Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa
File:                     76B3E9929B9811EC8CE35458C4F9AE02.roa (raw, json)
Hash identifier:          BDMTldlOhtRE8fdsa/Kig0BEI477q3hDk2bU8o4N/Fo=
Subject key identifier:   84:6F:95:98:80:C0:7A:78:32:B6:E5:12:EB:D7:9E:AD:40:52:C3:4E
Certificate issuer:       /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial:       0471
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa
Signing time:             Fri 03 Jul 2026 01:25:42 +0000
ROA not before:           Fri 03 Jul 2026 01:25:42 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     141389
IP address blocks:        103.167.214.0/24 maxlen: 24
                          103.167.215.0/24 maxlen: 24
                          2001:df6:c180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1137 (0x471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
        Validity
            Not Before: Jul  3 01:25:42 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a470f96-7fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:6b:bd:2c:29:c1:ab:e5:4b:b7:a0:b6:75:
                    37:54:77:50:ca:99:ea:2c:2d:46:db:ae:88:4c:da:
                    2d:f9:b2:94:ff:ff:1c:85:1a:3d:43:43:e7:92:27:
                    3f:7f:b5:9b:94:ba:77:11:85:6d:96:54:09:d0:7d:
                    d2:f1:31:e4:c1:f0:0b:c2:32:3d:8f:92:1a:e4:d7:
                    72:03:cc:da:f9:68:2e:f1:3d:81:b6:26:73:9e:21:
                    56:64:9b:1a:bb:35:8e:52:26:47:48:79:e7:84:b5:
                    29:11:49:e8:34:84:46:66:01:e9:47:89:1e:61:ba:
                    49:b2:e7:84:bc:82:aa:b6:cd:29:4d:b8:26:4b:fc:
                    69:24:0a:3d:a3:96:6b:95:18:78:5c:3f:b7:59:0f:
                    aa:2e:a7:3f:f7:94:2d:e2:d0:c5:3d:0c:e0:14:8b:
                    d0:31:ca:5a:c3:69:40:b3:85:b3:96:24:60:5a:56:
                    b1:83:9e:a3:0d:17:9f:d8:6b:2b:5e:cc:d7:63:27:
                    72:b2:da:40:7b:1b:8b:50:94:92:54:bd:77:1e:45:
                    67:1a:47:76:bd:5f:b8:94:58:f0:e8:5e:11:56:64:
                    c0:49:b4:2e:a6:bc:c6:b4:9f:80:56:59:d4:cf:51:
                    1f:de:33:a6:fa:2c:1f:e9:63:07:a0:b4:fe:5b:be:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6F:95:98:80:C0:7A:78:32:B6:E5:12:EB:D7:9E:AD:40:52:C3:4E
            X509v3 Authority Key Identifier:
                keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/76B3E9929B9811EC8CE35458C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.214.0/23
                IPv6:
                  2001:df6:c180::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:bb:86:35:4f:5a:34:06:7a:ad:e3:98:08:02:98:95:97:
         36:e9:73:10:ed:84:19:d3:31:b9:fa:7a:ff:dd:eb:db:4c:e0:
         89:c6:ec:0a:fa:f7:d7:19:a5:de:94:cc:f2:85:d0:be:36:ca:
         a4:fc:aa:d8:1f:d8:34:5a:16:2b:5d:74:4d:60:88:ea:f4:43:
         6f:f2:a7:88:a3:ff:9c:64:f6:c7:0d:db:3f:e8:58:2b:d5:77:
         18:a3:c2:e1:a6:20:51:b9:9e:54:73:4e:25:14:64:17:68:7e:
         61:7c:87:bb:ba:66:4e:dc:24:74:7f:6f:01:1c:27:2e:d7:dd:
         ef:c8:32:b6:b4:4b:62:6f:72:b2:e8:a7:d9:96:14:01:61:04:
         46:c6:b5:e8:85:3c:27:d6:c5:89:e5:8a:03:70:97:58:9e:d6:
         c9:b3:2c:9b:58:5a:e1:77:52:c2:46:b7:f6:9e:eb:d1:a7:90:
         84:eb:8b:5c:a4:4e:9d:15:7e:29:d4:58:af:4a:2e:08:9b:27:
         e3:19:ef:d6:32:fe:f6:ce:68:04:2d:2d:08:a8:e3:ca:b9:4e:
         e8:ec:12:c6:f3:13:00:4a:92:01:26:ac:f5:e1:ba:f8:3f:7f:
         06:2b:a3:5a:8e:e5:09:48:24:d1:ba:19:0f:3f:54:40:53:21:
         58:80:ec:4c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF
M0M0NDM3RTcwHhcNMjYwNzAzMDEyNTQyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ3MGY5Ni03ZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDhrvSwpwavlS7egtnU3VHdQypnqLC1G266ITNot+bKU//8chRo9Q0Pnkic/
f7WblLp3EYVtllQJ0H3S8THkwfALwjI9j5Ia5NdyA8za+Wgu8T2BtiZzniFWZJsa
uzWOUiZHSHnnhLUpEUnoNIRGZgHpR4keYbpJsueEvIKqts0pTbgmS/xpJAo9o5Zr
lRh4XD+3WQ+qLqc/95Qt4tDFPQzgFIvQMcpaw2lAs4WzliRgWlaxg56jDRef2Gsr
XszXYydystpAexuLUJSSVL13HkVnGkd2vV+4lFjw6F4RVmTASbQuprzGtJ+AVlnU
z1Ef3jOm+iwf6WMHoLT+W77rtQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIRvlZiA
wHp4MrblEuvXnq1AUsNOMB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC
OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjc5MzUvOTA1QTNBNDg5Qjk1MTFFQ0FFM0YwQzRGQzRGOUFFMDIvNzZCM0U5OTI5
Qjk4MTFFQzhDRTM1NDU4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6fWMA8EAgACMAkDBwAgAQ32wYAwDQYJKoZIhvcNAQELBQADggEB
ACldu4Y1T1o0Bnqt45gIApiVlzbpcxDthBnTMbn6ev/d69tM4InG7Ar699cZpd6U
zPKF0L42yqT8qtgf2DRaFitddE1giOr0Q2/yp4ij/5xk9scN2z/oWCvVdxijwuGm
IFG5nlRzTiUUZBdofmF8h7u6Zk7cJHR/bwEcJy7X3e/IMra0S2JvcrLop9mWFAFh
BEbGteiFPCfWxYnligNwl1ie1smzLJtYWuF3UsJGt/ae69GnkITri1ykTp0VfinU
WK9KLgibJ+MZ79Yy/vbOaAQtLQio48q5TujsEsbzEwBKkgEmrPXhuvg/fwYro1qO
5QlIJNG6GQ8/VEBTIViA7Ew=
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:39 2026 by rpki-client