Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa
File:                     CD23AE8C403011EEA773CE47C4F9AE02.roa (raw, json)
Hash identifier:          PZelJVR91rZQn+1K6DzeKrU/OaplNw2OEalh3VTRehI=
Subject key identifier:   C7:8C:43:C4:0D:85:3C:CF:72:D6:4B:2A:33:22:77:20:E5:65:26:D7
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       02E7
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa
Signing time:             Sat 29 Aug 2026 01:52:02 +0000
ROA not before:           Sat 29 Aug 2026 01:52:02 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     134424
IP address blocks:        103.167.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
                          rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743 (0x2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: Aug 29 01:52:02 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a923b42-2477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:da:30:c3:01:56:cb:22:c1:38:8a:5d:a3:
                    a6:b3:2e:19:2a:7b:71:87:19:22:58:80:3a:0d:a9:
                    0f:90:a1:5b:c4:9e:35:e3:7e:a9:59:5c:b7:91:22:
                    d3:94:48:d9:ed:1c:e6:69:d8:4f:9d:fc:d7:0f:c2:
                    93:08:bc:3a:7d:15:0d:d1:4b:38:c2:f9:6e:ca:92:
                    90:1f:dc:cb:d6:91:82:0e:5d:96:25:23:02:15:73:
                    29:8e:a6:89:91:47:80:5e:a4:28:84:6d:7f:10:ad:
                    29:15:9b:bf:3c:8d:d2:80:d7:d4:1e:51:82:09:b7:
                    61:6c:ee:fd:7b:ad:34:8a:97:9c:20:ed:f5:84:70:
                    ee:8a:88:c8:29:cb:09:fd:03:73:86:fa:24:4f:c8:
                    14:66:9b:a1:94:22:fb:a5:b3:53:b5:fb:01:dc:a3:
                    44:20:c6:8c:07:00:8b:d0:8a:a1:f5:bf:d2:5f:3d:
                    50:68:6d:11:09:e5:d4:bb:d9:09:41:33:45:3d:d1:
                    04:95:74:f4:54:9c:54:96:cb:b1:1d:e9:cd:0b:b8:
                    5c:78:e9:28:98:98:8e:15:60:ee:a3:1b:e4:c8:75:
                    81:16:30:ba:c1:7a:a9:36:a9:e5:74:cb:58:40:fc:
                    28:86:06:a2:66:7f:c7:53:db:24:8a:51:bb:dd:d4:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:43:C4:0D:85:3C:CF:72:D6:4B:2A:33:22:77:20:E5:65:26:D7
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:47:d2:da:c9:86:11:68:6e:c4:00:b2:2c:32:b1:e6:80:f5:
         b7:56:90:ec:8d:6c:08:60:ab:07:2c:8f:4e:e3:12:a8:65:98:
         92:2e:56:86:f9:03:3a:e7:80:9c:30:e0:2d:7f:3e:bf:bd:9d:
         ed:0a:57:68:52:ec:42:bd:ad:e6:39:1c:52:74:ed:87:6b:e9:
         49:c1:cc:41:94:66:8f:88:5a:49:2b:cb:89:e4:0e:ae:a0:a5:
         d0:58:0d:97:f3:09:a1:91:e0:65:6d:e8:f8:43:63:0b:dd:5a:
         ec:49:52:04:7e:1a:23:ad:66:ef:ca:8a:fb:2a:a9:15:f2:ef:
         ff:6d:57:34:b9:05:a6:05:21:c2:54:78:37:d5:38:fa:8d:33:
         e9:34:60:8a:42:d9:e1:d9:93:a9:67:82:82:be:aa:3d:57:69:
         0d:13:e7:25:7e:de:5e:fc:ab:6e:75:18:f3:42:48:de:b4:16:
         6e:e5:c9:b1:57:ed:b8:da:cf:62:43:65:0c:c9:f9:8d:e8:84:
         83:e9:06:37:0d:16:8e:f4:1f:78:2c:c6:96:e1:de:30:a5:7e:
         40:84:fe:f3:ec:da:09:09:ad:47:76:0a:61:71:2a:dd:3f:69:
         17:e9:7f:9e:00:a6:55:ba:e5:f4:e8:32:ca:2d:65:f5:fd:f0:
         d5:6a:4f:1e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw
QkIyQzUwREIwHhcNMjYwODI5MDE1MjAyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTkyM2I0Mi0yNDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuojaMMMBVssiwTiKXaOmsy4ZKntxhxkiWIA6DakPkKFbxJ41436pWVy3kSLT
lEjZ7RzmadhPnfzXD8KTCLw6fRUN0Us4wvluypKQH9zL1pGCDl2WJSMCFXMpjqaJ
kUeAXqQohG1/EK0pFZu/PI3SgNfUHlGCCbdhbO79e600ipecIO31hHDuiojIKcsJ
/QNzhvokT8gUZpuhlCL7pbNTtfsB3KNEIMaMBwCL0Iqh9b/SXz1QaG0RCeXUu9kJ
QTNFPdEElXT0VJxUlsuxHenNC7hceOkomJiOFWDuoxvkyHWBFjC6wXqpNqnldMtY
QPwohgaiZn/HU9skilG73dQNMwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMeMQ8QN
hTzPctZLKjMidyDlZSbXMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC
OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODk2RDQvNUU5RTY0MzQ3Qjk2MTFFRDhCREZFMzExQzRGOUFFMDIvQ0QyM0FFOEM0
MDMwMTFFRUE3NzNDRTQ3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6fRMA0GCSqGSIb3DQEBCwUAA4IBAQBgR9LayYYRaG7EALIsMrHm
gPW3VpDsjWwIYKsHLI9O4xKoZZiSLlaG+QM654CcMOAtfz6/vZ3tCldoUuxCva3m
ORxSdO2Ha+lJwcxBlGaPiFpJK8uJ5A6uoKXQWA2X8wmhkeBlbej4Q2ML3VrsSVIE
fhojrWbvyor7KqkV8u//bVc0uQWmBSHCVHg31Tj6jTPpNGCKQtnh2ZOpZ4KCvqo9
V2kNE+clft5e/KtudRjzQkjetBZu5cmxV+242s9iQ2UMyfmN6ISD6QY3DRaO9B94
LMaW4d4wpX5AhP7z7NoJCa1HdgphcSrdP2kX6X+eAKZVuuX06DLKLWX1/fDVak8e
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:48:48 2026 by rpki-client