Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa
File:                     DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (raw, json)
Hash identifier:          KU0ufVeci0w9ovxEyLq7SERtD22aftIPEj3L8PrHlJE=
Subject key identifier:   9E:96:50:51:78:F9:55:80:F5:96:87:F2:A8:34:FC:44:5B:60:C8:A9
Certificate issuer:       /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Certificate serial:       04B2
Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa
Signing time:             Sat 25 Apr 2026 00:33:11 +0000
ROA not before:           Sat 25 Apr 2026 00:33:11 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     139611
IP address blocks:        103.180.54.0/23 maxlen: 23
                          103.180.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
                          rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202 (0x4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
        Validity
            Not Before: Apr 25 00:33:11 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ec0bc7-bbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:57:df:0f:37:15:c5:ab:43:18:94:81:6a:
                    52:ec:78:1c:a7:b2:d5:ce:57:90:5d:d4:cc:8e:6f:
                    1e:73:ca:af:4d:32:49:b7:2a:10:e5:3e:7a:5b:d1:
                    45:4f:0b:44:31:5a:2c:a5:c9:a3:fb:10:f4:c7:cf:
                    29:72:7f:09:34:c6:d6:09:e3:c3:d8:d9:45:d5:51:
                    38:72:8a:b8:34:b9:9b:63:5a:78:b0:f8:bf:06:1a:
                    06:7a:e3:2e:f0:85:a8:4f:96:31:11:d3:13:34:73:
                    30:49:96:f3:27:d6:20:35:51:65:53:6b:1d:3a:43:
                    23:5f:bf:e1:87:99:3f:f9:1f:c4:60:7b:f3:54:ea:
                    62:5a:30:f0:92:63:4c:e0:af:6c:77:aa:15:1b:02:
                    67:e3:54:01:b2:e6:33:9b:25:67:f2:dc:9b:e2:88:
                    56:aa:de:35:07:0f:15:d1:73:de:aa:1a:eb:c6:e4:
                    a8:9b:3c:f8:18:35:61:27:85:90:1b:ab:99:ec:99:
                    da:07:53:02:36:d9:5e:21:7a:70:29:40:a6:fc:76:
                    15:45:3a:16:36:37:88:52:56:d1:95:e9:4e:7c:70:
                    11:65:7a:5a:05:f5:58:f3:be:a3:ad:e9:07:52:79:
                    40:06:cc:70:d5:88:d8:e7:82:cd:b8:bc:56:32:b2:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:96:50:51:78:F9:55:80:F5:96:87:F2:A8:34:FC:44:5B:60:C8:A9
            X509v3 Authority Key Identifier:
                keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:40:2a:99:7f:5d:60:9c:85:91:74:d3:05:5c:ce:dd:cd:
         cb:44:6b:1c:82:b3:ad:e3:f6:b8:80:f9:f6:5d:b9:7c:0d:af:
         25:9f:a0:51:4f:51:b2:1a:b6:35:9b:63:4d:10:0d:e3:18:d0:
         2f:50:26:92:78:fe:44:58:9f:ea:dd:22:2e:cd:bc:69:5e:de:
         25:49:61:81:dd:e0:f5:a0:e3:f8:53:d3:5d:6a:24:14:85:2e:
         b8:22:69:95:ac:55:7f:0a:69:d3:04:0a:4e:f3:1a:b9:e5:47:
         e9:12:48:d1:48:77:01:0a:89:9d:ac:9f:93:12:6e:a8:9d:87:
         2d:33:34:3c:f2:d5:b4:13:3e:c2:89:c0:21:62:84:45:52:97:
         b0:47:17:e3:28:ce:b7:57:d4:b0:b2:6d:cf:ca:1f:73:86:db:
         ee:ed:94:24:37:8c:0c:ad:3e:8b:68:b1:f1:19:b7:48:e9:b6:
         ea:3e:87:4f:f2:9a:ad:d5:56:e9:46:e1:93:62:b7:91:23:55:
         a5:bf:ec:f2:dd:4b:4c:cc:83:a4:47:ad:c9:44:2c:ea:c6:e1:
         92:36:28:a6:ff:85:39:ba:f4:30:97:d5:f0:3d:c8:1d:9c:c1:
         90:d3:ad:ea:46:4a:0a:36:89:d5:d9:11:19:df:c2:65:38:17:
         15:6d:76:43
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz
MUM1QUZEQTEwHhcNMjYwNDI1MDAzMzExWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWVjMGJjNy1iYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqqlX3w83FcWrQxiUgWpS7Hgcp7LVzleQXdTMjm8ec8qvTTJJtyoQ5T56W9FF
TwtEMVospcmj+xD0x88pcn8JNMbWCePD2NlF1VE4coq4NLmbY1p4sPi/BhoGeuMu
8IWoT5YxEdMTNHMwSZbzJ9YgNVFlU2sdOkMjX7/hh5k/+R/EYHvzVOpiWjDwkmNM
4K9sd6oVGwJn41QBsuYzmyVn8tyb4ohWqt41Bw8V0XPeqhrrxuSomzz4GDVhJ4WQ
G6uZ7JnaB1MCNtleIXpwKUCm/HYVRToWNjeIUlbRlelOfHARZXpaBfVY876jrekH
UnlABsxw1YjY54LNuLxWMrJi4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ6WUFF4
+VWA9ZaH8qg0/ERbYMipMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE
RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg3QkIvOURGMERGQkU3REU5MTFFQ0JFQTA4RTBGQzRGOUFFMDIvRERDQjZCMDJE
OUQzMTFFRUJCM0JERjEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ7Q2MA0GCSqGSIb3DQEBCwUAA4IBAQB0jUAqmX9dYJyFkXTTBVzO
3c3LRGscgrOt4/a4gPn2Xbl8Da8ln6BRT1GyGrY1m2NNEA3jGNAvUCaSeP5EWJ/q
3SIuzbxpXt4lSWGB3eD1oOP4U9NdaiQUhS64ImmVrFV/CmnTBApO8xq55UfpEkjR
SHcBComdrJ+TEm6onYctMzQ88tW0Ez7CicAhYoRFUpewRxfjKM63V9Swsm3Pyh9z
htvu7ZQkN4wMrT6LaLHxGbdI6bbqPodP8pqt1VbpRuGTYreRI1Wlv+zy3UtMzIOk
R63JRCzqxuGSNiim/4U5uvQwl9XwPcgdnMGQ063qRkoKNonV2REZ38JlOBcVbXZD
-----END CERTIFICATE-----
Generated at Wed May 13 04:36:59 2026 by rpki-client