Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/2AEC4C4EF9D911ECBC381559C4F9AE02.roa
File:                     2AEC4C4EF9D911ECBC381559C4F9AE02.roa (raw, json)
Hash identifier:          Nz0DVL+CvZ5dT8akmCAjwfXowXzmBOEn4Hxk/rEQ7LY=
Subject key identifier:   CF:9D:D1:8B:C9:C7:9D:6D:C5:FD:8F:95:70:4A:08:DD:40:06:73:B5
Certificate issuer:       /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial:       0340
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/2AEC4C4EF9D911ECBC381559C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:11:36 +0000
ROA not before:           Wed 07 May 2025 01:38:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141020
IP address blocks:        103.186.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
                          rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832 (0x340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
        Validity
            Not Before: May  7 01:38:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a58c88-915c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9a:11:ee:23:b3:6a:4d:ef:a4:9e:a9:4d:ff:
                    35:7c:8f:c6:27:be:2b:d9:c2:cf:d5:ca:7c:b7:f7:
                    7b:c3:99:18:8b:1b:a3:12:71:9d:4e:6c:74:17:c5:
                    c6:fb:46:16:de:7a:63:e1:66:90:42:6f:4b:e6:21:
                    71:4d:3c:4f:41:cd:7b:0f:cc:24:6e:67:f0:7f:ba:
                    2d:a4:3b:75:1e:4a:11:25:8c:21:a0:34:2b:cb:4a:
                    92:24:e5:c5:f4:a5:c7:2c:98:af:25:97:19:ea:d2:
                    d3:38:06:6b:d3:79:8a:2e:eb:9b:2c:ae:14:df:ad:
                    09:04:be:15:51:52:bf:8c:99:58:0c:77:4c:af:62:
                    b7:c1:b0:bc:6b:65:2d:44:cd:0e:18:fb:5f:27:1f:
                    71:21:65:d7:09:ef:72:2d:69:04:e9:f6:18:57:30:
                    f1:92:e0:d9:fd:6b:97:5f:ff:32:93:57:98:58:c9:
                    1f:62:8d:4c:6b:e3:65:7f:50:5c:0d:15:8a:f6:2b:
                    24:1d:3b:8c:7a:14:dd:7b:df:13:f8:99:c8:fb:e0:
                    17:01:f9:23:a1:18:9d:e8:93:94:70:8f:2a:22:6c:
                    ba:53:cd:9f:74:6c:8f:2d:15:91:a0:92:df:ea:72:
                    de:8b:ec:be:f2:80:85:3d:69:72:3b:a9:e9:6b:68:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9D:D1:8B:C9:C7:9D:6D:C5:FD:8F:95:70:4A:08:DD:40:06:73:B5
            X509v3 Authority Key Identifier:
                keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/2AEC4C4EF9D911ECBC381559C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d4:52:48:53:3f:ac:c5:6d:89:d9:0a:60:06:c7:96:3b:23:
         30:74:31:4d:1d:b3:49:15:3f:e0:88:6b:f5:ac:f2:11:bf:80:
         c3:c3:f9:7f:8f:75:71:9b:83:39:8f:49:8a:2b:22:61:ee:c9:
         7e:2b:1f:96:8c:58:af:59:6e:80:d5:ed:38:d5:e6:3b:e3:3a:
         fe:74:dd:98:b5:24:7c:22:4c:cd:19:a3:57:22:b9:b5:72:a3:
         d3:12:57:9b:2f:46:7c:3e:6f:6f:8c:06:f8:4b:d6:45:27:24:
         08:da:ad:4e:60:5f:61:18:ec:f0:43:f0:05:69:a8:f4:c7:81:
         8e:ef:e1:ea:de:65:b3:db:ce:0a:0d:8d:3b:c3:56:9a:f5:04:
         93:29:58:2d:4c:58:12:71:40:0f:ca:0f:a0:85:4a:55:bc:a6:
         a0:2b:20:41:76:11:1f:33:f6:69:5d:f2:71:65:45:00:63:e7:
         ba:89:6e:b6:bd:c7:65:25:cc:83:7c:0d:2f:9e:03:b9:d4:a2:
         fd:26:6b:4a:55:9c:65:6c:64:71:96:01:17:e4:7c:11:7c:bb:
         f2:57:f9:95:8c:09:d3:de:f1:62:dd:f3:56:7a:a8:42:88:a1:
         90:64:e7:f3:aa:bf:98:fc:0b:3b:da:46:54:fc:53:ac:a5:ea:
         b0:1e:06:c6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw
NjAyRkY2QkMwHhcNMjUwNTA3MDEzODQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OGM4OC05MTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlZoR7iOzak3vpJ6pTf81fI/GJ74r2cLP1cp8t/d7w5kYixujEnGdTmx0F8XG
+0YW3npj4WaQQm9L5iFxTTxPQc17D8wkbmfwf7otpDt1HkoRJYwhoDQry0qSJOXF
9KXHLJivJZcZ6tLTOAZr03mKLuubLK4U360JBL4VUVK/jJlYDHdMr2K3wbC8a2Ut
RM0OGPtfJx9xIWXXCe9yLWkE6fYYVzDxkuDZ/WuXX/8yk1eYWMkfYo1Ma+Nlf1Bc
DRWK9iskHTuMehTde98T+JnI++AXAfkjoRid6JOUcI8qImy6U82fdGyPLRWRoJLf
6nLei+y+8oCFPWlyO6npa2i8lQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM+d0YvJ
x51txf2PlXBKCN1ABnO1MB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5
RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTU3QzkvOUM2RUY3NEVGOUQ1MTFFQ0I2RENBRDU0QzRGOUFFMDIvMkFFQzRDNEVG
OUQ5MTFFQ0JDMzgxNTU5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7pPMA0GCSqGSIb3DQEBCwUAA4IBAQBX1FJIUz+sxW2J2QpgBseW
OyMwdDFNHbNJFT/giGv1rPIRv4DDw/l/j3Vxm4M5j0mKKyJh7sl+Kx+WjFivWW6A
1e041eY74zr+dN2YtSR8IkzNGaNXIrm1cqPTElebL0Z8Pm9vjAb4S9ZFJyQI2q1O
YF9hGOzwQ/AFaaj0x4GO7+Hq3mWz284KDY07w1aa9QSTKVgtTFgScUAPyg+ghUpV
vKagKyBBdhEfM/ZpXfJxZUUAY+e6iW62vcdlJcyDfA0vngO51KL9JmtKVZxlbGRx
lgEX5HwRfLvyV/mVjAnT3vFi3fNWeqhCiKGQZOfzqr+Y/As72kZU/FOspeqwHgbG
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:50:48 2026 by rpki-client