Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/1983150A3BB911EEB0CA4809C4F9AE02.roa
File:                     1983150A3BB911EEB0CA4809C4F9AE02.roa (raw, json)
Hash identifier:          5RNyMR+3G/bk8qvZSiyds5uiwVr/sSQ5ExXQPxGSzo8=
Subject key identifier:   23:13:5B:9E:C2:EC:06:22:F8:9D:45:FD:EA:12:A7:A6:96:D7:E7:1C
Certificate issuer:       /CN=A91ED73E/serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
Certificate serial:       1493
Authority key identifier: 5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/1983150A3BB911EEB0CA4809C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:44:04 +0000
ROA not before:           Thu 14 Aug 2025 17:26:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137972
IP address blocks:        103.146.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl
                          rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5267 (0x1493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED73E, serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
        Validity
            Not Before: Aug 14 17:26:00 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a51594-3b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:9d:b4:20:b2:a0:a6:5a:9c:fe:21:1c:9e:
                    55:1e:8e:31:34:0b:fc:24:57:c3:b7:3b:6a:f9:c2:
                    53:ab:4a:68:74:a4:57:31:96:42:d4:1d:5d:d3:c1:
                    05:25:32:e5:d6:55:79:7c:1c:64:17:4f:1f:29:67:
                    7d:dd:c4:c7:80:3b:09:dd:a4:01:df:e2:1e:73:38:
                    9b:14:94:22:6c:34:dc:2c:05:6f:ea:a8:68:09:49:
                    1d:b7:89:d0:18:0e:7e:c0:25:52:4c:49:5d:33:ae:
                    35:73:b9:10:b6:6e:35:95:cf:b9:c9:e2:3f:4f:b0:
                    4f:5e:9f:7c:d8:c6:31:26:4b:7a:40:ab:49:15:ba:
                    a9:f2:3c:35:e5:45:2a:e2:67:d0:36:6f:74:7b:6c:
                    35:19:bc:61:8b:64:40:b1:32:65:60:02:03:9c:6d:
                    d7:66:0c:9e:5e:08:13:39:ee:df:3d:8f:70:eb:ff:
                    1a:68:f9:87:df:39:5e:12:e3:84:0c:a5:50:49:b0:
                    17:6d:b2:bd:f3:68:74:fc:79:7d:a4:f9:e1:26:2a:
                    69:7e:fb:2f:9a:46:48:7d:93:f1:f1:ce:fe:11:7f:
                    a2:83:89:67:e0:99:05:00:1f:b8:69:6e:94:53:a4:
                    73:32:e9:cc:8a:13:21:2c:7d:10:f1:cf:b4:73:8a:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:13:5B:9E:C2:EC:06:22:F8:9D:45:FD:EA:12:A7:A6:96:D7:E7:1C
            X509v3 Authority Key Identifier:
                keyid:5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/1983150A3BB911EEB0CA4809C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8e:e0:fc:d7:33:d9:ec:b3:79:d7:58:bb:82:c0:ba:86:25:
         43:7f:26:4e:df:9d:47:f2:ae:c5:df:98:90:97:b0:4a:45:c6:
         23:42:22:be:78:b4:69:04:11:85:3e:7c:01:e9:42:8e:f9:98:
         c6:6c:84:b9:07:e3:41:f3:75:c9:b3:3f:e3:bc:97:91:e7:d4:
         08:9e:fe:2d:c4:81:fe:e1:34:28:cc:97:eb:5a:b2:9a:56:75:
         d8:b7:aa:dc:ee:ef:e6:d9:88:a7:c1:4a:e1:20:4e:1f:c3:a1:
         95:c6:c0:6f:9f:0e:42:99:7d:2b:e2:96:4f:87:ff:e2:28:5e:
         e5:ba:25:1a:44:6d:0b:9c:73:e1:d9:6c:1d:77:3d:a3:21:ac:
         e3:13:35:a7:49:45:74:bb:e1:58:d7:de:3f:13:42:2f:94:a8:
         c0:2b:f5:42:14:01:7a:16:e9:1d:5f:34:f4:13:bc:39:44:bb:
         0c:73:54:2d:e1:d9:03:47:ad:d4:79:17:a9:8c:07:ee:5a:66:
         a3:82:20:0b:16:2f:66:cd:cd:4e:12:98:e8:7f:20:4e:d7:59:
         1a:4f:75:cc:26:38:10:87:18:6d:00:34:b3:45:bd:4b:f4:da:
         84:ba:1f:18:f6:36:26:19:57:68:8f:69:3d:f7:fa:7b:62:58:
         1b:d7:3c:ed
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICFJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ3M0UxMTAvBgNVBAUTKDVDQUY0MUY2NEIzNzUyNjg3OThFMkE1REFBMEMxNDAw
MDBDRDc0NzMwHhcNMjUwODE0MTcyNjAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MTU5NC0zYjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1DmdtCCyoKZanP4hHJ5VHo4xNAv8JFfDtztq+cJTq0podKRXMZZC1B1d08EF
JTLl1lV5fBxkF08fKWd93cTHgDsJ3aQB3+IeczibFJQibDTcLAVv6qhoCUkdt4nQ
GA5+wCVSTEldM641c7kQtm41lc+5yeI/T7BPXp982MYxJkt6QKtJFbqp8jw15UUq
4mfQNm90e2w1Gbxhi2RAsTJlYAIDnG3XZgyeXggTOe7fPY9w6/8aaPmH3zleEuOE
DKVQSbAXbbK982h0/Hl9pPnhJippfvsvmkZIfZPx8c7+EX+ig4ln4JkFAB+4aW6U
U6RzMunMihMhLH0Q8c+0c4pGlQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCMTW57C
7AYi+J1F/eoSp6aW1+ccMB8GA1UdIwQYMBaAFFyvQfZLN1JoeY4qXaoMFAAAzXRz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDczRS8wMUI4MjEwQTg5
ODkxMUU4Qjk4QkVDM0FDNEY5QUUwMi9YSzlCOWtzM1VtaDVqaXBkcWd3VUFBRE5k
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hLOUI5a3MzVW1oNWppcGRxZ3dVQUFETmRITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUQ3M0UvMDFCODIxMEE4OTg5MTFFOEI5OEJFQzNBQzRGOUFFMDIvMTk4MzE1MEEz
QkI5MTFFRUIwQ0E0ODA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5IYMA0GCSqGSIb3DQEBCwUAA4IBAQAajuD81zPZ7LN511i7gsC6
hiVDfyZO351H8q7F35iQl7BKRcYjQiK+eLRpBBGFPnwB6UKO+ZjGbIS5B+NB83XJ
sz/jvJeR59QInv4txIH+4TQozJfrWrKaVnXYt6rc7u/m2YinwUrhIE4fw6GVxsBv
nw5CmX0r4pZPh//iKF7luiUaRG0LnHPh2Wwddz2jIazjEzWnSUV0u+FY194/E0Iv
lKjAK/VCFAF6FukdXzT0E7w5RLsMc1Qt4dkDR63UeRepjAfuWmajgiALFi9mzc1O
EpjofyBO11kaT3XMJjgQhxhtADSzRb1L9NqEuh8Y9jYmGVdoj2k99/p7Ylgb1zzt
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:00:26 2026 by rpki-client