Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/6B0AC84C3E1711F1A511DF78B0833773.roa
File:                     6B0AC84C3E1711F1A511DF78B0833773.roa (raw, json)
Hash identifier:          V9OAtWmcfm4Nuv1e1Q4YP0cUaxGAb0f/aKkaOZRJSDM=
Subject key identifier:   D5:01:38:3F:17:B3:EE:D3:59:2E:01:6D:AE:D2:75:F2:25:2A:DC:4F
Certificate issuer:       /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Certificate serial:       50
Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/6B0AC84C3E1711F1A511DF78B0833773.roa
Signing time:             Wed 16 Sep 2026 07:01:46 +0000
ROA not before:           Wed 16 Sep 2026 07:01:46 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     63888
IP address blocks:        43.230.112.0/22 maxlen: 22
                          43.230.112.0/24 maxlen: 24
                          43.230.113.0/24 maxlen: 24
                          43.230.114.0/24 maxlen: 24
                          43.230.115.0/24 maxlen: 24
                          103.49.156.0/22 maxlen: 22
                          103.49.156.0/24 maxlen: 24
                          103.49.157.0/24 maxlen: 24
                          103.49.158.0/24 maxlen: 24
                          103.49.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
                          rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
        Validity
            Not Before: Sep 16 07:01:46 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6aaa3ed9-af16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:dd:d4:05:a9:46:d4:99:c0:c9:1f:92:88:
                    47:c2:7c:ca:2f:e9:d2:c5:d0:3d:b3:56:c4:da:9b:
                    28:8b:a0:c6:52:30:02:05:39:7a:be:3d:71:22:e0:
                    ba:1c:f9:69:28:54:94:bb:79:94:c2:10:fd:0b:95:
                    c6:a2:b5:69:87:b2:ff:2f:de:6a:58:b5:f0:3b:51:
                    96:56:5a:9a:01:b7:ee:b4:88:a1:33:83:04:b3:dc:
                    42:73:72:d5:9a:ce:d7:d1:7a:6a:69:e8:7f:92:5a:
                    ab:c0:41:a1:74:a4:aa:e9:8f:4c:91:1b:8f:33:de:
                    45:9a:5c:20:94:76:3f:e7:93:24:3f:88:b5:38:eb:
                    5d:f2:4a:57:73:ce:47:ac:8c:98:45:9e:c7:0b:e8:
                    3c:07:86:9a:96:b8:bc:f5:b8:bd:09:32:46:2c:cd:
                    bb:7f:b3:5a:e0:53:5b:6f:f3:5d:ab:e1:77:81:91:
                    41:48:89:bc:86:33:9a:a3:15:40:f0:71:f6:02:33:
                    c4:b3:ac:44:3e:09:ca:88:4b:b6:d2:0b:d0:c4:37:
                    8e:19:6d:5a:c0:ac:bd:49:f0:e0:0d:61:b6:04:c8:
                    39:a9:ac:ab:0a:b0:2d:6f:67:e3:2a:a2:0f:15:75:
                    4b:a2:4f:6e:6b:9f:d6:18:81:eb:f2:0d:2c:4a:b3:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:01:38:3F:17:B3:EE:D3:59:2E:01:6D:AE:D2:75:F2:25:2A:DC:4F
            X509v3 Authority Key Identifier:
                keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/6B0AC84C3E1711F1A511DF78B0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.112.0/22
                  103.49.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:89:77:16:47:c2:44:2d:70:c3:f5:57:63:8a:04:c4:51:ac:
         8c:1e:8b:8d:28:f6:92:00:91:f3:81:2e:f4:4d:ce:fb:e7:fc:
         0d:89:63:a9:42:f1:36:cf:9b:62:5b:20:33:75:40:2f:7a:31:
         1b:a5:49:5c:d5:88:a4:a7:68:4b:e1:3f:68:c9:9d:c8:ce:10:
         4d:52:f5:30:81:75:0b:43:57:e6:ac:e5:04:74:76:74:6a:77:
         7e:e4:51:1a:79:7a:0e:cf:87:7a:ef:94:b4:f1:79:9c:bb:b1:
         c1:b1:59:cf:bb:12:88:f0:48:bd:eb:f4:71:f5:c9:5f:62:40:
         56:96:fa:0a:53:75:03:80:29:31:8f:65:73:30:8d:b3:d4:65:
         c8:58:79:06:75:67:9c:fb:45:d4:b8:57:71:69:c1:7c:3d:6c:
         6d:bd:fd:0e:d5:0f:82:09:59:65:f7:00:10:25:f0:cb:6b:bb:
         4c:74:d7:f9:0b:7f:27:b3:bb:32:de:5c:71:b6:96:f4:69:bc:
         14:d6:11:14:8f:cf:3d:d3:a1:82:c6:9c:0b:fd:85:ea:01:e5:
         11:58:5e:91:2d:d2:30:61:43:50:6e:aa:86:ce:79:33:9b:dd:
         b3:ec:ae:ba:28:1b:55:ac:cb:68:59:16:62:ec:69:b9:c8:07:
         4c:db:18:d9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
OTExOTExMC8GA1UEBRMoOUNCNkU2NEFDNzQ1ODI5QUEzQzE1NDA3QjNFNDAyQjIw
NkExQUYxOTAeFw0yNjA5MTYwNzAxNDZaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYWEzZWQ5LWFmMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiv93UBalG1JnAyR+SiEfCfMov6dLF0D2zVsTamyiLoMZSMAIFOXq+PXEi4Loc
+WkoVJS7eZTCEP0LlcaitWmHsv8v3mpYtfA7UZZWWpoBt+60iKEzgwSz3EJzctWa
ztfRempp6H+SWqvAQaF0pKrpj0yRG48z3kWaXCCUdj/nkyQ/iLU4613ySldzzkes
jJhFnscL6DwHhpqWuLz1uL0JMkYszbt/s1rgU1tv812r4XeBkUFIibyGM5qjFUDw
cfYCM8SzrEQ+CcqIS7bSC9DEN44ZbVrArL1J8OANYbYEyDmprKsKsC1vZ+Mqog8V
dUuiT25rn9YYgevyDSxKs6VzAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQU1QE4Pxez
7tNZLgFtrtJ18iUq3E8wHwYDVR0jBBgwFoAUnLbmSsdFgpqjwVQHs+QCsgahrxkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5MTE5L0UzMUNGOUNBM0Uw
RjExRjE5QkY4MjNBQ0FBODMzNzczL25MYm1Tc2RGZ3BxandWUUhzLVFDc2dhaHJ4
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbkxibVNzZEZncHFqd1ZRSHMtUUNzZ2FocnhrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OTExOS9FMzFDRjlDQTNFMEYxMUYxOUJGODIzQUNBQTgzMzc3My82QjBBQzg0QzNF
MTcxMUYxQTUxMURGNzhCMDgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAIr5nADBAJnMZwwDQYJKoZIhvcNAQELBQADggEBAHyJdxZHwkQtcMP1
V2OKBMRRrIwei40o9pIAkfOBLvRNzvvn/A2JY6lC8TbPm2JbIDN1QC96MRulSVzV
iKSnaEvhP2jJncjOEE1S9TCBdQtDV+as5QR0dnRqd37kURp5eg7Ph3rvlLTxeZy7
scGxWc+7EojwSL3r9HH1yV9iQFaW+gpTdQOAKTGPZXMwjbPUZchYeQZ1Z5z7RdS4
V3FpwXw9bG29/Q7VD4IJWWX3ABAl8Mtru0x01/kLfyezuzLeXHG2lvRpvBTWERSP
zz3ToYLGnAv9heoB5RFYXpEt0jBhQ1BuqobOeTOb3bPsrrooG1Wsy2hZFmLsabnI
B0zbGNk=
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:33:04 2026 by rpki-client