Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa
File:                     E390F83EC1CD11EB86A00568C4F9AE02.roa (raw, json)
Hash identifier:          iQ+PgNNqf8UmV9fcTIqKb5ivLyfy8TSAmHAuDpQqAYo=
Subject key identifier:   66:13:85:14:86:AD:CF:53:80:E3:03:79:40:C6:6A:DE:AF:B8:A0:A9
Certificate issuer:       /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7
Certificate serial:       0689
Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa
Signing time:             Tue 26 May 2026 23:27:38 +0000
ROA not before:           Tue 26 May 2026 23:27:38 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142298
IP address blocks:        103.167.190.0/23 maxlen: 23
                          103.167.190.0/24 maxlen: 24
                          103.167.191.0/24 maxlen: 24
                          2001:df6:bd80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl
                          rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911959A, serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7
        Validity
            Not Before: May 26 23:27:38 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a162c6a-af81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:b4:55:8e:21:6a:cf:71:44:3c:60:43:75:
                    75:83:b8:04:40:11:81:cf:b9:1f:fc:98:d8:ec:bb:
                    2d:59:76:31:ab:37:ae:82:86:52:a2:67:e7:9c:f1:
                    90:a8:e9:9c:dd:f2:b0:47:5c:9a:9d:68:16:d5:5f:
                    b0:58:90:4a:64:ba:71:c7:f9:9e:03:1f:d5:38:82:
                    a5:df:20:c6:f9:51:ff:74:f4:9f:ce:a3:0b:da:f5:
                    6f:f9:2e:f4:37:b2:e1:e2:0a:1d:fd:dc:6b:ea:ba:
                    e4:fa:ea:ea:f9:ac:e5:55:e7:dc:84:93:13:7b:9e:
                    29:8e:03:fa:ea:d0:b4:49:f1:04:30:e3:a7:f3:94:
                    58:8b:fd:05:d6:86:fd:be:52:ca:47:ab:37:5e:ca:
                    f7:5f:6a:83:2e:16:0f:ab:e0:42:fd:06:f7:d4:ac:
                    d6:27:2e:55:50:3b:fe:f3:fb:d2:cc:7a:73:1d:a7:
                    d8:b9:cb:34:66:ab:6e:dc:f6:57:db:2a:7b:16:a0:
                    41:75:2e:1c:f3:55:fa:5b:6d:01:f2:da:7f:06:9d:
                    22:79:c8:93:53:73:77:d5:65:0e:4e:01:6f:49:f9:
                    31:e5:6e:2b:79:a6:6a:16:d3:41:79:db:30:92:be:
                    3f:09:fa:7d:94:9f:d5:c7:95:da:29:f2:da:38:c5:
                    99:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:13:85:14:86:AD:CF:53:80:E3:03:79:40:C6:6A:DE:AF:B8:A0:A9
            X509v3 Authority Key Identifier:
                keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.190.0/23
                IPv6:
                  2001:df6:bd80::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:61:53:2d:47:99:cb:54:7f:b8:f2:fb:b2:d2:50:ec:7e:3e:
         9b:a5:2c:9f:3c:2a:7e:06:01:2f:1f:f8:f4:82:01:16:89:d5:
         39:7f:0f:bf:95:8e:81:70:2d:cc:7b:28:af:1b:3e:58:9b:3d:
         db:e8:cf:89:3a:d2:15:86:b8:da:96:a9:71:7f:8d:82:77:7e:
         d5:bc:52:13:86:47:ea:ae:7a:63:bd:f7:97:98:70:24:83:88:
         77:00:cb:bb:64:86:79:51:21:26:c0:3a:e5:df:4c:36:69:83:
         e9:80:af:5c:df:b4:dc:b1:ea:6a:09:60:98:17:91:30:a1:3c:
         45:d3:e5:91:3a:5d:d1:9b:2c:2b:05:d5:ac:2b:3b:d8:63:13:
         9c:c6:ba:02:2a:c2:af:18:e9:53:72:1f:83:56:2d:5a:af:6e:
         4d:96:93:02:a3:db:1a:37:90:54:f1:9f:46:13:83:bb:9e:bb:
         b1:1e:da:c7:ff:13:3a:60:49:8e:71:40:10:cf:45:f8:04:3a:
         73:6c:0d:b5:ad:8e:68:67:0e:8c:b5:07:94:6c:86:43:50:24:
         a5:04:38:c4:d5:c9:cd:04:86:fd:a7:d4:76:50:5c:37:4f:92:
         87:a6:54:3f:4f:aa:8c:ad:72:3d:56:a4:73:5b:90:32:b9:0c:
         26:e2:9d:60
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw
RDA3MEQ3QTcwHhcNMjYwNTI2MjMyNzM4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE2MmM2YS1hZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAogy0VY4has9xRDxgQ3V1g7gEQBGBz7kf/JjY7LstWXYxqzeugoZSomfnnPGQ
qOmc3fKwR1yanWgW1V+wWJBKZLpxx/meAx/VOIKl3yDG+VH/dPSfzqML2vVv+S70
N7Lh4god/dxr6rrk+urq+azlVefchJMTe54pjgP66tC0SfEEMOOn85RYi/0F1ob9
vlLKR6s3Xsr3X2qDLhYPq+BC/Qb31KzWJy5VUDv+8/vSzHpzHafYucs0Zqtu3PZX
2yp7FqBBdS4c81X6W20B8tp/Bp0ieciTU3N31WUOTgFvSfkx5W4reaZqFtNBedsw
kr4/Cfp9lJ/Vx5XaKfLaOMWZ/QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGYThRSG
rc9TgOMDeUDGat6vuKCpMB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx
Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTk1OUEvMkY4RENCMDJDMUNCMTFFQjkxNzVDRTY2QzRGOUFFMDIvRTM5MEY4M0VD
MUNEMTFFQjg2QTAwNTY4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6e+MA8EAgACMAkDBwAgAQ32vYAwDQYJKoZIhvcNAQELBQADggEB
AMNhUy1HmctUf7jy+7LSUOx+PpulLJ88Kn4GAS8f+PSCARaJ1Tl/D7+VjoFwLcx7
KK8bPlibPdvoz4k60hWGuNqWqXF/jYJ3ftW8UhOGR+quemO995eYcCSDiHcAy7tk
hnlRISbAOuXfTDZpg+mAr1zftNyx6moJYJgXkTChPEXT5ZE6XdGbLCsF1awrO9hj
E5zGugIqwq8Y6VNyH4NWLVqvbk2WkwKj2xo3kFTxn0YTg7ueu7Ee2sf/EzpgSY5x
QBDPRfgEOnNsDbWtjmhnDoy1B5RshkNQJKUEOMTVyc0Ehv2n1HZQXDdPkoemVD9P
qoytcj1WpHNbkDK5DCbinWA=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:11:38 2026 by rpki-client