Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/83CA50563C2311F0AEBA313AC4F9AE02.roa
File:                     83CA50563C2311F0AEBA313AC4F9AE02.roa (raw, json)
Hash identifier:          i7Zg6PXeqx5yta9f2QFLDzmys2SCsBMKZtuGdN5vZOc=
Subject key identifier:   EC:67:0A:CD:4C:92:6D:84:F5:93:5C:12:0C:6E:07:71:FE:9B:DA:C9
Certificate issuer:       /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Certificate serial:       0428
Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/83CA50563C2311F0AEBA313AC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 01:33:29 +0000
ROA not before:           Wed 29 Apr 2026 01:33:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140045
IP address blocks:        103.184.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
                          rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064 (0x428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
        Validity
            Not Before: Apr 29 01:33:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f15fe9-40fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:18:3a:73:c8:fb:f0:8c:72:cb:48:c1:ee:
                    5c:74:19:ed:43:a1:88:f2:a2:3d:98:26:32:dd:39:
                    99:6c:4e:56:af:63:f5:c8:49:06:ad:81:39:5c:de:
                    7c:dd:46:d9:e8:c3:f2:9e:c1:6e:97:cc:04:1b:f3:
                    75:78:a3:db:15:39:95:35:c5:7b:31:da:86:92:a0:
                    9f:d1:36:a4:db:ca:29:1c:0e:d1:1b:65:02:c9:b4:
                    dc:1e:1a:56:80:60:3a:09:00:77:0b:64:7b:a5:7d:
                    db:5a:b1:99:7d:db:ff:65:a5:00:62:2f:86:e9:f7:
                    16:79:1a:37:da:b7:8d:44:86:09:36:67:4d:b9:a0:
                    fc:76:65:b4:37:41:a5:f7:bf:8c:21:35:3a:27:55:
                    e8:43:91:ab:8e:53:0c:3e:5e:4c:8e:22:05:6c:c0:
                    09:ac:2e:e4:7c:79:d6:82:7f:ff:db:77:ce:d1:7e:
                    18:27:3f:59:91:0a:00:c5:ed:ba:04:12:69:78:73:
                    87:d3:ce:91:e7:c3:28:05:76:5d:ab:fd:54:c6:00:
                    d6:55:32:3b:ab:f5:45:68:09:a7:12:e9:de:4b:e4:
                    cf:7e:f9:88:ab:ee:69:d6:41:65:20:71:a1:13:82:
                    c3:ca:df:69:aa:35:40:e8:03:11:4f:8c:d5:8d:e6:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:67:0A:CD:4C:92:6D:84:F5:93:5C:12:0C:6E:07:71:FE:9B:DA:C9
            X509v3 Authority Key Identifier:
                keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/83CA50563C2311F0AEBA313AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:17:f1:cf:46:d0:99:31:8f:83:de:fa:79:3f:ca:7b:cc:4f:
         db:14:ac:49:7e:51:f9:f2:11:4b:e0:3b:5b:99:e2:c1:71:35:
         09:44:22:70:cd:b4:2f:21:6e:fa:3a:e2:17:6f:29:5e:38:6f:
         4e:22:ee:64:93:fe:82:66:1f:fe:e8:fc:84:52:c7:11:d1:dd:
         42:73:2e:de:52:e2:df:c1:08:cd:26:30:43:bb:94:e1:b8:04:
         15:04:a8:eb:8d:93:22:17:d4:e4:91:4d:a7:c2:f2:13:17:93:
         e8:6b:13:73:07:b9:1c:e3:e2:67:7d:51:e3:7b:14:2a:ed:0e:
         24:ee:26:88:df:e7:45:72:66:30:d9:b2:14:31:8e:cf:a1:07:
         85:c3:0c:6b:6b:a4:d7:78:a0:ca:73:93:6c:f1:a4:59:a2:4c:
         b9:4b:99:df:bf:4f:85:95:ad:1c:5c:98:85:d6:44:1f:0c:36:
         60:2c:24:75:e1:80:49:00:a7:28:50:37:63:5f:50:3e:bf:28:
         a5:cf:e6:19:ff:82:e0:09:83:a3:02:7a:e1:22:63:3e:bb:e9:
         56:c4:92:c4:02:70:09:1f:70:c9:3e:cb:48:30:d8:cf:95:33:
         9c:90:d1:1a:a0:d6:42:87:79:b9:68:ce:e9:e3:f0:4c:b5:cf:
         5c:54:be:5d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx
NEMzQjIxNDIwHhcNMjYwNDI5MDEzMzI5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYxNWZlOS00MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtWoYOnPI+/CMcstIwe5cdBntQ6GI8qI9mCYy3TmZbE5Wr2P1yEkGrYE5XN58
3UbZ6MPynsFul8wEG/N1eKPbFTmVNcV7MdqGkqCf0Tak28opHA7RG2UCybTcHhpW
gGA6CQB3C2R7pX3bWrGZfdv/ZaUAYi+G6fcWeRo32reNRIYJNmdNuaD8dmW0N0Gl
97+MITU6J1XoQ5GrjlMMPl5MjiIFbMAJrC7kfHnWgn//23fO0X4YJz9ZkQoAxe26
BBJpeHOH086R58MoBXZdq/1UxgDWVTI7q/VFaAmnEuneS+TPfvmIq+5p1kFlIHGh
E4LDyt9pqjVA6AMRT4zVjeYSPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOxnCs1M
km2E9ZNcEgxuB3H+m9rJMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw
MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTM3MzEvNTVCMjIzRUFDMDIyMTFFQzkyNjVEQTVEQzRGOUFFMDIvODNDQTUwNTYz
QzIzMTFGMEFFQkEzMTNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7hdMA0GCSqGSIb3DQEBCwUAA4IBAQCpF/HPRtCZMY+D3vp5P8p7
zE/bFKxJflH58hFL4DtbmeLBcTUJRCJwzbQvIW76OuIXbyleOG9OIu5kk/6CZh/+
6PyEUscR0d1Ccy7eUuLfwQjNJjBDu5ThuAQVBKjrjZMiF9TkkU2nwvITF5PoaxNz
B7kc4+JnfVHjexQq7Q4k7iaI3+dFcmYw2bIUMY7PoQeFwwxra6TXeKDKc5Ns8aRZ
oky5S5nfv0+Fla0cXJiF1kQfDDZgLCR14YBJAKcoUDdjX1A+vyilz+YZ/4LgCYOj
AnrhImM+u+lWxJLEAnAJH3DJPstIMNjPlTOckNEaoNZCh3m5aM7p4/BMtc9cVL5d
-----END CERTIFICATE-----
Generated at Wed May 13 03:29:08 2026 by rpki-client