Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/9B9231EAA5D611F1A425A8EE3511F970.roa
File:                     9B9231EAA5D611F1A425A8EE3511F970.roa (raw, json)
Hash identifier:          DdRr2cpwN1Z60kmM3n3zX6qDz037pRRi3PajRxVZO2k=
Subject key identifier:   F3:3B:C7:AC:18:44:C8:8E:AC:C4:38:F3:C0:DA:6A:BC:21:86:47:E0
Certificate issuer:       /CN=A91D7B93/serialNumber=769E417E9C18B556C054AD9C00DB039DEF8B8264
Certificate serial:       02
Authority key identifier: 76:9E:41:7E:9C:18:B5:56:C0:54:AD:9C:00:DB:03:9D:EF:8B:82:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp5BfpwYtVbAVK2cANsDne-LgmQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/9B9231EAA5D611F1A425A8EE3511F970.roa
Signing time:             Tue 01 Sep 2026 07:27:38 +0000
ROA not before:           Tue 01 Sep 2026 07:27:38 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137564
IP address blocks:        103.113.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp5BfpwYtVbAVK2cANsDne-LgmQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7B93, serialNumber=769E417E9C18B556C054AD9C00DB039DEF8B8264
        Validity
            Not Before: Sep  1 07:27:38 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a967e6a-189c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:34:8b:ff:71:a6:4c:e3:f7:4b:d7:70:f4:
                    53:33:c2:40:dc:ec:f0:eb:66:ca:be:48:3a:41:4f:
                    c0:43:67:f1:77:c3:84:12:a6:45:5b:fd:6b:2e:c0:
                    ac:28:3a:0d:d0:f1:59:03:92:72:4d:4b:36:5a:38:
                    0b:a9:63:99:73:d1:9b:45:00:15:a6:09:5e:03:3e:
                    17:33:fe:f5:4e:de:97:af:4f:35:6b:e3:c7:0a:40:
                    22:43:b1:18:56:12:39:a0:d4:52:a6:7d:a4:6f:0c:
                    9a:59:d0:92:fc:fe:f5:3a:f4:9f:f5:2b:48:c6:37:
                    17:39:8c:92:0f:0a:a6:ec:30:36:a5:f5:4f:bd:2e:
                    6a:08:c4:27:a4:e3:65:b2:8b:7f:bb:ba:60:58:1c:
                    62:13:38:64:f9:52:23:ef:29:46:39:f8:ab:a3:03:
                    d0:9f:48:fb:12:db:22:f1:6c:a5:c7:68:db:8b:0d:
                    78:7a:24:19:f6:d7:8e:08:fb:8c:fb:c8:2c:25:4b:
                    04:cf:e3:5c:a6:23:c9:d5:d8:1d:b6:ee:55:92:de:
                    90:dd:05:7c:e7:28:2a:c3:50:d1:bd:ac:79:45:5e:
                    09:bb:a4:ed:49:ac:ae:da:d8:08:0b:4d:bf:3f:39:
                    e4:3a:31:48:5e:ba:83:f0:54:cb:ca:c0:60:e5:d2:
                    8f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3B:C7:AC:18:44:C8:8E:AC:C4:38:F3:C0:DA:6A:BC:21:86:47:E0
            X509v3 Authority Key Identifier:
                keyid:76:9E:41:7E:9C:18:B5:56:C0:54:AD:9C:00:DB:03:9D:EF:8B:82:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp5BfpwYtVbAVK2cANsDne-LgmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/9B9231EAA5D611F1A425A8EE3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:7b:3e:e7:28:4e:cc:7b:76:e4:83:80:36:e8:e0:a8:99:ce:
         84:1a:67:40:a9:8d:bc:58:44:e7:d7:34:ca:44:5b:e4:c8:e4:
         bc:10:8d:eb:96:50:29:4b:c1:ba:e7:ac:75:0c:b5:3b:30:28:
         76:17:6a:22:43:f3:97:4d:4a:99:b2:26:80:a9:c7:a9:a2:2b:
         2c:4d:06:6a:e3:d1:84:9f:f8:2d:e8:62:27:2e:be:f2:1b:02:
         c0:c5:89:2e:0f:03:95:50:a7:30:b4:f9:4e:89:b2:b1:93:c0:
         17:b9:b1:67:dc:3a:6d:d6:04:73:60:8e:5a:52:0d:46:68:9b:
         11:22:08:11:36:3e:da:3f:2b:7e:26:97:0c:20:d7:ab:d4:da:
         21:cc:91:25:bd:4c:cd:e9:25:ac:12:cd:9a:dd:44:80:93:a1:
         ec:6d:2b:2f:b6:88:2d:55:1b:30:bb:05:03:5d:80:12:bb:f5:
         c7:56:07:a9:72:0a:41:50:aa:3c:7f:a6:7a:d6:89:25:f3:eb:
         c0:ff:91:f3:e6:ae:79:f1:94:e0:33:ad:f2:2d:4c:f3:5e:b3:
         11:1b:a6:53:ee:e3:50:cb:5c:0f:0c:b1:4d:a7:9c:6f:96:5d:
         e9:a8:77:eb:98:5e:b7:93:38:59:4e:f4:5e:5d:c9:31:bd:7d:
         42:96:68:81
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
N0I5MzExMC8GA1UEBRMoNzY5RTQxN0U5QzE4QjU1NkMwNTRBRDlDMDBEQjAzOURF
RjhCODI2NDAeFw0yNjA5MDEwNzI3MzhaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOTY3ZTZhLTE4OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCebzSL/3GmTOP3S9dw9FMzwkDc7PDrZsq+SDpBT8BDZ/F3w4QSpkVb/WsuwKwo
Og3Q8VkDknJNSzZaOAupY5lz0ZtFABWmCV4DPhcz/vVO3pevTzVr48cKQCJDsRhW
Ejmg1FKmfaRvDJpZ0JL8/vU69J/1K0jGNxc5jJIPCqbsMDal9U+9LmoIxCek42Wy
i3+7umBYHGITOGT5UiPvKUY5+KujA9CfSPsS2yLxbKXHaNuLDXh6JBn2144I+4z7
yCwlSwTP41ymI8nV2B227lWS3pDdBXznKCrDUNG9rHlFXgm7pO1JrK7a2AgLTb8/
OeQ6MUheuoPwVMvKwGDl0o9FAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU8zvHrBhE
yI6sxDjzwNpqvCGGR+AwHwYDVR0jBBgwFoAUdp5BfpwYtVbAVK2cANsDne+LgmQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3QjkzL0U2QjkxMkM0QTVE
MTExRjFBMkU4NzY0RTM0MTFGOTcwL2RwNUJmcHdZdFZiQVZLMmNBTnNEbmUtTGdt
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZHA1QmZwd1l0VmJBVksyY0FOc0RuZS1MZ21RLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
N0I5My9FNkI5MTJDNEE1RDExMUYxQTJFODc2NEUzNDExRjk3MC85QjkyMzFFQUE1
RDYxMUYxQTQyNUE4RUUzNTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJncaAwDQYJKoZIhvcNAQELBQADggEBAEV7PucoTsx7duSDgDbo4KiZ
zoQaZ0CpjbxYROfXNMpEW+TI5LwQjeuWUClLwbrnrHUMtTswKHYXaiJD85dNSpmy
JoCpx6miKyxNBmrj0YSf+C3oYicuvvIbAsDFiS4PA5VQpzC0+U6JsrGTwBe5sWfc
Om3WBHNgjlpSDUZomxEiCBE2Pto/K34mlwwg16vU2iHMkSW9TM3pJawSzZrdRICT
oextKy+2iC1VGzC7BQNdgBK79cdWB6lyCkFQqjx/pnrWiSXz68D/kfPmrnnxlOAz
rfItTPNesxEbplPu41DLXA8MsU2nnG+WXemod+uYXreTOFlO9F5dyTG9fUKWaIE=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:29:20 2026 by rpki-client