Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/9C581C28B07511EF9D153813C4F9AE02.roa
File:                     9C581C28B07511EF9D153813C4F9AE02.roa (raw, json)
Hash identifier:          arq5+h3KHX6t5y5Zj2CBCAg4COLqYpvoHOLbprQdcjc=
Subject key identifier:   D3:9B:A0:2E:19:14:E1:56:9E:C8:77:06:0B:7E:6D:2E:AA:E9:45:E0
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       056B
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/9C581C28B07511EF9D153813C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:02:59 +0000
ROA not before:           Mon 26 Jan 2026 23:19:19 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137453
IP address blocks:        103.174.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Jan 26 23:19:19 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a59893-25cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:88:5b:17:5d:66:b7:0e:4c:07:93:9a:84:
                    8e:49:aa:d7:af:a0:f4:d1:da:7c:c6:40:40:95:2e:
                    2d:e0:91:a4:65:c3:76:93:c4:1a:9b:44:3b:a8:60:
                    7c:d7:42:9e:5d:4d:43:f8:fa:b5:40:c0:57:e6:2c:
                    c6:0d:4f:2d:b1:47:47:30:1f:19:ec:e1:56:1a:1a:
                    99:d4:0f:44:05:67:a9:ee:78:93:27:97:93:6c:a8:
                    7e:26:2d:b7:a5:10:f6:2c:64:8d:88:8c:a9:23:e3:
                    81:0c:bb:65:22:2b:2c:88:7d:6c:9d:1b:df:8b:67:
                    53:16:bd:8a:62:74:a9:40:d8:f9:9e:0e:bd:8c:bd:
                    fd:6d:7a:86:70:60:0f:71:8e:22:58:d4:4a:dc:1a:
                    e3:19:53:74:8c:66:24:46:21:36:8f:a0:67:bf:5c:
                    b7:83:d0:b6:42:0b:a3:e7:d9:73:7e:a0:30:19:57:
                    4a:85:a9:24:4d:a3:54:4e:68:0d:2f:13:d5:59:73:
                    46:80:46:67:81:7e:8b:1d:0a:97:bc:7f:ad:05:b0:
                    7f:fc:90:8f:3e:fc:04:5d:04:2b:ff:e9:bd:24:57:
                    a6:21:00:1b:c8:8f:c0:92:ef:5b:14:ca:68:6a:c0:
                    6e:1c:d6:04:08:3a:73:b4:65:a0:49:6a:37:ea:dd:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:A0:2E:19:14:E1:56:9E:C8:77:06:0B:7E:6D:2E:AA:E9:45:E0
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/9C581C28B07511EF9D153813C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:12:3e:78:13:1c:8b:1b:e9:ca:30:2c:d2:be:5c:26:e2:07:
         a6:5e:f1:4d:11:5b:ec:96:5f:7a:91:39:cd:62:88:36:17:c6:
         d9:ee:65:7a:3c:d7:92:58:b6:99:a6:cf:f7:92:e0:4b:27:33:
         60:42:57:0f:7f:09:12:ca:43:41:d8:cb:76:16:f3:a2:9d:27:
         16:19:42:91:2a:4f:c7:f2:1a:24:df:4c:29:4d:5e:d9:3e:45:
         f8:3f:c8:30:60:bc:f5:59:97:92:82:13:dc:97:1f:c2:29:1b:
         01:65:25:d3:0c:0b:aa:e1:f4:53:cd:09:d4:52:b0:fb:f4:de:
         d6:57:83:ae:11:ad:b4:0a:a2:bc:b3:54:82:ee:ef:68:6c:cf:
         ab:6f:a3:ff:d9:0a:8f:ac:85:b8:d7:43:c1:64:85:57:92:ba:
         5d:b9:44:41:bb:12:7a:c8:d3:0f:00:f0:2d:9b:2e:fb:c8:23:
         2d:f5:83:85:d9:08:c2:d9:70:cc:49:d7:c4:db:da:98:be:39:
         ce:09:c2:e2:12:33:0d:6d:78:67:6d:bb:a1:93:70:99:20:9c:
         f0:d6:0c:b0:9e:ee:a2:c9:c0:aa:3c:6c:28:17:4e:3f:cc:26:
         00:63:19:ef:65:92:f6:fa:be:88:34:64:5d:a7:47:77:2f:8d:
         31:08:20:d2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw
MkI4MkY3NkQwHhcNMjYwMTI2MjMxOTE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTg5My0yNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnUeIWxddZrcOTAeTmoSOSarXr6D00dp8xkBAlS4t4JGkZcN2k8Qam0Q7qGB8
10KeXU1D+Pq1QMBX5izGDU8tsUdHMB8Z7OFWGhqZ1A9EBWep7niTJ5eTbKh+Ji23
pRD2LGSNiIypI+OBDLtlIissiH1snRvfi2dTFr2KYnSpQNj5ng69jL39bXqGcGAP
cY4iWNRK3BrjGVN0jGYkRiE2j6Bnv1y3g9C2Qguj59lzfqAwGVdKhakkTaNUTmgN
LxPVWXNGgEZngX6LHQqXvH+tBbB//JCPPvwEXQQr/+m9JFemIQAbyI/Aku9bFMpo
asBuHNYECDpztGWgSWo36t293QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNOboC4Z
FOFWnsh3Bgt+bS6q6UXgMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy
MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTVEMEMvODkxQjRFQ0EzMjM2MTFFQzg5ODM4NzU2QzRGOUFFMDIvOUM1ODFDMjhC
MDc1MTFFRjlEMTUzODEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ64sMA0GCSqGSIb3DQEBCwUAA4IBAQB+Ej54ExyLG+nKMCzSvlwm
4gemXvFNEVvsll96kTnNYog2F8bZ7mV6PNeSWLaZps/3kuBLJzNgQlcPfwkSykNB
2Mt2FvOinScWGUKRKk/H8hok30wpTV7ZPkX4P8gwYLz1WZeSghPclx/CKRsBZSXT
DAuq4fRTzQnUUrD79N7WV4OuEa20CqK8s1SC7u9obM+rb6P/2QqPrIW410PBZIVX
krpduURBuxJ6yNMPAPAtmy77yCMt9YOF2QjC2XDMSdfE29qYvjnOCcLiEjMNbXhn
bbuhk3CZIJzw1gywnu6iycCqPGwoF04/zCYAYxnvZZL2+r6INGRdp0d3L40xCCDS
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:16 2026 by rpki-client