Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/A87755B68BCD11ECAF9D1512C4F9AE02.roa
File:                     A87755B68BCD11ECAF9D1512C4F9AE02.roa (raw, json)
Hash identifier:          unCQmTbZm4pgrTVUyuiudS71668sOfsE5vQDTSaCxiQ=
Subject key identifier:   21:84:0B:DE:A5:0C:38:DC:16:F5:80:57:61:17:0F:6C:98:C0:E3:9A
Certificate issuer:       /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Certificate serial:       045D
Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/A87755B68BCD11ECAF9D1512C4F9AE02.roa
Signing time:             Thu 05 Mar 2026 00:33:15 +0000
ROA not before:           Thu 05 Mar 2026 00:33:15 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149508
IP address blocks:        103.181.122.0/23 maxlen: 23
                          103.181.122.0/24 maxlen: 24
                          103.181.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
                          rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
        Validity
            Not Before: Mar  5 00:33:15 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a8cf4b-a9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:1c:f4:55:33:3c:2b:11:d5:b2:24:a2:1e:
                    74:a0:5d:72:7b:86:f4:cd:21:05:c4:8a:95:b4:3f:
                    ef:b2:a0:bf:13:45:10:36:a2:42:04:93:b4:26:38:
                    14:55:47:8c:da:09:d9:df:cc:cf:30:90:ae:9a:7f:
                    f0:13:6e:ac:92:c9:c8:e9:25:df:4b:03:a8:b5:4c:
                    09:df:59:09:49:7d:1c:59:1f:85:9b:34:ba:3c:38:
                    33:ab:62:4c:3b:3f:d5:e6:06:10:3d:1a:82:5f:67:
                    de:10:72:b1:4f:73:9a:59:41:09:cf:df:ca:f5:79:
                    db:51:6d:37:f5:0d:a6:c5:43:30:63:43:26:c0:5a:
                    a5:2e:fe:c0:03:89:4e:92:2d:00:58:13:8a:c6:40:
                    02:da:d0:93:84:1b:0f:a3:1a:9d:2d:cc:c5:3b:c7:
                    03:fe:95:89:43:fb:2b:e3:b1:47:65:ac:47:e9:06:
                    82:f2:4c:f5:b0:9c:bd:58:29:9e:2b:cf:a9:4b:b5:
                    1f:01:d5:63:4b:00:f1:4c:b7:b5:e9:e3:97:32:75:
                    54:a2:74:18:3e:fa:7c:82:6e:fd:b0:1e:26:28:2d:
                    a0:12:60:91:47:fa:c3:df:94:a0:c8:d8:6f:3d:11:
                    c1:5c:70:fb:b5:97:57:b8:18:fa:f2:36:b3:49:05:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:84:0B:DE:A5:0C:38:DC:16:F5:80:57:61:17:0F:6C:98:C0:E3:9A
            X509v3 Authority Key Identifier:
                keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/A87755B68BCD11ECAF9D1512C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:92:44:c9:38:1c:e9:fa:e9:f0:4e:ac:61:65:0d:a9:fa:39:
         c0:a2:3e:98:54:b4:e5:71:d6:66:cb:4c:e8:b5:86:48:5f:2b:
         91:f4:98:eb:ef:09:2e:26:0b:56:43:0f:da:0c:00:4b:eb:62:
         5f:36:9c:94:d0:79:49:b2:c9:5b:3f:7d:67:14:c2:3b:74:1d:
         c6:ed:30:4c:92:8a:77:97:f8:e9:a3:ca:9c:f0:70:61:6c:5c:
         f5:07:ad:0c:8f:dc:22:c2:3d:7d:0a:ad:e3:3c:46:cc:da:b2:
         5d:5f:46:7a:b3:5b:05:9a:ed:7a:3c:a8:13:79:31:11:03:80:
         84:b4:96:c9:56:8b:98:30:e2:77:01:f7:08:f8:65:e2:e4:7f:
         01:6d:cd:87:85:b4:91:8c:47:d6:21:b2:21:6e:b0:11:93:db:
         89:95:5f:2c:d6:8d:dc:ea:b0:5e:60:ab:53:8c:f2:52:d1:47:
         e1:d6:30:26:b9:cc:28:d9:a6:cd:ce:70:bb:17:a3:e6:0d:9a:
         21:08:31:f6:24:7e:af:55:75:dc:5c:91:c3:9f:75:f3:f0:36:
         7a:8f:c5:a6:7a:11:80:2e:59:20:69:2b:e1:a7:45:91:e4:e6:
         c6:3b:7f:6a:7b:a3:a8:8b:d7:48:ed:52:a1:fe:82:9a:9d:71:
         7e:6b:00:ad
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc2NzIxMTAvBgNVBAUTKEExNjMwRUZFQjU2NjU1Q0ZBMTMzMzMwQjk4REIzNjE5
MkRERUJERkMwHhcNMjYwMzA1MDAzMzE1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE4Y2Y0Yi1hOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2noc9FUzPCsR1bIkoh50oF1ye4b0zSEFxIqVtD/vsqC/E0UQNqJCBJO0JjgU
VUeM2gnZ38zPMJCumn/wE26sksnI6SXfSwOotUwJ31kJSX0cWR+FmzS6PDgzq2JM
Oz/V5gYQPRqCX2feEHKxT3OaWUEJz9/K9XnbUW039Q2mxUMwY0MmwFqlLv7AA4lO
ki0AWBOKxkAC2tCThBsPoxqdLczFO8cD/pWJQ/sr47FHZaxH6QaC8kz1sJy9WCme
K8+pS7UfAdVjSwDxTLe16eOXMnVUonQYPvp8gm79sB4mKC2gEmCRR/rD35SgyNhv
PRHBXHD7tZdXuBj68jazSQVm7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCGEC96l
DDjcFvWAV2EXD2yYwOOaMB8GA1UdIwQYMBaAFKFjDv61ZlXPoTMzC5jbNhkt3r38
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY3Mi83QzVEM0ZERThC
Q0ExMUVDQUM1REU1NjdDNEY5QUUwMi9vV01PX3JWbVZjLWhNek1MbU5zMkdTM2V2
ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29XTU9fclZtVmMtaE16TUxtTnMyR1MzZXZmdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTc2NzIvN0M1RDNGREU4QkNBMTFFQ0FDNURFNTY3QzRGOUFFMDIvQTg3NzU1QjY4
QkNEMTFFQ0FGOUQxNTEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ7V6MA0GCSqGSIb3DQEBCwUAA4IBAQARkkTJOBzp+unwTqxhZQ2p
+jnAoj6YVLTlcdZmy0zotYZIXyuR9Jjr7wkuJgtWQw/aDABL62JfNpyU0HlJsslb
P31nFMI7dB3G7TBMkop3l/jpo8qc8HBhbFz1B60Mj9wiwj19Cq3jPEbM2rJdX0Z6
s1sFmu16PKgTeTERA4CEtJbJVouYMOJ3AfcI+GXi5H8Bbc2HhbSRjEfWIbIhbrAR
k9uJlV8s1o3c6rBeYKtTjPJS0Ufh1jAmucwo2abNznC7F6PmDZohCDH2JH6vVXXc
XJHDn3Xz8DZ6j8WmehGALlkgaSvhp0WR5ObGO39qe6Ooi9dI7VKh/oKanXF+awCt
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:10 2026 by rpki-client