Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
File:                     195EA596AC8711EEAC4B2427C4F9AE02.roa (raw, json)
Hash identifier:          RlDlGyIWlAIAB5UyL1tM5ro41Q7sJl/nRKxG+z479zM=
Subject key identifier:   DA:C4:03:D3:86:1A:5C:14:B8:B4:3E:96:08:A5:73:B8:2B:55:CF:7C
Certificate issuer:       /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial:       031F
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:06:20 +0000
ROA not before:           Mon 07 Jul 2025 02:08:09 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38136
IP address blocks:        103.188.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91447E7, serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
        Validity
            Not Before: Jul  7 02:08:09 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a42bbc-7e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:87:a0:2e:84:22:bd:93:61:9f:e9:99:56:
                    b1:2e:40:08:31:65:2d:6b:a8:75:82:87:63:eb:02:
                    f3:89:0a:46:bf:ef:95:98:05:22:a2:4a:26:be:f8:
                    77:4a:88:82:95:e7:ce:d0:05:f1:8e:de:c3:10:49:
                    33:8f:e8:4d:07:4a:49:bb:41:a5:81:ad:c3:70:c2:
                    7a:4e:8d:c7:1c:55:71:c8:74:3c:8c:24:4b:19:52:
                    47:e4:f7:5f:c7:9c:a5:cb:73:f9:eb:fd:e7:04:b8:
                    35:cd:1b:30:f0:cb:78:8c:eb:7b:33:f2:a2:06:b1:
                    bb:03:ff:1b:10:0f:0f:02:85:8b:60:fa:83:8b:f8:
                    97:6e:48:a3:af:bc:86:76:d7:c2:74:8b:1c:b7:a2:
                    be:13:b4:c2:3e:b9:46:ed:47:14:0b:66:0b:72:9b:
                    05:e4:24:a5:8d:47:47:1c:6d:82:16:c9:74:be:ba:
                    f3:d0:a5:ea:6f:c0:e4:73:28:53:74:f8:28:88:bc:
                    b7:3b:a5:5c:3a:5b:bd:f3:68:ff:e9:64:e2:21:bb:
                    14:1a:36:06:14:c7:89:f2:eb:a3:ad:b4:46:49:bc:
                    3a:22:47:f8:11:dd:97:d4:25:9a:ef:d1:f3:60:a5:
                    bd:19:d0:23:07:1d:e1:7d:fc:a2:bb:79:55:37:7c:
                    1f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C4:03:D3:86:1A:5C:14:B8:B4:3E:96:08:A5:73:B8:2B:55:CF:7C
            X509v3 Authority Key Identifier:
                keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:63:2b:00:db:72:17:66:fb:cc:7f:ca:7d:8e:2b:70:bd:af:
         fa:92:5a:0e:45:b9:40:0e:41:a5:3c:c8:ec:6e:85:a7:30:5e:
         a4:d9:79:35:84:9c:de:bd:86:ad:9d:e0:29:ac:2b:08:35:9d:
         cb:8b:23:ba:17:49:54:23:e3:14:a3:1b:b3:19:7d:2b:9a:35:
         df:d5:7e:7b:62:1d:b8:56:9d:47:6c:3b:7a:ab:aa:86:c6:2b:
         35:7f:dd:5a:9d:53:68:3a:db:cc:36:35:d6:fc:da:8b:a4:55:
         99:e6:d1:89:7e:30:5e:fd:90:42:c6:bb:77:1c:df:54:b8:40:
         06:37:18:01:8c:96:14:69:15:49:09:87:4d:60:be:d7:9b:af:
         c8:f9:a7:b9:7d:6f:07:b3:67:ef:45:54:33:ec:46:76:98:89:
         ec:f2:41:fa:99:fc:96:52:3f:35:57:aa:73:ca:d9:39:10:a1:
         f7:02:fd:9c:09:b5:4a:69:de:59:d7:3c:7c:01:df:de:5f:68:
         ea:09:44:9c:74:c6:8f:1f:b9:22:6d:d0:d0:5e:61:26:a2:0d:
         0d:32:92:29:3f:05:03:31:83:c3:04:18:7c:72:36:89:d1:e7:
         7b:cd:46:7e:20:8b:59:66:09:00:0d:40:33:c4:2e:30:5b:8d:
         62:9c:e3:5c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ3RTcxMTAvBgNVBAUTKEU3N0I4NzE0NjgwNUUyNjA0QjQ5RUVGMkI0QTQzOENC
RDJBNTE0MjQwHhcNMjUwNzA3MDIwODA5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmJiYy03ZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApEWHoC6EIr2TYZ/pmVaxLkAIMWUta6h1godj6wLziQpGv++VmAUiokomvvh3
SoiClefO0AXxjt7DEEkzj+hNB0pJu0Glga3DcMJ6To3HHFVxyHQ8jCRLGVJH5Pdf
x5yly3P56/3nBLg1zRsw8Mt4jOt7M/KiBrG7A/8bEA8PAoWLYPqDi/iXbkijr7yG
dtfCdIsct6K+E7TCPrlG7UcUC2YLcpsF5CSljUdHHG2CFsl0vrrz0KXqb8DkcyhT
dPgoiLy3O6VcOlu982j/6WTiIbsUGjYGFMeJ8uujrbRGSbw6Ikf4Ed2X1CWa79Hz
YKW9GdAjBx3hffyiu3lVN3wfUwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNrEA9OG
GlwUuLQ+lgilc7grVc98MB8GA1UdIwQYMBaAFOd7hxRoBeJgS0nu8rSkOMvSpRQk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDdFNy9GRTQ0NjlEMjEz
MDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRtQkxTZTd5dEtRNHk5S2xG
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUzdUhGR2dGNG1CTFNlN3l0S1E0eTlLbEZDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDQ3RTcvRkU0NDY5RDIxMzAxMTFFREFEQ0U1QzdEQzRGOUFFMDIvMTk1RUE1OTZB
Qzg3MTFFRUFDNEIyNDI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ7zqMA0GCSqGSIb3DQEBCwUAA4IBAQALYysA23IXZvvMf8p9jitw
va/6kloORblADkGlPMjsboWnMF6k2Xk1hJzevYatneAprCsINZ3LiyO6F0lUI+MU
oxuzGX0rmjXf1X57Yh24Vp1HbDt6q6qGxis1f91anVNoOtvMNjXW/NqLpFWZ5tGJ
fjBe/ZBCxrt3HN9UuEAGNxgBjJYUaRVJCYdNYL7Xm6/I+ae5fW8Hs2fvRVQz7EZ2
mIns8kH6mfyWUj81V6pzytk5EKH3Av2cCbVKad5Z1zx8Ad/eX2jqCUScdMaPH7ki
bdDQXmEmog0NMpIpPwUDMYPDBBh8cjaJ0ed7zUZ+IItZZgkADUAzxC4wW41inONc
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:40 2026 by rpki-client