Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6019FE0A351F11F0A19A4165C4F9AE02.roa
File:                     6019FE0A351F11F0A19A4165C4F9AE02.roa (raw, json)
Hash identifier:          I1aDrt2i4386vR1Re0MveOfRAMS4OEWHtDsOjq66YOA=
Subject key identifier:   31:74:36:BC:CB:98:D5:EF:1B:85:4D:49:2C:93:BE:17:78:A9:83:57
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6C33
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6019FE0A351F11F0A19A4165C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 08:55:44 +0000
ROA not before:           Thu 02 Apr 2026 08:55:44 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150860
IP address blocks:        103.237.86.0/23 maxlen: 23
                          2401:1760::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27699 (0x6c33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Apr  2 08:55:44 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69ce2f10-ce30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:bb:b2:5d:4d:a9:9f:27:4e:f0:a1:aa:41:
                    6d:f1:9a:84:94:0d:ea:4f:3f:35:b7:66:e8:e4:92:
                    d3:26:b9:8e:fb:7c:dd:e7:62:05:1f:b8:22:97:5a:
                    c2:b7:fa:e0:d8:54:2c:fb:d5:bd:e0:86:d8:b4:fd:
                    88:9e:ad:60:fc:5e:d1:c6:59:77:d5:49:47:a5:77:
                    a6:80:16:71:4b:7d:87:6d:24:f8:d5:47:92:c5:63:
                    bd:91:82:0f:c2:1f:4c:8b:82:ae:00:ce:7f:f6:34:
                    12:b2:8c:50:1b:4f:e0:4d:d7:ba:67:bd:bf:2b:52:
                    57:2a:ea:64:81:64:b9:34:e0:47:71:ff:bb:ba:ae:
                    8c:a9:4a:cc:82:0b:76:a2:81:f7:90:dd:62:0b:4e:
                    9c:95:61:bc:cb:63:3a:19:5d:ec:1a:f0:87:04:b8:
                    ee:d5:cd:2d:b1:ea:c7:bd:94:d6:9e:70:55:b5:14:
                    75:66:36:ef:0a:42:bf:09:85:fe:83:67:5c:a2:35:
                    94:58:9c:95:ae:28:26:e8:17:e2:2e:59:f2:30:e7:
                    36:f0:1e:b3:52:cd:c6:dc:d0:aa:1d:56:c2:f5:1f:
                    68:ae:57:f7:88:db:c1:7d:a8:ec:19:7b:82:70:ff:
                    77:13:f4:2c:cc:c3:bc:2d:a9:a3:0e:a8:07:a2:87:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:74:36:BC:CB:98:D5:EF:1B:85:4D:49:2C:93:BE:17:78:A9:83:57
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6019FE0A351F11F0A19A4165C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.86.0/23
                IPv6:
                  2401:1760::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:3d:ed:87:dc:0e:d0:74:e6:d5:2f:74:f8:f2:56:de:f3:de:
         9a:6e:16:d7:ad:f1:d9:f1:8f:d4:56:9e:21:a1:56:2f:dc:1e:
         34:7b:eb:be:e4:05:f9:a8:d8:c5:e8:41:70:76:58:0a:67:a4:
         2d:63:74:3c:e3:23:61:29:4f:97:3c:8b:17:29:b3:1a:de:9f:
         df:e4:8a:ba:84:32:8c:8d:30:15:5c:21:c9:17:cf:6d:7b:2e:
         21:2c:3f:fc:ad:90:fc:e9:aa:16:f7:d0:54:79:fa:b3:62:10:
         c7:63:71:fd:cd:c7:72:16:64:fb:e6:10:fd:e4:f7:50:c1:22:
         17:d1:23:ad:55:a0:38:b6:64:ff:79:2b:75:d7:3e:44:01:d5:
         94:db:1a:d3:9e:73:96:ef:6c:98:e6:b7:85:34:51:ef:53:c3:
         46:75:bf:ac:45:19:82:8b:7a:60:18:8c:33:7c:b8:20:15:62:
         83:02:8c:08:dd:02:77:c2:55:9c:0b:57:e2:d5:fd:bd:db:7f:
         03:6f:83:a9:a3:2f:3c:61:52:74:97:42:59:57:a0:7f:58:b1:
         4c:df:e7:04:7e:cd:f5:5c:a4:90:b7:97:88:f4:11:dd:16:c5:
         42:ff:be:ff:06:44:25:2b:5e:d2:73:bc:81:71:dc:cb:4d:da:
         f5:a0:60:8d
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICbDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYwNDAyMDg1NTQ0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNlMmYxMC1jZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzdG7sl1NqZ8nTvChqkFt8ZqElA3qTz81t2bo5JLTJrmO+3zd52IFH7gil1rC
t/rg2FQs+9W94IbYtP2Inq1g/F7Rxll31UlHpXemgBZxS32HbST41UeSxWO9kYIP
wh9Mi4KuAM5/9jQSsoxQG0/gTde6Z72/K1JXKupkgWS5NOBHcf+7uq6MqUrMggt2
ooH3kN1iC06clWG8y2M6GV3sGvCHBLju1c0tserHvZTWnnBVtRR1ZjbvCkK/CYX+
g2dcojWUWJyVrigm6BfiLlnyMOc28B6zUs3G3NCqHVbC9R9orlf3iNvBfajsGXuC
cP93E/QszMO8LamjDqgHoofSowIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDF0NrzL
mNXvG4VNSSyTvhd4qYNXMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNjAxOUZFMEEz
NTFGMTFGMEExOUE0MTY1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ+1WMA8EAgACMAkDBwAkARdgAAAwDQYJKoZIhvcNAQELBQADggEB
AGY97YfcDtB05tUvdPjyVt7z3ppuFtet8dnxj9RWniGhVi/cHjR7677kBfmo2MXo
QXB2WApnpC1jdDzjI2EpT5c8ixcpsxren9/kirqEMoyNMBVcIckXz217LiEsP/yt
kPzpqhb30FR5+rNiEMdjcf3Nx3IWZPvmEP3k91DBIhfRI61VoDi2ZP95K3XXPkQB
1ZTbGtOec5bvbJjmt4U0Ue9Tw0Z1v6xFGYKLemAYjDN8uCAVYoMCjAjdAnfCVZwL
V+LV/b3bfwNvg6mjLzxhUnSXQllXoH9YsUzf5wR+zfVcpJC3l4j0Ed0WxUL/vv8G
RCUrXtJzvIFx3MtN2vWgYI0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:32 2026 by rpki-client