Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/6C3D5766692F11EF9E22F029C4F9AE02.roa
File:                     6C3D5766692F11EF9E22F029C4F9AE02.roa (raw, json)
Hash identifier:          DfEb8YlsjclJ0EYnxu7RhPWpVEUZS3PESB0dUVbX1H4=
Subject key identifier:   15:93:4C:48:0E:A6:E2:A4:40:A5:EE:79:50:4B:42:8A:DB:61:25:A7
Certificate issuer:       /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040
Certificate serial:       0CDE
Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/6C3D5766692F11EF9E22F029C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:43:55 +0000
ROA not before:           Mon 10 Mar 2025 19:08:45 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137278
IP address blocks:        103.87.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl
                          rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3294 (0xcde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040
        Validity
            Not Before: Mar 10 19:08:45 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a46ccb-1c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:35:ff:c3:7b:89:a6:87:f0:51:66:40:5f:5a:
                    95:03:80:80:28:71:1a:72:21:0c:f2:f9:38:bd:15:
                    7e:8a:28:66:25:e0:87:dc:c0:fb:83:22:56:11:70:
                    dd:1d:00:1e:e2:93:08:83:42:16:44:78:3d:d3:d5:
                    37:87:db:40:d8:83:3d:0e:27:04:e1:86:e6:bd:a7:
                    e5:8a:ad:ab:59:34:4d:71:3d:5f:81:60:b1:92:43:
                    30:48:a8:30:b2:68:6f:77:a8:de:ef:69:08:4d:b5:
                    48:02:f9:77:49:3e:f7:f4:82:e3:06:4b:b7:fa:07:
                    50:5c:d4:20:1c:ec:c9:3e:f4:5c:d7:49:4f:e7:c5:
                    1c:67:c4:36:00:32:31:ab:c2:8f:21:4c:a8:71:60:
                    90:50:60:4b:07:d6:13:85:4c:5d:cd:9d:c3:0c:66:
                    96:0b:24:79:81:57:f3:24:4c:2f:06:46:ea:16:05:
                    ec:7f:ad:3f:67:bf:1f:8a:f1:05:ea:8e:77:01:2d:
                    21:6c:22:6a:38:9b:f7:eb:ff:fe:88:51:00:38:2e:
                    8f:bf:59:d6:02:f0:42:cb:06:09:0a:64:58:0f:07:
                    49:33:a0:c9:be:32:90:42:e9:5d:0b:ca:8a:2f:d0:
                    33:ec:38:fe:a2:d9:4e:6d:4e:76:07:89:81:63:db:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:93:4C:48:0E:A6:E2:A4:40:A5:EE:79:50:4B:42:8A:DB:61:25:A7
            X509v3 Authority Key Identifier:
                keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/6C3D5766692F11EF9E22F029C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:3d:5e:e0:d5:dc:dd:e9:26:f5:b2:50:5a:3d:e9:f4:46:01:
         0f:cb:c0:a8:bf:93:be:27:25:68:66:96:eb:f6:2b:a5:8c:7c:
         c7:6a:e3:88:0a:c1:90:df:7f:54:90:f0:36:d0:6d:3c:44:97:
         40:02:0e:9b:aa:ec:d6:8c:eb:b5:12:41:db:62:a9:1a:fd:0c:
         e4:13:24:46:7d:97:08:53:9d:da:51:35:cd:f5:18:b0:f2:33:
         d2:6c:71:9b:bc:51:cf:d6:7e:88:85:51:ff:75:30:6e:1d:56:
         21:9e:1a:f5:a1:fa:c0:4e:20:57:60:ab:a0:5f:17:06:ed:66:
         97:02:85:8d:13:04:cf:55:41:57:4f:b3:9f:20:cc:f0:66:38:
         6f:2c:b8:5a:70:9f:f4:e9:cb:13:95:97:06:d0:6a:03:58:9b:
         5f:13:8e:f6:84:03:a1:5b:bc:d7:79:d3:c3:0f:26:5e:2f:e1:
         38:59:99:e2:d9:4d:89:eb:78:9b:60:50:8f:5a:99:62:6d:0d:
         b0:e5:60:67:50:31:16:69:07:84:13:74:1d:06:3a:dd:bb:69:
         ca:dd:19:a1:b3:70:b3:af:1e:fb:e6:91:4b:ef:b5:84:66:fb:
         1b:8a:2f:67:00:ff:a0:19:f8:5e:fa:00:24:43:17:f5:36:04:
         46:36:95:bc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF
QUYxMEQwNDAwHhcNMjUwMzEwMTkwODQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmNjYi0xYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2TX/w3uJpofwUWZAX1qVA4CAKHEaciEM8vk4vRV+iihmJeCH3MD7gyJWEXDd
HQAe4pMIg0IWRHg909U3h9tA2IM9DicE4Ybmvafliq2rWTRNcT1fgWCxkkMwSKgw
smhvd6je72kITbVIAvl3ST739ILjBku3+gdQXNQgHOzJPvRc10lP58UcZ8Q2ADIx
q8KPIUyocWCQUGBLB9YThUxdzZ3DDGaWCyR5gVfzJEwvBkbqFgXsf60/Z78fivEF
6o53AS0hbCJqOJv36//+iFEAOC6Pv1nWAvBCywYJCmRYDwdJM6DJvjKQQuldC8qK
L9Az7Dj+otlObU52B4mBY9vu4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBWTTEgO
puKkQKXueVBLQorbYSWnMB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4
RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODM0QUQvMERFNEFEMDQwOEZFMTFFQTk4MzNDNTc4QzRGOUFFMDIvNkMzRDU3NjY2
OTJGMTFFRjlFMjJGMDI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1eIMA0GCSqGSIb3DQEBCwUAA4IBAQB8PV7g1dzd6Sb1slBaPen0
RgEPy8Cov5O+JyVoZpbr9iuljHzHauOICsGQ339UkPA20G08RJdAAg6bquzWjOu1
EkHbYqka/QzkEyRGfZcIU53aUTXN9Riw8jPSbHGbvFHP1n6IhVH/dTBuHVYhnhr1
ofrATiBXYKugXxcG7WaXAoWNEwTPVUFXT7OfIMzwZjhvLLhacJ/06csTlZcG0GoD
WJtfE472hAOhW7zXedPDDyZeL+E4WZni2U2J63ibYFCPWplibQ2w5WBnUDEWaQeE
E3QdBjrdu2nK3Rmhs3Czrx775pFL77WEZvsbii9nAP+gGfhe+gAkQxf1NgRGNpW8
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:39 2026 by rpki-client