Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/153BEF1EE34A11EFA6960F0CC4F9AE02.roa
File:                     153BEF1EE34A11EFA6960F0CC4F9AE02.roa (raw, json)
Hash identifier:          Cl5Iksm78xy4pdyZHSdPHHDj46EQ0DV5IDZjQy+nR+s=
Subject key identifier:   36:E1:FE:CB:6A:57:A6:51:0C:94:1F:4B:41:0C:4C:49:AE:CC:D1:C7
Certificate issuer:       /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Certificate serial:       08D8
Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/153BEF1EE34A11EFA6960F0CC4F9AE02.roa
Signing time:             Sat 02 May 2026 21:25:27 +0000
ROA not before:           Sat 02 May 2026 21:25:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139077
IP address blocks:        103.181.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
                          rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
        Validity
            Not Before: May  2 21:25:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f66bc7-bedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:92:1c:03:68:c2:2c:dc:04:12:f7:65:b5:
                    4a:b1:37:b4:be:15:34:b9:54:c6:be:cc:38:78:e6:
                    90:ad:41:71:98:a8:b5:7a:95:05:db:6e:16:c4:cd:
                    4f:83:4d:05:a4:1d:b3:28:72:10:95:b7:8d:a2:c4:
                    f5:70:46:b8:fe:fe:f9:64:30:18:db:04:09:0f:d3:
                    98:f4:23:84:96:25:ab:b2:6d:99:cb:4b:a8:c3:18:
                    6a:e9:77:44:27:c1:10:d9:a1:ce:a8:23:ae:d1:0d:
                    8f:71:06:91:9f:65:5a:5d:f3:0c:f0:4b:d3:c5:af:
                    0b:1f:85:e9:3f:c0:48:8f:ab:2c:21:90:96:2b:5d:
                    20:28:dd:8a:dd:23:7e:84:05:c2:88:37:20:eb:e8:
                    84:a0:05:1d:b5:7d:69:de:65:04:5a:92:0a:8d:14:
                    42:8e:81:ff:23:2f:c8:73:9f:bb:82:a8:ab:8a:58:
                    51:5b:46:0e:bc:ab:5f:1e:19:39:08:21:c6:45:df:
                    ed:e4:10:7a:65:a5:74:1d:b1:bd:3a:c8:32:5a:ea:
                    8e:0d:4b:11:f2:36:f0:c5:8f:c9:78:0f:8d:96:ae:
                    9d:e2:59:8d:69:17:d9:bb:d3:f4:82:92:87:6b:19:
                    fd:29:4c:11:4d:84:c1:72:f1:b9:0c:ee:c6:6b:bc:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E1:FE:CB:6A:57:A6:51:0C:94:1F:4B:41:0C:4C:49:AE:CC:D1:C7
            X509v3 Authority Key Identifier:
                keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/153BEF1EE34A11EFA6960F0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:94:ae:24:7d:f4:07:b4:53:de:63:cd:da:e7:59:8a:fc:14:
         c5:78:10:e9:0e:47:6a:9e:bd:94:c6:e3:7f:4a:b8:21:54:2a:
         c6:61:4b:9a:7d:66:6d:21:4a:37:03:5d:f3:1a:76:3b:95:90:
         3f:0e:b2:25:05:dd:77:ef:09:6d:9b:08:ad:02:8d:9b:4c:81:
         d7:63:8d:5d:b9:4c:ea:08:f8:d2:a3:8e:df:92:07:1e:23:4c:
         1c:fa:68:8d:a1:70:9f:20:1a:85:e9:6a:76:5f:c2:da:08:19:
         bb:09:22:73:29:9c:14:c5:25:2f:e6:ea:df:1e:df:7c:a7:ba:
         a1:2d:c1:ae:ff:a9:e1:9a:75:93:4c:08:72:6b:ab:82:cf:55:
         e7:84:1a:66:fb:db:2c:b0:45:82:1d:c1:14:d2:8a:ad:2d:5b:
         94:a0:b7:14:ad:16:75:4a:3f:44:48:f2:fe:43:7e:6a:db:5e:
         d8:c9:4d:5f:8c:15:76:ec:79:32:6c:a5:d0:07:89:a8:d5:ac:
         2a:db:b3:2c:0d:14:71:58:79:55:4a:43:64:09:f6:3f:c2:58:
         29:a6:f3:bd:26:9c:52:fc:65:38:1f:c9:09:40:03:cf:1c:7e:
         97:02:7c:72:c3:87:e3:b8:ae:94:64:12:d5:72:31:b1:23:fc:
         d1:63:70:7a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2
RTgyRDJBODAwHhcNMjYwNTAyMjEyNTI3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY2NmJjNy1iZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoFOSHANowizcBBL3ZbVKsTe0vhU0uVTGvsw4eOaQrUFxmKi1epUF224WxM1P
g00FpB2zKHIQlbeNosT1cEa4/v75ZDAY2wQJD9OY9COEliWrsm2Zy0uowxhq6XdE
J8EQ2aHOqCOu0Q2PcQaRn2VaXfMM8EvTxa8LH4XpP8BIj6ssIZCWK10gKN2K3SN+
hAXCiDcg6+iEoAUdtX1p3mUEWpIKjRRCjoH/Iy/Ic5+7gqirilhRW0YOvKtfHhk5
CCHGRd/t5BB6ZaV0HbG9OsgyWuqODUsR8jbwxY/JeA+Nlq6d4lmNaRfZu9P0gpKH
axn9KUwRTYTBcvG5DO7Ga7zMXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDbh/stq
V6ZRDJQfS0EMTEmuzNHHMB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3
N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL
b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDY5NDAvRTBEMDZCODJENzdFMTFFQThFRTYxQjMyQzRGOUFFMDIvMTUzQkVGMUVF
MzRBMTFFRkE2OTYwRjBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ7XgMA0GCSqGSIb3DQEBCwUAA4IBAQAvlK4kffQHtFPeY83a51mK
/BTFeBDpDkdqnr2UxuN/SrghVCrGYUuafWZtIUo3A13zGnY7lZA/DrIlBd137wlt
mwitAo2bTIHXY41duUzqCPjSo47fkgceI0wc+miNoXCfIBqF6Wp2X8LaCBm7CSJz
KZwUxSUv5urfHt98p7qhLcGu/6nhmnWTTAhya6uCz1XnhBpm+9sssEWCHcEU0oqt
LVuUoLcUrRZ1Sj9ESPL+Q35q217YyU1fjBV27HkybKXQB4mo1awq27MsDRRxWHlV
SkNkCfY/wlgppvO9JpxS/GU4H8kJQAPPHH6XAnxyw4fjuK6UZBLVcjGxI/zRY3B6
-----END CERTIFICATE-----
Generated at Wed May 13 06:22:56 2026 by rpki-client