Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/10DF38404A0F11F1ADEF3170C6833773.roa
File:                     10DF38404A0F11F1ADEF3170C6833773.roa (raw, json)
Hash identifier:          zZ1+IDgbqTdrDQD26xbPUgcOhoi1B5pU+fBcBrN7gto=
Subject key identifier:   ED:B8:C9:13:D8:D9:21:8A:09:C3:C1:97:F7:BA:5D:45:A4:9C:B3:72
Certificate issuer:       /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial:       02A7
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/10DF38404A0F11F1ADEF3170C6833773.roa
Signing time:             Thu 07 May 2026 12:19:59 +0000
ROA not before:           Thu 07 May 2026 12:19:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     10103
IP address blocks:        103.43.172.0/24 maxlen: 24
                          103.43.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
                          rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
        Validity
            Not Before: May  7 12:19:59 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69fc836f-3927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:2d:6c:1e:07:f4:51:e6:29:92:fb:66:ed:
                    e9:d8:f2:a8:19:b2:2f:f1:87:e4:f6:77:35:dd:01:
                    23:43:45:fc:15:74:01:35:ea:60:e5:5e:6b:58:24:
                    c3:6b:23:d5:04:60:f3:e7:28:1c:30:df:dd:8d:f1:
                    55:b5:09:d7:4e:0f:ba:12:9a:f3:9b:2a:53:fc:e7:
                    07:1c:1b:d0:76:64:09:a6:6f:f0:0a:6d:af:c8:e8:
                    a2:8f:0d:7b:34:e2:94:ce:80:b8:a9:7b:71:32:f4:
                    e6:ee:ba:94:9c:db:88:72:90:c9:02:a2:66:4f:ce:
                    8a:82:e4:b9:83:a8:b3:b1:41:e5:a4:86:4c:52:08:
                    32:ac:84:36:da:89:08:f6:e6:31:33:f4:b4:84:74:
                    a4:b7:34:40:63:a4:db:4e:8b:e5:e5:65:f2:e2:a0:
                    05:7a:60:48:c1:c6:78:99:ac:fe:c1:74:6e:1a:de:
                    fa:4e:18:13:25:6b:43:83:2e:32:48:40:12:16:e7:
                    b9:0b:7e:8f:4f:ad:80:35:08:6f:3b:94:68:a6:77:
                    e3:4e:b8:07:a9:3b:47:af:8c:86:67:80:29:c2:52:
                    8f:e3:46:b8:e5:2d:be:5b:45:40:9f:e0:70:79:01:
                    a9:ae:9a:06:7a:4c:78:8d:f2:2c:a5:96:10:64:fc:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B8:C9:13:D8:D9:21:8A:09:C3:C1:97:F7:BA:5D:45:A4:9C:B3:72
            X509v3 Authority Key Identifier:
                keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/10DF38404A0F11F1ADEF3170C6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:d5:27:39:e4:f0:10:95:ef:7b:5f:f8:2f:6f:79:3f:2c:3f:
         3b:88:7b:60:f6:23:dd:45:6f:8f:1f:8b:a8:eb:60:b4:53:84:
         7a:31:bf:26:e4:20:78:1c:c1:19:18:4d:f2:d2:50:29:82:5b:
         f2:43:50:39:09:79:ff:96:2d:9c:ff:96:9d:29:4e:eb:76:c6:
         f9:17:ba:fc:ea:75:74:27:cd:19:b7:12:81:f4:c8:dc:3e:65:
         cf:55:73:d9:ca:68:2f:ef:7f:fc:eb:d0:4b:55:1c:1c:cc:63:
         a4:82:a2:73:23:d4:9b:04:19:4c:59:18:2b:18:71:2c:0e:52:
         90:01:9c:09:8d:d4:19:08:c7:47:1b:f3:ec:a8:19:43:50:bc:
         86:ca:99:bd:44:e8:80:e8:45:5f:87:60:ce:af:a8:ca:03:f9:
         06:7f:2a:ec:3e:ad:e1:0f:f1:75:cc:2d:04:37:32:e5:e3:aa:
         df:9f:7d:a3:a6:8a:93:37:93:96:90:4c:86:ce:3d:04:b0:9e:
         42:dc:7d:50:da:e7:80:0b:ed:31:ac:13:e3:df:71:2e:88:f5:
         46:84:2a:f3:38:d3:4a:80:05:51:fc:f5:80:09:90:07:df:21:
         83:d9:a2:b1:da:55:3d:05:2d:bb:6e:2a:02:12:62:14:82:05:
         65:99:7e:74
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy
OEUyOEZCNEIwHhcNMjYwNTA3MTIxOTU5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZjODM2Zi0zOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu8gtbB4H9FHmKZL7Zu3p2PKoGbIv8Yfk9nc13QEjQ0X8FXQBNepg5V5rWCTD
ayPVBGDz5ygcMN/djfFVtQnXTg+6EprzmypT/OcHHBvQdmQJpm/wCm2vyOiijw17
NOKUzoC4qXtxMvTm7rqUnNuIcpDJAqJmT86KguS5g6izsUHlpIZMUggyrIQ22okI
9uYxM/S0hHSktzRAY6TbTovl5WXy4qAFemBIwcZ4maz+wXRuGt76ThgTJWtDgy4y
SEASFue5C36PT62ANQhvO5RopnfjTrgHqTtHr4yGZ4ApwlKP40a45S2+W0VAn+Bw
eQGprpoGekx4jfIspZYQZPyFZQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO24yRPY
2SGKCcPBl/e6XUWknLNyMB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG
MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjNDODcvRTc4Mjg1NEVFRjBCMTFFRDgxREQyRDcyQzRGOUFFMDIvMTBERjM4NDA0
QTBGMTFGMUFERUYzMTcwQzY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZyusMA0GCSqGSIb3DQEBCwUAA4IBAQB01Sc55PAQle97X/gvb3k/
LD87iHtg9iPdRW+PH4uo62C0U4R6Mb8m5CB4HMEZGE3y0lApglvyQ1A5CXn/li2c
/5adKU7rdsb5F7r86nV0J80ZtxKB9MjcPmXPVXPZymgv73/869BLVRwczGOkgqJz
I9SbBBlMWRgrGHEsDlKQAZwJjdQZCMdHG/PsqBlDULyGypm9ROiA6EVfh2DOr6jK
A/kGfyrsPq3hD/F1zC0ENzLl46rfn32jpoqTN5OWkEyGzj0EsJ5C3H1Q2ueAC+0x
rBPj33EuiPVGhCrzONNKgAVR/PWACZAH3yGD2aKx2lU9BS27bioCEmIUggVlmX50
-----END CERTIFICATE-----
Generated at Wed May 13 04:20:41 2026 by rpki-client