Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/9190CF9E2E7811EFB7206224C4F9AE02.roa
File:                     9190CF9E2E7811EFB7206224C4F9AE02.roa (raw, json)
Hash identifier:          kTVaejTylU6jn5BZ5dLXFlr8dJ5NzR00FEXTio7feKI=
Subject key identifier:   E4:66:54:2D:90:E3:81:7F:4D:F8:12:D2:1A:EA:B0:21:06:A5:72:CA
Certificate issuer:       /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E
Certificate serial:       015E
Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/9190CF9E2E7811EFB7206224C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:03:34 +0000
ROA not before:           Mon 09 Feb 2026 00:20:20 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     149517
IP address blocks:        103.182.62.0/23 maxlen: 23
                          103.182.62.0/24 maxlen: 24
                          103.182.63.0/24 maxlen: 24
                          2001:df0:75c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E
        Validity
            Not Before: Feb  9 00:20:20 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48d85-9695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:a6:60:05:d2:aa:51:43:9a:bd:fc:9d:e2:
                    96:b2:19:e7:f5:d9:83:c3:ff:e3:0f:4f:cf:a4:39:
                    9a:d4:a6:89:a9:63:54:2e:a7:e1:9d:25:d5:00:7f:
                    a5:cf:8b:c5:08:f8:96:87:cb:dc:3c:22:ba:c7:80:
                    70:5a:d3:62:47:2e:9f:ec:e1:ed:c3:65:95:80:a9:
                    51:c9:0a:75:09:2b:cb:c2:5d:8f:2b:03:9e:41:fe:
                    b9:ea:6f:5d:8f:eb:d5:ab:a6:7b:9f:a9:90:d3:3a:
                    85:84:82:e3:a2:62:c0:13:39:30:83:a7:8f:38:a5:
                    10:c3:b2:4d:bf:0f:77:de:40:c5:c6:7f:69:8b:db:
                    5f:79:cd:38:8d:b7:41:42:ba:5a:eb:f0:f3:d7:c2:
                    dd:45:65:f8:66:c3:bd:b7:1b:33:02:af:15:3e:50:
                    49:2a:56:1b:b9:75:2d:3f:d5:ed:e0:1b:19:7f:06:
                    6d:6e:ab:d2:1a:34:fb:ef:53:44:87:f8:65:4c:94:
                    26:8d:fc:14:3b:2f:d0:60:d3:2f:1b:cb:9d:7b:c0:
                    3c:14:96:f8:7e:35:44:5b:fe:22:62:07:ca:34:0d:
                    53:44:52:9a:3f:d1:a0:ca:ed:2c:4d:ba:5c:cc:c6:
                    f7:16:a4:bd:38:0b:91:eb:a7:c2:75:99:e1:04:91:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:66:54:2D:90:E3:81:7F:4D:F8:12:D2:1A:EA:B0:21:06:A5:72:CA
            X509v3 Authority Key Identifier:
                keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/9190CF9E2E7811EFB7206224C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.62.0/23
                IPv6:
                  2001:df0:75c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:9a:0a:1f:81:ae:8b:cf:2a:56:7f:16:db:fc:29:4f:ab:40:
         40:0f:77:5c:f1:a2:90:0f:8c:98:06:5f:66:af:20:8c:b3:4b:
         5b:4f:2d:1d:28:97:9f:49:27:5b:61:3e:08:52:48:d1:1f:a7:
         e2:6a:fc:e2:62:a0:7b:1f:66:8e:e2:6c:6a:c5:af:d4:42:83:
         36:d5:da:a0:81:dd:42:10:6f:db:8e:42:81:68:b9:50:aa:75:
         d5:3d:9f:77:51:dc:fa:89:66:fa:ce:9c:34:b4:a5:59:0f:e2:
         4b:ed:5e:9e:8a:26:6c:5e:86:40:16:a8:e4:89:c5:61:97:40:
         bc:36:2e:36:16:65:d5:a8:95:2f:26:b9:eb:ec:f1:ec:f0:cf:
         68:06:0b:95:6e:d5:a3:d8:b3:d0:58:7f:5a:fa:fb:32:26:ab:
         e5:dd:ee:5d:c3:c3:f4:c4:94:8f:d9:84:b2:e0:6d:43:81:eb:
         96:92:28:53:90:a5:6e:4f:e4:4d:61:ed:d5:22:64:aa:46:30:
         fb:2e:75:21:37:5e:e6:1b:52:1f:51:7e:52:d1:0d:57:6b:97:
         a6:db:ce:b7:bb:33:e8:8f:1a:5b:43:0b:91:8c:e9:df:3c:15:
         8a:54:36:f3:4e:fd:c4:53:af:f7:b4:4c:2c:cd:6e:74:40:a7:
         fe:4e:99:2b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF
RTIyM0UwMEUwHhcNMjYwMjA5MDAyMDIwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGQ4NS05Njk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGqmYAXSqlFDmr38neKWshnn9dmDw//jD0/PpDma1KaJqWNULqfhnSXVAH+l
z4vFCPiWh8vcPCK6x4BwWtNiRy6f7OHtw2WVgKlRyQp1CSvLwl2PKwOeQf656m9d
j+vVq6Z7n6mQ0zqFhILjomLAEzkwg6ePOKUQw7JNvw933kDFxn9pi9tfec04jbdB
Qrpa6/Dz18LdRWX4ZsO9txszAq8VPlBJKlYbuXUtP9Xt4BsZfwZtbqvSGjT771NE
h/hlTJQmjfwUOy/QYNMvG8ude8A8FJb4fjVEW/4iYgfKNA1TRFKaP9Ggyu0sTbpc
zMb3FqS9OAuR66fCdZnhBJFTdQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFORmVC2Q
44F/TfgS0hrqsCEGpXLKMB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1
NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0
QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTBGQzAvQ0RFMDk4NzY5NTc4MTFFQ0EzMkNDRjU1QzRGOUFFMDIvOTE5MENGOUUy
RTc4MTFFRkI3MjA2MjI0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ7Y+MA8EAgACMAkDBwAgAQ3wdcAwDQYJKoZIhvcNAQELBQADggEB
ADeaCh+BrovPKlZ/Ftv8KU+rQEAPd1zxopAPjJgGX2avIIyzS1tPLR0ol59JJ1th
PghSSNEfp+Jq/OJioHsfZo7ibGrFr9RCgzbV2qCB3UIQb9uOQoFouVCqddU9n3dR
3PqJZvrOnDS0pVkP4kvtXp6KJmxehkAWqOSJxWGXQLw2LjYWZdWolS8muevs8ezw
z2gGC5Vu1aPYs9BYf1r6+zImq+Xd7l3Dw/TElI/ZhLLgbUOB65aSKFOQpW5P5E1h
7dUiZKpGMPsudSE3XuYbUh9RflLRDVdrl6bbzre7M+iPGltDC5GM6d88FYpUNvNO
/cRTr/e0TCzNbnRAp/5OmSs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:24:20 2026 by rpki-client