwMTFGMEJEODg0QTc5QzRGOUFFMDIvRTMyMkE2NjZC
NjVDMTFGMThGNDg5Q0YyNkYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ48OMA0GCSqGSIb3DQEBCwUAA4IBAQBrywBgjCB1ViZ9BEG4H++k
pGxDETp94DAVcDD3qT0BBnyXn1rjHbHyUWk5p/dS2O9ux+T50tPkYDgzpAoOmg65
RzqV8zOy/l3tzf1vu+5T/DM6vGLBwrGxlGrlb4DGZ1sWDqmihSZ1n+4BLM/bIn3L
BlQn8V2UsRtV5cZxyET6f3l10/b1yD8XdnEw9cSNbai/gL7FSplv6ZBG+Ylo+rMj
4c4HdmMNJAw/b27IqDdeizi1JGLVBqr3g0xF6F4HuZjcW938X9IBddQutPiXQnW/
VSqFUsAtXPY9tIMhoBxHnfq/7zWOSpit5PSiZQbpIZkDZqy3+4yYtMiGsFw4Sgoz
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:14 2026 by rpki-client