Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9E3C65828CA011F0B1F47C12C4F9AE02.roa
File:                     9E3C65828CA011F0B1F47C12C4F9AE02.roa (raw, json)
Hash identifier:          LLTLXt6xDjIK6bwOGJSxN6DvTteHHSfn+cjpk7hZfWk=
Subject key identifier:   CC:32:17:D2:AF:27:58:FA:01:15:0E:D9:B2:91:48:98:06:76:8A:EE
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       0612
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9E3C65828CA011F0B1F47C12C4F9AE02.roa
Signing time:             Thu 24 Sep 2026 23:44:36 +0000
ROA not before:           Thu 24 Sep 2026 23:44:36 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     36002
IP address blocks:        103.73.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 23:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554 (0x612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Sep 24 23:44:36 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab5b5e4-13ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f0:7f:04:24:7d:fc:e3:9a:3e:22:b0:7c:9a:
                    c8:72:94:86:98:b8:21:41:62:24:a2:22:93:75:24:
                    e4:1e:9d:d0:03:35:3c:a2:7b:c8:3f:10:d0:f3:ff:
                    91:d6:ee:6c:f4:99:35:8b:6b:f5:5d:d0:b2:73:53:
                    49:47:77:c3:4c:39:8d:14:97:7c:f7:91:ff:6f:0c:
                    74:ee:ed:89:67:c3:97:0c:eb:18:8c:1b:1f:64:81:
                    98:0f:02:f9:10:08:69:51:bc:d5:56:d9:d0:2b:6b:
                    80:5e:f4:71:ad:33:fc:65:9a:c5:a2:15:84:05:c6:
                    cd:bc:f0:21:1d:9a:28:c5:01:8b:c7:2b:7f:57:9e:
                    b4:a1:d4:e4:09:e1:a9:dc:ec:f7:73:96:d4:23:1e:
                    fb:19:90:e6:bc:82:ed:a1:ca:1d:0b:ed:9a:a5:65:
                    48:f0:21:01:66:b2:67:6a:17:d5:13:ed:f2:99:2d:
                    b0:e4:47:f9:4e:92:81:07:c4:8e:62:bf:7b:56:f8:
                    53:af:8b:28:d8:5b:25:f6:8f:b9:39:22:af:44:0e:
                    48:4e:1c:e4:91:2f:d8:1a:b0:0d:ef:d8:61:c2:60:
                    d4:18:f1:c4:87:16:7c:c9:21:6b:42:22:a0:fb:07:
                    9f:37:33:07:4e:b8:2b:69:32:c4:eb:68:ee:2d:ac:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:32:17:D2:AF:27:58:FA:01:15:0E:D9:B2:91:48:98:06:76:8A:EE
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9E3C65828CA011F0B1F47C12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b8:7c:ae:9a:1a:ce:a1:85:d7:64:8b:5f:a2:30:5b:96:59:
         de:bf:fe:b7:19:68:d1:59:f1:43:b1:f5:cb:ab:a2:31:4f:81:
         4d:b4:43:5e:75:4b:0d:20:49:ce:04:ab:c9:1a:55:a0:76:e3:
         96:53:5b:91:9f:57:17:f2:c8:7b:35:8c:41:ef:6a:ab:6b:87:
         a0:af:a6:4d:0a:7e:24:ef:92:84:cd:8f:ca:2e:1c:bf:2a:d9:
         7f:36:43:3d:c2:8c:77:bc:39:4f:2c:e8:ed:91:36:83:b7:fd:
         5c:2c:ed:d4:9f:4a:51:7d:6f:52:39:bc:ed:0a:09:00:69:e0:
         34:38:81:1d:88:52:96:08:ff:e3:27:61:b9:1e:13:04:2f:e7:
         b4:1b:75:78:b2:46:e0:50:7a:86:23:c7:9f:82:b6:8d:e8:cc:
         d8:8e:4d:93:0f:7d:c6:9f:9c:3d:61:58:5e:d8:ce:30:19:b3:
         f4:fa:75:86:2d:38:04:7b:6c:76:7b:28:d6:6b:de:5b:d7:de:
         50:c7:53:11:b9:fd:2c:32:93:3a:71:10:d5:d9:ab:46:51:92:
         5d:ae:55:b1:5f:8f:77:ab:ff:34:85:56:0b:8c:cc:01:7b:94:
         14:3c:03:91:a7:6d:89:d3:d1:b5:80:46:db:1b:03:3c:49:68:
         8f:2a:db:7f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew
OTA2RkVEODIwHhcNMjYwOTI0MjM0NDM2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWI1YjVlNC0xM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0fB/BCR9/OOaPiKwfJrIcpSGmLghQWIkoiKTdSTkHp3QAzU8onvIPxDQ8/+R
1u5s9Jk1i2v1XdCyc1NJR3fDTDmNFJd895H/bwx07u2JZ8OXDOsYjBsfZIGYDwL5
EAhpUbzVVtnQK2uAXvRxrTP8ZZrFohWEBcbNvPAhHZooxQGLxyt/V560odTkCeGp
3Oz3c5bUIx77GZDmvILtocodC+2apWVI8CEBZrJnahfVE+3ymS2w5Ef5TpKBB8SO
Yr97VvhTr4so2Fsl9o+5OSKvRA5IThzkkS/YGrAN79hhwmDUGPHEhxZ8ySFrQiKg
+wefNzMHTrgraTLE62juLazi1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMwyF9Kv
J1j6ARUO2bKRSJgGdoruMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF
NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg4RDQvMkY1OEU0NzIyRTUwMTFFQ0EwNEI2QzI1QzRGOUFFMDIvOUUzQzY1ODI4
Q0EwMTFGMEIxRjQ3QzEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0ncMA0GCSqGSIb3DQEBCwUAA4IBAQBouHyumhrOoYXXZItfojBb
llnev/63GWjRWfFDsfXLq6IxT4FNtENedUsNIEnOBKvJGlWgduOWU1uRn1cX8sh7
NYxB72qra4egr6ZNCn4k75KEzY/KLhy/Ktl/NkM9wox3vDlPLOjtkTaDt/1cLO3U
n0pRfW9SObztCgkAaeA0OIEdiFKWCP/jJ2G5HhMEL+e0G3V4skbgUHqGI8efgraN
6MzYjk2TD33Gn5w9YVhe2M4wGbP0+nWGLTgEe2x2eyjWa95b195Qx1MRuf0sMpM6
cRDV2atGUZJdrlWxX493q/80hVYLjMwBe5QUPAORp22J09G1gEbbGwM8SWiPKtt/
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:28:40 2026 by rpki-client