Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa
File:                     D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (raw, json)
Hash identifier:          Ig1Z+CeptiyE3XhLnjUeeZBH7sjFodnB6lczhxW6Yfc=
Subject key identifier:   F2:75:13:6E:3A:5B:F6:E5:03:FB:C3:B9:FB:31:F5:85:FA:7E:A6:45
Certificate issuer:       /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Certificate serial:       0205
Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:15:16 +0000
ROA not before:           Fri 31 Oct 2025 03:17:13 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132027
IP address blocks:        103.5.71.0/24 maxlen: 24
                          202.36.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
                          rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8A55, serialNumber=43288DC9E9412862385C1E83DD37863583320D18
        Validity
            Not Before: Oct 31 03:17:13 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a411b4-90a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:c0:2b:60:c5:53:99:ac:15:8b:35:b4:ae:
                    e3:5b:8d:8e:f6:68:a3:6a:da:a5:fd:87:42:55:92:
                    85:92:9e:82:7f:da:ba:ab:05:54:4f:75:53:8d:c7:
                    5e:b7:fb:20:a1:82:f4:c4:90:5f:49:ee:36:c4:39:
                    0b:2b:c5:69:4d:7b:d2:1e:f1:ff:dd:fe:98:08:f5:
                    f1:db:dd:9c:46:8a:97:80:a3:7f:a8:6a:59:7b:fa:
                    be:c2:23:ea:4c:e3:c4:3e:a2:e7:7d:1f:b5:af:28:
                    f8:6f:29:7d:34:ee:8c:b0:e9:ef:d0:07:98:4f:77:
                    c5:7d:5e:f1:94:97:29:bc:30:19:1f:f4:03:e4:39:
                    d5:f6:cb:ec:dc:ac:35:69:31:87:8f:07:f0:f3:ec:
                    25:57:1d:c8:47:26:d2:03:7f:af:d1:e4:b3:71:53:
                    67:8b:b0:9d:f4:6d:bc:17:d8:dd:7d:0d:fe:8b:c2:
                    24:f5:e3:34:39:8d:ce:8b:d4:1e:d8:2b:d2:18:6b:
                    f1:46:c7:b6:49:5d:ac:8f:9c:d3:a1:65:ba:76:25:
                    4e:b3:ca:66:df:1e:8a:7c:22:36:0b:b0:1c:fd:12:
                    53:a8:99:50:df:57:b3:14:6e:dd:58:43:be:3e:6b:
                    b3:fc:73:85:8f:e5:d3:4f:f6:55:c0:27:c6:fe:00:
                    42:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:75:13:6E:3A:5B:F6:E5:03:FB:C3:B9:FB:31:F5:85:FA:7E:A6:45
            X509v3 Authority Key Identifier:
                keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.71.0/24
                  202.36.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:0f:89:23:e1:2a:61:0e:6a:6f:99:f3:81:f0:0c:be:b6:1d:
         0e:c1:81:11:90:c8:6c:db:05:45:1b:4d:22:84:06:73:a7:c5:
         2e:9f:df:13:c4:32:99:d0:0f:42:9e:0e:56:e9:86:7d:9b:5e:
         f0:46:f6:74:82:4b:e0:27:04:1b:07:f6:c5:cb:11:48:af:50:
         ae:5e:de:73:7d:35:c4:3d:d4:30:ff:9d:40:48:e5:cd:7c:ec:
         9e:85:cf:bc:2c:1f:3a:33:53:e1:9f:3c:5f:05:13:cc:3f:51:
         b2:78:0d:af:3d:bc:c2:42:b5:6e:5f:60:fe:94:7e:ee:7c:6f:
         6a:fe:37:5a:f9:37:6f:71:dd:97:47:3f:5b:95:75:f9:23:9e:
         6c:6a:15:b9:46:37:7c:5d:ec:f4:20:4b:fe:30:37:88:ad:6d:
         eb:ee:c1:eb:99:cf:f5:75:49:7f:df:d9:af:e1:b9:21:2c:00:
         a3:e9:10:58:b5:c3:41:8c:0a:70:48:7e:e1:f3:56:5a:0d:cd:
         18:dd:df:03:52:b3:1a:11:a1:ad:b8:b5:5e:97:df:77:3c:0d:
         48:66:ec:33:ad:36:82:3a:21:d3:20:ed:79:86:d1:7d:81:c2:
         1e:22:d9:b0:81:ca:93:a1:33:16:bf:62:1d:61:47:cf:2d:46:
         e4:66:c3:91
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhBNTUxMTAvBgNVBAUTKDQzMjg4REM5RTk0MTI4NjIzODVDMUU4M0REMzc4NjM1
ODMzMjBEMTgwHhcNMjUxMDMxMDMxNzEzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTFiNC05MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKDAK2DFU5msFYs1tK7jW42O9mijatql/YdCVZKFkp6Cf9q6qwVUT3VTjcde
t/sgoYL0xJBfSe42xDkLK8VpTXvSHvH/3f6YCPXx292cRoqXgKN/qGpZe/q+wiPq
TOPEPqLnfR+1ryj4byl9NO6MsOnv0AeYT3fFfV7xlJcpvDAZH/QD5DnV9svs3Kw1
aTGHjwfw8+wlVx3IRybSA3+v0eSzcVNni7Cd9G28F9jdfQ3+i8Ik9eM0OY3Oi9Qe
2CvSGGvxRse2SV2sj5zToWW6diVOs8pm3x6KfCI2C7Ac/RJTqJlQ31ezFG7dWEO+
Pmuz/HOFj+XTT/ZVwCfG/gBCnwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPJ1E246
W/blA/vDufsx9YX6fqZFMB8GA1UdIwQYMBaAFEMojcnpQShiOFweg903hjWDMg0Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE1NS81RkM2NTgyNjBC
QzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktHSTRYQjZEM1RlR05ZTXlE
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F5aU55ZWxCS0dJNFhCNkQzVGVHTllNeURSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDhBNTUvNUZDNjU4MjYwQkM5MTFFRTlDNkYxODVFQzRGOUFFMDIvRDE1OTZGMEUw
QkNGMTFFRThGQjhFRTE2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZwVHAwQAyiS5MA0GCSqGSIb3DQEBCwUAA4IBAQB4D4kj4SphDmpv
mfOB8Ay+th0OwYERkMhs2wVFG00ihAZzp8Uun98TxDKZ0A9Cng5W6YZ9m17wRvZ0
gkvgJwQbB/bFyxFIr1CuXt5zfTXEPdQw/51ASOXNfOyehc+8LB86M1PhnzxfBRPM
P1GyeA2vPbzCQrVuX2D+lH7ufG9q/jda+Tdvcd2XRz9blXX5I55sahW5Rjd8Xez0
IEv+MDeIrW3r7sHrmc/1dUl/39mv4bkhLACj6RBYtcNBjApwSH7h81ZaDc0Y3d8D
UrMaEaGtuLVel993PA1IZuwzrTaCOiHTIO15htF9gcIeItmwgcqToTMWv2IdYUfP
LUbkZsOR
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:50 2026 by rpki-client