Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/64A7FFE2F74811E8A07B9609C4F9AE02.roa
File:                     64A7FFE2F74811E8A07B9609C4F9AE02.roa (raw, json)
Hash identifier:          drCBlu0Wd1j+au7csh/4YsHVMmmQfy83EvLOelKgjpk=
Subject key identifier:   EE:BF:0D:75:BE:6C:13:68:2C:C0:30:D0:24:5A:23:8D:6B:0B:80:28
Certificate issuer:       /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial:       1B34
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/64A7FFE2F74811E8A07B9609C4F9AE02.roa
Signing time:             Thu 08 Oct 2026 16:29:27 +0000
ROA not before:           Thu 08 Oct 2026 16:29:26 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     36351
IP address blocks:        103.241.84.0/24 maxlen: 24
                          103.241.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 16:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6964 (0x1b34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
        Validity
            Not Before: Oct  8 16:29:26 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac7c4e6-1fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:70:0f:ee:48:66:f2:6e:bd:44:5c:7c:13:
                    e1:e4:f5:1c:7f:f0:95:eb:97:c2:08:40:1a:b3:f4:
                    19:da:b0:9a:72:82:c7:6b:dd:57:79:86:29:40:0d:
                    3f:93:a4:34:93:e7:91:e6:b4:3f:87:2c:f3:8d:0b:
                    22:1d:61:09:ed:26:29:3e:49:83:55:fe:32:6e:8a:
                    3b:d0:a4:d9:84:22:e7:36:e8:d2:4c:98:27:bd:54:
                    8c:93:79:50:c8:25:40:bf:fa:cd:e5:9d:b9:b0:3c:
                    7e:90:11:33:59:f5:7d:de:dd:a8:9f:ee:bb:96:48:
                    b0:1a:d1:02:95:15:e7:61:59:11:56:ed:6f:7d:80:
                    4b:f6:82:84:a9:64:4a:89:df:c8:ef:65:38:03:cc:
                    d9:7e:93:14:ca:7d:1b:a5:7f:80:51:25:28:ed:4f:
                    32:c0:a6:a0:21:b5:eb:94:b8:3c:e8:01:34:1e:4e:
                    36:3c:58:5e:b4:67:79:38:f5:1e:34:18:6b:9e:2a:
                    91:fe:e6:69:63:16:95:3c:b7:2a:23:76:54:d2:25:
                    bf:15:76:71:bf:0a:94:71:66:73:a7:d9:1f:85:cf:
                    9b:5b:ce:a7:74:9a:ef:22:85:9b:4e:5c:e3:09:ee:
                    dc:b8:85:eb:71:7a:83:45:36:a8:37:9f:17:30:81:
                    06:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BF:0D:75:BE:6C:13:68:2C:C0:30:D0:24:5A:23:8D:6B:0B:80:28
            X509v3 Authority Key Identifier:
                keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/64A7FFE2F74811E8A07B9609C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.84.0/24
                  103.241.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:97:5b:3d:8d:50:21:08:0b:fc:85:6a:d3:43:1c:ae:5d:03:
         49:a7:5e:cd:98:28:76:f1:1b:67:7c:33:41:06:e7:62:bc:f7:
         55:36:aa:28:26:30:82:31:a1:80:1d:a1:c6:46:76:17:21:fc:
         37:ca:ec:e6:15:56:88:48:7a:7e:f3:8d:96:ac:cf:02:a5:5d:
         f7:29:dc:b6:af:78:d9:0a:32:26:b5:f6:8d:ab:32:68:e3:e6:
         32:f5:6c:f7:e9:d3:9e:f1:84:d0:ab:58:61:8e:8a:34:e2:2b:
         bf:28:9e:1a:cb:79:f2:ab:9c:56:5f:fc:23:d0:03:35:30:49:
         32:48:a2:90:34:53:d5:df:7b:25:1f:eb:e4:95:88:3f:a9:bc:
         6f:0a:1e:bc:94:5c:66:cf:a0:d6:88:50:d4:bb:2a:56:30:7a:
         8a:87:9b:ca:fc:09:4c:4c:a1:01:55:87:01:99:45:04:cf:cf:
         e6:78:d5:e9:16:13:a3:f3:0a:97:ce:b6:76:ca:b3:21:4b:d1:
         ec:28:f7:58:9e:ed:ba:c5:c2:3c:fe:5e:86:39:38:85:e0:dd:
         63:20:6c:1f:35:02:3d:ac:41:c8:bf:f6:2f:36:45:3f:e1:8b:
         50:cc:6d:c6:3d:9e:04:70:b3:e8:66:e2:e4:61:ba:82:e2:56:
         9c:03:ea:59
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICGzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB
NzQzQTIwMjkwHhcNMjYxMDA4MTYyOTI2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM3YzRlNi0xZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj7ZwD+5IZvJuvURcfBPh5PUcf/CV65fCCEAas/QZ2rCacoLHa91XeYYpQA0/
k6Q0k+eR5rQ/hyzzjQsiHWEJ7SYpPkmDVf4yboo70KTZhCLnNujSTJgnvVSMk3lQ
yCVAv/rN5Z25sDx+kBEzWfV93t2on+67lkiwGtEClRXnYVkRVu1vfYBL9oKEqWRK
id/I72U4A8zZfpMUyn0bpX+AUSUo7U8ywKagIbXrlLg86AE0Hk42PFhetGd5OPUe
NBhrniqR/uZpYxaVPLcqI3ZU0iW/FXZxvwqUcWZzp9kfhc+bW86ndJrvIoWbTlzj
Ce7cuIXrcXqDRTaoN58XMIEGSQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFO6/DXW+
bBNoLMAw0CRaI41rC4AoMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0
ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RENEMDkvMkY4Qjg1NTI1NDg1MTFFN0IxRDg0NzEzQzRGOUFFMDIvNjRBN0ZGRTJG
NzQ4MTFFOEEwN0I5NjA5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ/FUAwQAZ/FXMA0GCSqGSIb3DQEBCwUAA4IBAQBHl1s9jVAhCAv8
hWrTQxyuXQNJp17NmCh28RtnfDNBBudivPdVNqooJjCCMaGAHaHGRnYXIfw3yuzm
FVaISHp+842WrM8CpV33Kdy2r3jZCjImtfaNqzJo4+Yy9Wz36dOe8YTQq1hhjoo0
4iu/KJ4ay3nyq5xWX/wj0AM1MEkySKKQNFPV33slH+vklYg/qbxvCh68lFxmz6DW
iFDUuypWMHqKh5vK/AlMTKEBVYcBmUUEz8/meNXpFhOj8wqXzrZ2yrMhS9HsKPdY
nu26xcI8/l6GOTiF4N1jIGwfNQI9rEHIv/YvNkU/4YtQzG3GPZ4EcLPoZuLkYbqC
4lacA+pZ
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:23:30 2026 by rpki-client