Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/782DB69017A911F192949DC6333D8C67.roa
File:                     782DB69017A911F192949DC6333D8C67.roa (raw, json)
Hash identifier:          Mv+E4tW4XYVYr1mpUCzDscto72w/c2g7B6/yB5ClYE0=
Subject key identifier:   48:EB:65:9C:60:7A:84:77:12:36:72:FF:9D:DC:23:AB:27:77:2A:65
Certificate issuer:       /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial:       0334
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/782DB69017A911F192949DC6333D8C67.roa
Signing time:             Sat 21 Mar 2026 00:35:00 +0000
ROA not before:           Sat 21 Mar 2026 00:35:00 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        203.30.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
                          rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11D6, serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
        Validity
            Not Before: Mar 21 00:35:00 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69bde7b4-2879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:dd:12:69:8c:81:ae:99:65:38:cb:87:37:
                    f1:9a:a0:4c:06:7e:27:c9:2b:76:87:74:97:f1:9a:
                    f0:0d:bc:3d:63:25:c9:76:4c:56:89:24:b9:c4:95:
                    6f:50:a4:44:ba:77:35:64:45:38:08:57:d0:93:6e:
                    12:09:14:49:bb:cf:69:ea:3a:24:6b:fe:9d:d5:c1:
                    90:f6:eb:b5:ad:b9:ec:e4:5e:70:cb:23:6e:24:38:
                    e3:41:c2:c6:9f:ff:cc:6c:d5:7c:5b:c7:17:71:40:
                    b7:55:ab:cf:e6:cb:16:ad:0c:34:48:f5:df:2d:85:
                    86:68:d0:08:6e:cb:44:03:85:35:5e:81:99:be:4b:
                    25:1b:b4:4f:f6:a3:38:b0:b5:8b:52:3d:27:62:cf:
                    26:ca:dc:96:f5:08:ca:af:42:54:5e:5d:b1:39:86:
                    61:4f:11:e4:18:a6:ee:21:1b:a6:64:1f:77:d3:8a:
                    db:17:08:fa:61:39:00:d7:20:e3:81:cc:4d:ff:a7:
                    07:4c:a7:8d:c5:22:10:9a:37:38:6b:dd:dd:ff:d7:
                    69:0b:24:78:7e:c3:88:b5:1d:0d:5a:2a:15:8a:1e:
                    81:e2:23:6d:f9:a8:76:c7:b2:a9:a2:77:94:78:df:
                    ca:07:b2:6e:e3:fa:81:5d:73:e7:af:52:2f:b4:fa:
                    ff:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EB:65:9C:60:7A:84:77:12:36:72:FF:9D:DC:23:AB:27:77:2A:65
            X509v3 Authority Key Identifier:
                keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/782DB69017A911F192949DC6333D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:2d:e6:06:6c:b4:f4:e5:d0:dc:8e:8a:9c:68:6b:eb:dd:e2:
         db:7f:be:95:49:26:e9:fb:06:94:51:d6:9a:29:24:85:85:36:
         eb:45:99:ef:a1:e1:00:6a:14:04:21:56:c5:4a:c5:d5:ff:96:
         c4:c5:a9:70:dc:4d:88:25:7a:bf:8f:39:85:63:c1:82:a6:cb:
         3e:24:6d:c4:77:d2:0a:87:c2:99:c7:67:ed:50:3d:dd:97:a2:
         a5:f3:4a:37:42:22:57:f2:be:45:b7:5e:ac:d6:c8:52:90:48:
         8d:76:99:2b:0e:00:e2:bc:77:f1:ae:a1:54:66:ef:d2:bd:5c:
         60:00:9e:92:ee:5a:40:09:4b:9e:b4:6c:29:b1:c1:d1:42:7e:
         0b:3a:b6:5e:f9:b6:74:4a:80:2c:8f:a7:15:89:8f:cf:bb:5e:
         7e:f7:3a:6e:9e:85:f3:43:f7:81:b5:bc:d8:c5:8b:47:1b:d0:
         19:47:d9:b6:29:41:57:9b:b7:11:81:44:5c:2e:25:5b:83:39:
         7b:f6:67:f6:be:02:ae:f9:18:2b:a1:43:c8:da:6c:5a:d4:2f:
         1a:ef:92:54:2c:47:b4:be:d7:b7:10:93:62:0b:3c:bc:81:8b:
         b7:0d:7f:b6:91:05:25:af:bb:57:e5:61:ee:3c:c8:de:d7:df:
         7d:36:05:f6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExRDYxMTAvBgNVBAUTKEMyODYxMDcyMkMxQkM4OUJFMzJCNEQ0QjhBMkNDMjFE
RTY3MTdDQzgwHhcNMjYwMzIxMDAzNTAwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJkZTdiNC0yODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvALdEmmMga6ZZTjLhzfxmqBMBn4nySt2h3SX8ZrwDbw9YyXJdkxWiSS5xJVv
UKREunc1ZEU4CFfQk24SCRRJu89p6joka/6d1cGQ9uu1rbns5F5wyyNuJDjjQcLG
n//MbNV8W8cXcUC3VavP5ssWrQw0SPXfLYWGaNAIbstEA4U1XoGZvkslG7RP9qM4
sLWLUj0nYs8mytyW9QjKr0JUXl2xOYZhTxHkGKbuIRumZB9304rbFwj6YTkA1yDj
gcxN/6cHTKeNxSIQmjc4a93d/9dpCyR4fsOItR0NWioVih6B4iNt+ah2x7KponeU
eN/KB7Ju4/qBXXPnr1IvtPr/fwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEjrZZxg
eoR3EjZy/53cI6sndyplMB8GA1UdIwQYMBaAFMKGEHIsG8ib4ytNS4oswh3mcXzI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFENi83N0RFRkQzMjA2
MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlKdmpLMDFMaWl6Q0hlWnhm
TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dvWVFjaXdieUp2akswMUxpaXpDSGVaeGZNZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTExRDYvNzdERUZEMzIwNjM5MTFFRDgxOEM0MDE2QzRGOUFFMDIvNzgyREI2OTAx
N0E5MTFGMTkyOTQ5REM2MzMzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyx7BMA0GCSqGSIb3DQEBCwUAA4IBAQBdLeYGbLT05dDcjoqcaGvr
3eLbf76VSSbp+waUUdaaKSSFhTbrRZnvoeEAahQEIVbFSsXV/5bExalw3E2IJXq/
jzmFY8GCpss+JG3Ed9IKh8KZx2ftUD3dl6Kl80o3QiJX8r5Ft16s1shSkEiNdpkr
DgDivHfxrqFUZu/SvVxgAJ6S7lpACUuetGwpscHRQn4LOrZe+bZ0SoAsj6cViY/P
u15+9zpunoXzQ/eBtbzYxYtHG9AZR9m2KUFXm7cRgURcLiVbgzl79mf2vgKu+Rgr
oUPI2mxa1C8a75JULEe0vte3EJNiCzy8gYu3DX+2kQUlr7tX5WHuPMje1999NgX2
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:48 2026 by rpki-client