Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/92B377C82CB011F0A2E86B16C4F9AE02.roa
File:                     92B377C82CB011F0A2E86B16C4F9AE02.roa (raw, json)
Hash identifier:          hglWubZXzfjiLQUkYHVzTqN3YyCMG1Pzr8h/6XyrD8I=
Subject key identifier:   61:93:BF:F5:EB:AE:96:CD:88:D6:35:64:ED:E9:82:F7:8B:67:33:CF
Certificate issuer:       /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
Certificate serial:       011F
Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/92B377C82CB011F0A2E86B16C4F9AE02.roa
Signing time:             Sat 11 Jul 2026 07:33:53 +0000
ROA not before:           Sat 11 Jul 2026 07:33:53 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     153494
IP address blocks:        103.60.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
        Validity
            Not Before: Jul 11 07:33:53 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a51f1e1-09d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:00:f2:ef:d2:31:8e:86:c5:55:ff:4b:d6:84:
                    26:f0:17:d0:ad:85:26:fa:87:9b:eb:26:4b:10:47:
                    77:ac:2e:7c:38:70:a7:d1:8a:b2:9b:83:96:a1:35:
                    83:b3:39:f6:c9:ec:0f:59:d6:39:5e:2a:5d:a2:83:
                    2c:85:f0:79:64:26:b2:a6:cf:cc:12:0f:bb:e8:80:
                    01:02:69:38:a3:af:12:87:a3:37:24:61:88:a7:74:
                    fb:7b:90:37:56:fd:77:75:c0:fa:17:5b:74:1c:1f:
                    ad:f7:eb:5f:6b:66:eb:f8:57:d3:23:7e:d1:fb:55:
                    65:3e:f2:c8:19:b8:30:26:99:81:9c:60:cc:29:fa:
                    69:8b:ad:2e:56:75:cf:c1:d5:80:3f:56:44:34:69:
                    63:8f:3c:be:d1:3d:40:b0:fd:2c:8a:12:04:ef:fa:
                    b0:8b:a8:e2:ad:3e:e8:81:74:00:20:bd:df:ac:92:
                    7d:11:2b:76:22:9c:96:ed:b9:93:05:7c:4d:ce:9a:
                    ba:d9:1e:29:63:be:9b:d2:18:26:2f:6d:cd:84:a5:
                    ee:2f:45:96:20:54:79:d4:46:1c:af:b5:d8:53:23:
                    87:14:f6:8b:0a:01:7e:cd:90:26:f5:9e:eb:75:0a:
                    2e:6d:83:a5:b3:e8:aa:c3:1d:ac:b0:ca:3c:f2:5a:
                    08:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:93:BF:F5:EB:AE:96:CD:88:D6:35:64:ED:E9:82:F7:8B:67:33:CF
            X509v3 Authority Key Identifier:
                keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/92B377C82CB011F0A2E86B16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:ce:03:57:09:5c:23:47:b4:16:bc:f4:6c:81:51:e7:a4:d1:
         6f:ca:79:92:be:43:f0:25:b4:ed:a9:ec:8a:39:c6:69:5c:35:
         26:b7:2d:63:7f:81:d9:28:00:04:bb:92:72:79:22:40:c8:dc:
         f2:3f:67:d2:de:d6:12:6d:62:ea:e4:f0:1b:4d:77:5a:d3:fa:
         8f:79:b0:e3:f2:33:f4:f2:25:5d:ca:11:7b:eb:f6:19:a0:cf:
         e3:05:bc:af:af:e7:62:d1:91:bb:20:e5:5e:06:c6:24:99:95:
         e0:e4:f1:c3:27:40:a1:49:03:27:42:11:0c:a1:16:3c:11:b8:
         9f:93:15:32:52:6e:bd:05:c6:e3:a3:94:7c:8a:bb:32:04:6a:
         6b:cc:fb:72:5e:aa:0d:16:45:cb:96:30:a5:c8:52:b8:c7:2d:
         c0:2b:1a:99:50:60:58:68:de:75:b1:6a:78:fc:ae:e1:21:af:
         c4:cf:f1:50:7e:01:1a:8b:11:70:74:5f:24:e9:ba:5e:97:d4:
         5c:77:12:15:b3:7a:68:84:f1:7c:fc:8a:42:23:d6:0b:32:b8:
         2a:a3:6d:b7:8d:16:20:1f:b1:c6:7b:ff:59:87:3f:16:d0:06:
         dd:7f:7f:12:6d:5f:da:fc:fd:df:5a:45:69:03:bf:5d:fc:d3:
         78:a6:61:fd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU5NkUxMTAvBgNVBAUTKDI0MjlBM0VFNTA4OEYzRDQ1MzcyQThFM0IzNjgzNEM3
NUVBRTZEMjkwHhcNMjYwNzExMDczMzUzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTUxZjFlMS0wOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiADy79IxjobFVf9L1oQm8BfQrYUm+oeb6yZLEEd3rC58OHCn0Yqym4OWoTWD
szn2yewPWdY5XipdooMshfB5ZCayps/MEg+76IABAmk4o68Sh6M3JGGIp3T7e5A3
Vv13dcD6F1t0HB+t9+tfa2br+FfTI37R+1VlPvLIGbgwJpmBnGDMKfppi60uVnXP
wdWAP1ZENGljjzy+0T1AsP0sihIE7/qwi6jirT7ogXQAIL3frJJ9ESt2IpyW7bmT
BXxNzpq62R4pY76b0hgmL23NhKXuL0WWIFR51EYcr7XYUyOHFPaLCgF+zZAm9Z7r
dQoubYOls+iqwx2ssMo88loI5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGGTv/Xr
rpbNiNY1ZO3pgveLZzPPMB8GA1UdIwQYMBaAFCQpo+5QiPPUU3Ko47NoNMderm0p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTk2RS8yM0QyRjE2RUVD
MjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5UlRjcWpqczJnMHgxNnVi
U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJTay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUU5NkUvMjNEMkYxNkVFQzIxMTFFRkEzNTU2MDVGQzRGOUFFMDIvOTJCMzc3Qzgy
Q0IwMTFGMEEyRTg2QjE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZzxAMA0GCSqGSIb3DQEBCwUAA4IBAQCkzgNXCVwjR7QWvPRsgVHn
pNFvynmSvkPwJbTtqeyKOcZpXDUmty1jf4HZKAAEu5JyeSJAyNzyP2fS3tYSbWLq
5PAbTXda0/qPebDj8jP08iVdyhF76/YZoM/jBbyvr+di0ZG7IOVeBsYkmZXg5PHD
J0ChSQMnQhEMoRY8EbifkxUyUm69Bcbjo5R8irsyBGprzPtyXqoNFkXLljClyFK4
xy3AKxqZUGBYaN51sWp4/K7hIa/Ez/FQfgEaixFwdF8k6bpel9RcdxIVs3pohPF8
/IpCI9YLMrgqo223jRYgH7HGe/9Zhz8W0Abdf38SbV/a/P3fWkVpA79d/NN4pmH9
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:53 2026 by rpki-client