Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/72F244BEABA811F1826B2D015111F970.roa
File:                     72F244BEABA811F1826B2D015111F970.roa (raw, json)
Hash identifier:          hsukBQ93b6WQF6W2mBCSw7TZemUo6Noun4GYm6N6B2A=
Subject key identifier:   57:6A:35:20:DE:44:19:0E:FC:53:70:C1:00:C7:7D:42:52:1D:55:48
Certificate issuer:       /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Certificate serial:       0DD6
Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/72F244BEABA811F1826B2D015111F970.roa
Signing time:             Sun 13 Sep 2026 05:15:05 +0000
ROA not before:           Sun 13 Sep 2026 05:15:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139802
IP address blocks:        103.214.80.0/22 maxlen: 22
                          103.214.80.0/24 maxlen: 24
                          103.214.81.0/24 maxlen: 24
                          103.214.83.0/24 maxlen: 24
                          144.48.85.0/24 maxlen: 24
                          144.48.86.0/24 maxlen: 24
                          144.48.87.0/24 maxlen: 24
                          2404:d580::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl
                          rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3542 (0xdd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
        Validity
            Not Before: Sep 13 05:15:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa63159-efee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:d0:04:44:d7:7f:d7:6b:20:fc:1b:a6:68:
                    ea:b5:0d:d4:3d:f2:95:87:0a:51:1b:a6:d7:1d:ce:
                    b1:71:da:bf:44:b8:de:fc:88:11:09:3a:de:60:d2:
                    5a:05:ce:81:28:6c:fb:90:95:88:ee:32:13:79:34:
                    94:45:84:37:5f:b3:52:04:39:eb:4c:58:14:11:cc:
                    59:3b:cf:ca:fe:4a:c9:a4:48:1a:25:b2:06:b9:03:
                    78:c1:bf:dd:c8:8d:75:00:a8:86:58:11:b7:f5:18:
                    79:ec:d9:45:4a:40:58:9e:22:53:2d:24:a9:20:c3:
                    06:b6:1b:05:5b:8e:24:ca:f4:36:50:3f:af:ea:9f:
                    18:39:3a:7b:56:d5:8b:20:5e:c5:57:f0:62:13:d8:
                    9f:45:0e:dd:f9:76:1e:35:6f:54:c7:61:66:13:3d:
                    34:86:50:da:23:8a:fb:af:43:ea:33:82:28:8c:09:
                    a8:4c:ff:73:e6:83:03:c5:83:23:6c:59:39:11:97:
                    30:24:bc:56:f9:f0:c6:30:c4:3c:7a:e2:54:e0:5c:
                    7d:09:4f:1c:8e:de:ab:ce:72:92:f2:ec:e2:5c:75:
                    3a:61:91:de:0b:5d:8c:b4:e4:d6:19:0e:22:82:97:
                    66:e7:51:b1:70:5a:84:1e:3f:b7:72:b6:a3:d8:d5:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6A:35:20:DE:44:19:0E:FC:53:70:C1:00:C7:7D:42:52:1D:55:48
            X509v3 Authority Key Identifier:
                keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/72F244BEABA811F1826B2D015111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.80.0/22
                  144.48.85.0-144.48.87.255
                IPv6:
                  2404:d580::/32

    Signature Algorithm: sha256WithRSAEncryption
         d7:b3:24:01:92:ab:a3:db:54:94:28:5d:b7:89:1e:09:1b:bd:
         d1:0c:ec:9a:ab:ea:4b:c0:36:6c:7f:47:96:90:94:ca:ec:a8:
         83:ec:72:78:07:85:dd:fa:dd:eb:c3:8b:a5:60:65:b0:78:90:
         06:e6:5c:12:3b:89:39:f1:82:24:e6:07:13:fc:35:a0:96:6d:
         16:85:c0:22:e7:00:b9:64:e9:35:16:33:78:83:d6:d1:a6:57:
         80:ed:09:41:c2:e5:2a:30:3a:b7:50:63:20:5c:12:d6:97:c1:
         c4:df:76:79:a7:83:ab:6d:68:57:10:10:c6:bc:e3:d8:01:db:
         68:9f:ff:06:41:62:d8:dd:73:a1:97:c9:55:d1:cb:8c:1a:ea:
         b8:2b:33:95:22:01:75:11:f7:0d:4c:7c:25:73:ee:c1:35:23:
         8a:c6:ad:0a:af:a4:c0:2a:20:40:97:51:fe:37:21:be:ed:a4:
         9a:db:a8:0c:75:33:b5:7a:7d:70:e3:37:05:3f:2f:e1:af:fe:
         49:a1:01:4d:71:d6:9f:69:8f:1e:81:6b:c1:f9:80:58:c7:de:
         52:f2:c5:47:66:9c:c1:55:c5:0b:33:41:cc:90:91:2c:0c:92:
         4f:ea:c3:4b:69:b9:5b:b2:cc:e1:dd:e3:bf:66:ab:5e:24:c5:
         36:98:00:c0
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgICDdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE
MTdGQTk2Q0QwHhcNMjYwOTEzMDUxNTA1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWE2MzE1OS1lZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsXbQBETXf9drIPwbpmjqtQ3UPfKVhwpRG6bXHc6xcdq/RLje/IgRCTreYNJa
Bc6BKGz7kJWI7jITeTSURYQ3X7NSBDnrTFgUEcxZO8/K/krJpEgaJbIGuQN4wb/d
yI11AKiGWBG39Rh57NlFSkBYniJTLSSpIMMGthsFW44kyvQ2UD+v6p8YOTp7VtWL
IF7FV/BiE9ifRQ7d+XYeNW9Ux2FmEz00hlDaI4r7r0PqM4IojAmoTP9z5oMDxYMj
bFk5EZcwJLxW+fDGMMQ8euJU4Fx9CU8cjt6rznKS8uziXHU6YZHeC12MtOTWGQ4i
gpdm51GxcFqEHj+3craj2NVnBwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFFdqNSDe
RBkO/FNwwQDHfUJSHVVIMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0
NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REVCRTMvODBBRTEwQzYwNDUwMTFFQUJBODJDNDE1QzRGOUFFMDIvNzJGMjQ0QkVB
QkE4MTFGMTgyNkIyRDAxNTExMUY5NzAucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAa
BAIAATAUAwQCZ9ZQMAwDBACQMFUDBAOQMFAwDQQCAAIwBwMFACQE1YAwDQYJKoZI
hvcNAQELBQADggEBANezJAGSq6PbVJQoXbeJHgkbvdEM7Jqr6kvANmx/R5aQlMrs
qIPscngHhd363evDi6VgZbB4kAbmXBI7iTnxgiTmBxP8NaCWbRaFwCLnALlk6TUW
M3iD1tGmV4DtCUHC5SowOrdQYyBcEtaXwcTfdnmng6ttaFcQEMa849gB22if/wZB
Ytjdc6GXyVXRy4wa6rgrM5UiAXUR9w1MfCVz7sE1I4rGrQqvpMAqIECXUf43Ib7t
pJrbqAx1M7V6fXDjNwU/L+Gv/kmhAU1x1p9pjx6Ba8H5gFjH3lLyxUdmnMFVxQsz
QcyQkSwMkk/qw0tpuVuyzOHd479mq14kxTaYAMA=
-----END CERTIFICATE-----
Generated at Mon Oct 5 13:06:20 2026 by rpki-client