Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/1C9DA52E9BD011F0AE2D7868C4F9AE02.roa
File:                     1C9DA52E9BD011F0AE2D7868C4F9AE02.roa (raw, json)
Hash identifier:          FJD5HahYGYldSP/+Nxp4VyhD4H6bs1q2QrljjpyN2Z4=
Subject key identifier:   E5:79:CE:78:86:82:14:D8:D9:26:C2:36:1A:DF:A6:35:F2:03:46:F6
Certificate issuer:       /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
Certificate serial:       0755
Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/1C9DA52E9BD011F0AE2D7868C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 22:28:48 +0000
ROA not before:           Thu 30 Apr 2026 22:28:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142006
IP address blocks:        103.164.86.0/24 maxlen: 24
                          103.164.87.0/24 maxlen: 24
                          2001:df6:4280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl
                          rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
        Validity
            Not Before: Apr 30 22:28:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3d7a0-8014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2c:36:b8:74:05:cc:2d:9e:50:7c:e7:c6:19:
                    30:9b:44:b5:d5:a5:6c:f2:8e:4d:00:20:34:36:ed:
                    90:e5:8a:fb:28:01:fd:94:47:50:4f:d4:2b:c3:45:
                    65:9c:59:59:98:58:76:18:2e:4a:df:d4:4c:02:59:
                    47:c0:27:99:cd:c8:2f:d3:e1:a5:54:15:05:3e:f8:
                    6b:d2:bc:46:87:8e:b2:9a:9e:c4:00:93:af:33:00:
                    3e:9b:54:a3:f2:c6:9a:5a:d3:de:9b:03:5a:2a:6b:
                    1c:95:c5:db:7d:16:f8:e1:7d:e7:60:7d:3e:82:34:
                    ce:d4:64:a5:3e:a3:21:b4:2e:10:0e:a7:d3:d5:39:
                    c0:4c:b7:5c:4d:21:70:24:a6:75:99:2d:b8:d2:6e:
                    da:4a:32:a2:6e:c1:66:4f:16:e9:af:7f:9f:ab:de:
                    45:ea:14:7e:5b:7c:cc:3e:95:f9:4a:21:b7:28:ec:
                    e3:4a:28:2f:ff:1d:52:f9:5e:02:c6:0c:0d:3a:c1:
                    ad:ee:c4:a6:05:24:0d:42:e3:ac:80:96:4b:ed:31:
                    3c:ff:31:06:86:d5:e4:72:c6:4b:bc:89:2d:f3:bb:
                    cb:21:e3:a2:6c:8b:d8:45:ed:e0:31:a0:62:f7:18:
                    35:65:29:81:08:6d:98:af:5c:48:8f:dc:12:c0:f6:
                    62:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:79:CE:78:86:82:14:D8:D9:26:C2:36:1A:DF:A6:35:F2:03:46:F6
            X509v3 Authority Key Identifier:
                keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/1C9DA52E9BD011F0AE2D7868C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.86.0/23
                IPv6:
                  2001:df6:4280::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:ef:a3:94:c8:0c:3c:d6:4f:4a:b0:cd:07:96:84:ed:3f:
         e4:39:b2:d7:c5:5b:99:59:47:84:da:87:d6:b5:23:e8:f7:6c:
         23:d5:34:ad:e9:7d:2e:77:0c:5c:33:2e:fe:27:ce:c7:f9:d9:
         78:cf:2c:0b:d2:c3:04:bb:31:30:c8:60:22:39:f4:0c:d6:6d:
         fb:03:dc:f9:ed:2c:36:b5:fb:1c:06:4b:ae:31:ca:3b:5d:ec:
         6d:af:06:04:a0:71:03:08:31:97:f8:92:98:c1:84:07:93:e0:
         ce:bf:df:f0:a4:7d:b3:9c:3b:3b:ee:f1:1e:75:dc:5d:49:26:
         c0:66:e9:d1:46:8a:7b:7e:5a:bb:60:8c:39:91:fa:0e:e0:24:
         20:9c:15:f3:2f:c1:0c:b8:32:de:f8:2e:cf:8a:8a:9d:5f:df:
         8a:a5:35:fd:8f:f4:64:b0:5c:75:29:cf:48:88:80:84:57:31:
         f7:f5:47:7d:9e:e6:64:e7:0f:ac:71:89:fa:0f:8c:88:49:3f:
         db:44:c4:5b:f4:e4:86:73:19:b9:93:b8:e6:23:a6:86:84:f3:
         47:a7:f5:61:64:05:29:59:8f:e5:f1:22:92:59:8f:13:fb:d5:
         e8:ad:4c:73:3e:16:ff:3c:42:e0:a1:0e:eb:1e:27:6f:7a:b4:
         a7:b1:e2:87
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICB1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy
QTI2RTMxRTEwHhcNMjYwNDMwMjIyODQ4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYzZDdhMC04MDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Cw2uHQFzC2eUHznxhkwm0S11aVs8o5NACA0Nu2Q5Yr7KAH9lEdQT9Qrw0Vl
nFlZmFh2GC5K39RMAllHwCeZzcgv0+GlVBUFPvhr0rxGh46ymp7EAJOvMwA+m1Sj
8saaWtPemwNaKmsclcXbfRb44X3nYH0+gjTO1GSlPqMhtC4QDqfT1TnATLdcTSFw
JKZ1mS240m7aSjKibsFmTxbpr3+fq95F6hR+W3zMPpX5SiG3KOzjSigv/x1S+V4C
xgwNOsGt7sSmBSQNQuOsgJZL7TE8/zEGhtXkcsZLvIkt87vLIeOibIvYRe3gMaBi
9xg1ZSmBCG2Yr1xIj9wSwPZitwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOV5zniG
ghTY2SbCNhrfpjXyA0b2MB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2
Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN
ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjExRDQvQTlGNDk2NTI4NkNEMTFFQkE0QUZGNjA5QzRGOUFFMDIvMUM5REE1MkU5
QkQwMTFGMEFFMkQ3ODY4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6RWMA8EAgACMAkDBwAgAQ32QoAwDQYJKoZIhvcNAQELBQADggEB
AFEu76OUyAw81k9KsM0HloTtP+Q5stfFW5lZR4Tah9a1I+j3bCPVNK3pfS53DFwz
Lv4nzsf52XjPLAvSwwS7MTDIYCI59AzWbfsD3PntLDa1+xwGS64xyjtd7G2vBgSg
cQMIMZf4kpjBhAeT4M6/3/CkfbOcOzvu8R513F1JJsBm6dFGint+WrtgjDmR+g7g
JCCcFfMvwQy4Mt74Ls+Kip1f34qlNf2P9GSwXHUpz0iIgIRXMff1R32e5mTnD6xx
ifoPjIhJP9tExFv05IZzGbmTuOYjpoaE80en9WFkBSlZj+XxIpJZjxP71eitTHM+
Fv88QuChDuseJ296tKex4oc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:29:21 2026 by rpki-client