Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/4868355806A611F08F878981C4F9AE02.roa
File:                     4868355806A611F08F878981C4F9AE02.roa (raw, json)
Hash identifier:          Lc8YGehrJGbqaoNm5IFD3ddC4TVllXFkB2NVqqtSkCU=
Subject key identifier:   55:08:4B:14:A2:CF:CC:E6:9E:62:15:18:A0:97:D1:13:D6:41:00:B3
Certificate issuer:       /CN=A91EA723/serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
Certificate serial:       0253
Authority key identifier: B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/4868355806A611F08F878981C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:27:19 +0000
ROA not before:           Wed 02 Apr 2025 12:23:22 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     134785
IP address blocks:        103.93.32.0/24 maxlen: 24
                          103.93.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA723, serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
        Validity
            Not Before: Apr  2 12:23:22 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3ea57-5644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:b4:1f:b3:b8:bd:1b:42:51:50:51:3f:8a:
                    4f:7b:30:2b:8f:7a:25:04:d6:1b:c0:20:52:fb:ae:
                    d6:90:9d:35:b4:a1:78:df:c5:1d:67:8b:96:83:64:
                    cb:83:62:00:8f:8c:2e:39:21:81:f0:16:0b:10:8d:
                    a3:ff:64:9a:58:91:19:71:74:0c:9a:42:67:17:4d:
                    39:51:9b:17:70:a8:0c:31:78:cc:bc:71:ba:f4:06:
                    17:22:70:8f:be:d4:72:3f:9f:8f:60:af:9b:c5:01:
                    64:71:40:52:49:0f:3e:c6:a7:9c:b0:66:d5:a0:25:
                    2b:df:41:a8:6f:3e:22:f9:d8:7b:66:ad:e7:89:d7:
                    b8:7d:74:af:4c:14:f7:0a:bf:0a:0c:95:8e:0a:f0:
                    17:d4:fc:c8:d7:10:6f:54:d6:de:e2:54:f9:9c:1b:
                    24:ea:09:3a:15:c1:17:75:14:a2:b5:ba:e2:04:df:
                    d4:bb:45:b7:d1:c8:08:94:55:18:d7:80:75:1a:f0:
                    db:25:89:be:d6:a1:84:32:4c:4a:1b:61:ef:ba:3b:
                    99:3d:45:82:7a:db:c8:25:4c:a3:55:e8:c5:dd:03:
                    5d:f0:fc:fe:bb:5c:13:72:72:38:00:25:d8:3c:27:
                    e5:4d:23:98:e6:61:10:d9:07:f3:ea:f1:46:4c:cf:
                    82:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:08:4B:14:A2:CF:CC:E6:9E:62:15:18:A0:97:D1:13:D6:41:00:B3
            X509v3 Authority Key Identifier:
                keyid:B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/4868355806A611F08F878981C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:ad:b9:33:9a:f6:10:72:00:44:73:d0:9a:e3:82:b3:54:c6:
         d0:c8:4e:f2:84:af:eb:64:7d:4a:56:d3:04:e5:7d:eb:4b:2e:
         1d:3b:1c:2d:3d:8d:28:e1:25:51:d5:b9:ab:cd:f9:ad:49:3d:
         f0:5e:01:71:13:ce:49:ac:c3:e2:5f:0d:40:55:54:21:cd:90:
         11:60:ac:42:1e:d2:cd:04:47:e1:94:5e:ae:1b:2a:f9:c3:0d:
         eb:fe:2f:66:84:b4:a2:c4:b5:70:c3:40:f4:f0:3d:b4:f6:63:
         ee:1c:92:0a:cd:90:23:51:65:fa:8b:87:05:f5:79:7d:4c:e8:
         65:d9:64:3e:1e:af:ee:f8:f5:9f:38:3d:78:af:65:95:11:0f:
         fa:ba:1f:c6:98:81:a2:65:93:88:50:d3:f2:ce:d7:37:f9:c0:
         22:bc:67:46:44:ce:95:94:9e:8d:c2:3d:a9:d6:eb:f9:e4:a0:
         f9:cf:86:38:1f:43:e2:54:74:e0:bd:c9:03:0c:53:ec:13:d7:
         23:6b:c8:d1:e4:71:a2:29:be:c2:bb:f2:2e:f1:6f:0a:58:26:
         ae:ac:7a:e9:8e:31:9b:f5:49:b1:6e:11:0f:68:f4:d0:15:62:
         42:fd:6f:31:55:96:1d:8d:90:fe:70:66:fa:7d:fe:c8:25:47:
         fa:b9:ee:40
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE3MjMxMTAvBgNVBAUTKEI5MDQyMjU1OUI1OEM0REFBODlGMjI0RDQ5QzcxRkY0
NEY5QkNBMzQwHhcNMjUwNDAyMTIyMzIyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWE1Ny01NjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtFy0H7O4vRtCUVBRP4pPezArj3olBNYbwCBS+67WkJ01tKF438UdZ4uWg2TL
g2IAj4wuOSGB8BYLEI2j/2SaWJEZcXQMmkJnF005UZsXcKgMMXjMvHG69AYXInCP
vtRyP5+PYK+bxQFkcUBSSQ8+xqecsGbVoCUr30Gobz4i+dh7Zq3nide4fXSvTBT3
Cr8KDJWOCvAX1PzI1xBvVNbe4lT5nBsk6gk6FcEXdRSitbriBN/Uu0W30cgIlFUY
14B1GvDbJYm+1qGEMkxKG2HvujuZPUWCetvIJUyjVejF3QNd8Pz+u1wTcnI4ACXY
PCflTSOY5mEQ2Qfz6vFGTM+C8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFUISxSi
z8zmnmIVGKCX0RPWQQCzMB8GA1UdIwQYMBaAFLkEIlWbWMTaqJ8iTUnHH/RPm8o0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTcyMy8yQ0Q3RjVDOEIy
N0QxMUVEODg1NkZBODFDNEY5QUUwMi91UVFpVlp0WXhOcW9ueUpOU2NjZjlFLWJ5
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VRUWlWWnRZeE5xb255Sk5TY2NmOUUtYnlqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUE3MjMvMkNEN0Y1QzhCMjdEMTFFRDg4NTZGQTgxQzRGOUFFMDIvNDg2ODM1NTgw
NkE2MTFGMDhGODc4OTgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ10gMA0GCSqGSIb3DQEBCwUAA4IBAQBVrbkzmvYQcgBEc9Ca44Kz
VMbQyE7yhK/rZH1KVtME5X3rSy4dOxwtPY0o4SVR1bmrzfmtST3wXgFxE85JrMPi
Xw1AVVQhzZARYKxCHtLNBEfhlF6uGyr5ww3r/i9mhLSixLVww0D08D209mPuHJIK
zZAjUWX6i4cF9Xl9TOhl2WQ+Hq/u+PWfOD14r2WVEQ/6uh/GmIGiZZOIUNPyztc3
+cAivGdGRM6VlJ6Nwj2p1uv55KD5z4Y4H0PiVHTgvckDDFPsE9cja8jR5HGiKb7C
u/Iu8W8KWCaurHrpjjGb9UmxbhEPaPTQFWJC/W8xVZYdjZD+cGb6ff7IJUf6ue5A
-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:18 2026 by rpki-client