Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
File:                     6F46908C2D3411ED92165562C4F9AE02.roa (raw, json)
Hash identifier:          zhPJuDjgckqRzGpF3JKmc3mqbX/Sm5NWxnx6UnLAwsM=
Subject key identifier:   1C:9C:AB:F1:5C:A9:5F:7E:E6:4E:00:9A:D2:5B:25:E3:99:71:7F:82
Certificate issuer:       /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial:       030C
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
Signing time:             Thu 23 Jul 2026 02:27:21 +0000
ROA not before:           Thu 23 Jul 2026 02:27:21 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.10.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
        Validity
            Not Before: Jul 23 02:27:21 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a617c09-cc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:89:1a:19:17:d1:88:31:78:05:1d:48:63:
                    96:0c:18:26:72:70:2c:4c:0c:e9:1c:21:68:ac:78:
                    66:51:fb:36:d6:69:26:52:da:8c:09:20:b0:5e:36:
                    df:5d:73:24:64:81:eb:46:9d:e2:fb:5f:7a:74:0b:
                    25:f8:e1:d8:e7:56:75:ee:f1:b0:59:36:b6:cd:ef:
                    67:4a:53:74:95:29:70:68:53:35:a3:63:4d:3d:65:
                    75:6b:08:5d:e6:ea:26:8b:af:98:52:69:78:52:28:
                    7a:06:54:f9:72:69:f6:9f:27:e8:36:42:e9:10:fd:
                    3f:20:93:30:af:f7:e4:d8:1d:88:bc:98:91:5a:82:
                    82:6f:50:a9:1c:63:ed:d8:91:58:3e:01:46:7f:26:
                    f0:57:f5:0d:1d:86:28:c9:a3:44:19:ad:6b:7a:98:
                    74:27:dd:9b:f1:9f:c6:7d:75:dc:ab:ca:1e:11:1c:
                    20:31:ac:35:8c:f8:1c:32:4d:53:fb:a6:66:57:1c:
                    27:09:25:5b:a4:60:c8:e4:7e:c2:f9:ef:d3:fc:b4:
                    5c:b6:c2:5a:a6:8f:ab:a7:92:cf:69:2c:95:8e:23:
                    58:76:a1:10:77:15:a9:a4:5e:bf:59:b7:33:f9:ce:
                    76:d0:5d:c7:d2:73:18:2e:9c:e4:36:f3:82:4f:89:
                    09:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9C:AB:F1:5C:A9:5F:7E:E6:4E:00:9A:D2:5B:25:E3:99:71:7F:82
            X509v3 Authority Key Identifier:
                keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:80:46:c0:00:4d:40:9a:a5:49:7d:a1:fd:8e:2d:52:ce:7d:
         83:40:d7:f9:bf:2a:f6:17:99:e1:5c:a2:9e:c2:90:e0:c7:e5:
         e9:47:85:54:78:62:75:ac:ea:99:ba:29:58:35:6f:b4:9b:c7:
         49:4b:33:e0:5e:93:a8:39:a0:0d:4e:08:cb:9b:9d:75:16:6e:
         3c:aa:99:21:15:78:fb:a5:82:df:58:3f:fd:e8:c4:ea:ee:d1:
         18:59:f1:37:fd:d4:49:ff:4f:e3:04:83:2f:28:e6:1c:87:d2:
         4c:a2:2f:6f:7c:9c:ec:e9:76:d5:2e:8f:65:78:18:4f:fe:b0:
         8a:3e:d3:09:29:fe:8f:3e:e7:f1:74:86:60:44:a6:06:d1:50:
         04:ac:26:a5:f0:6c:35:b7:d4:a8:d6:2b:23:0c:06:57:1d:58:
         31:f9:22:29:7a:92:3c:70:29:4e:f2:2c:08:1a:c0:1e:c9:48:
         39:a4:8d:e1:95:9e:4a:e6:da:0b:1f:fb:99:5f:b0:27:5b:3e:
         af:56:c1:a6:d6:8d:7b:e7:de:09:82:3d:33:bb:89:19:da:c4:
         43:3e:cb:5e:af:e0:a3:2f:7d:35:60:81:63:ac:34:ff:3a:70:
         84:dc:8b:a5:95:cb:fa:3f:c3:7c:c5:bc:75:6e:c9:fa:e6:d8:
         98:ce:92:67
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1
ODk2NkVGRTIwHhcNMjYwNzIzMDIyNzIxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYxN2MwOS1jYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtMKJGhkX0YgxeAUdSGOWDBgmcnAsTAzpHCForHhmUfs21mkmUtqMCSCwXjbf
XXMkZIHrRp3i+196dAsl+OHY51Z17vGwWTa2ze9nSlN0lSlwaFM1o2NNPWV1awhd
5uomi6+YUml4Uih6BlT5cmn2nyfoNkLpEP0/IJMwr/fk2B2IvJiRWoKCb1CpHGPt
2JFYPgFGfybwV/UNHYYoyaNEGa1reph0J92b8Z/GfXXcq8oeERwgMaw1jPgcMk1T
+6ZmVxwnCSVbpGDI5H7C+e/T/LRctsJapo+rp5LPaSyVjiNYdqEQdxWppF6/Wbcz
+c520F3H0nMYLpzkNvOCT4kJuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBycq/Fc
qV9+5k4AmtJbJeOZcX+CMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE
MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkExQkUvNDE2OEZGNzYyRDMyMTFFRDkyQjhCNzYxQzRGOUFFMDIvNkY0NjkwOEMy
RDM0MTFFRDkyMTY1NTYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZwp/MA0GCSqGSIb3DQEBCwUAA4IBAQAPgEbAAE1AmqVJfaH9ji1S
zn2DQNf5vyr2F5nhXKKewpDgx+XpR4VUeGJ1rOqZuilYNW+0m8dJSzPgXpOoOaAN
TgjLm511Fm48qpkhFXj7pYLfWD/96MTq7tEYWfE3/dRJ/0/jBIMvKOYch9JMoi9v
fJzs6XbVLo9leBhP/rCKPtMJKf6PPufxdIZgRKYG0VAErCal8Gw1t9So1isjDAZX
HVgx+SIpepI8cClO8iwIGsAeyUg5pI3hlZ5K5toLH/uZX7AnWz6vVsGm1o17594J
gj0zu4kZ2sRDPster+CjL301YIFjrDT/OnCE3Iullcv6P8N8xbx1bsn65tiYzpJn
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:10 2026 by rpki-client