Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/61FA8E20DCD011F0B585C4234F6F56BC.roa
File:                     61FA8E20DCD011F0B585C4234F6F56BC.roa (raw, json)
Hash identifier:          ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=
Subject key identifier:   2C:59:6C:5D:E6:6E:DD:AE:05:C9:99:04:0A:0F:80:A2:12:3C:A6:01
Certificate issuer:       /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Certificate serial:       0A85
Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/61FA8E20DCD011F0B585C4234F6F56BC.roa
Signing time:             Sun 01 Mar 2026 18:21:03 +0000
ROA not before:           Fri 19 Dec 2025 11:46:40 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136030
IP address blocks:        103.235.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl
                          rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2693 (0xa85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
        Validity
            Not Before: Dec 19 11:46:40 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4838f-0a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:74:f2:52:b9:62:cb:5d:92:a1:e3:7b:31:
                    ff:b6:a2:a5:9c:65:21:2f:9b:f8:4f:d3:d5:c5:8d:
                    ea:92:13:90:9b:fc:3a:d7:f1:83:10:b1:3f:33:77:
                    da:93:72:96:3b:52:ce:58:b7:25:9f:08:19:17:1c:
                    1c:1c:52:f3:8e:4d:ca:34:68:73:db:98:f9:33:db:
                    25:ae:54:a7:ac:56:95:38:ed:5a:ad:47:29:5f:a2:
                    7a:60:2a:e7:4e:66:f4:22:5e:12:f5:eb:5c:76:0d:
                    c7:6a:c2:e6:89:17:85:02:96:de:48:1d:ed:86:ff:
                    a6:be:62:70:6a:86:d3:26:e1:00:75:a5:c3:4b:72:
                    0f:f5:f6:34:c7:df:9d:0c:d2:ef:e0:a7:68:d3:22:
                    b3:dc:4c:84:74:92:ae:8b:38:0d:d8:13:f0:c5:db:
                    f5:87:02:6e:fb:43:94:41:2f:fb:15:c0:5d:52:a5:
                    f1:61:6c:77:00:bb:79:f2:c4:8c:13:76:33:a7:2e:
                    86:cd:16:d0:9d:1f:cd:f0:10:5e:f9:b1:56:1b:25:
                    9f:e8:33:2a:2c:c4:7a:fd:1d:25:99:3f:6e:8f:9b:
                    1d:d1:ae:22:d4:eb:53:c5:66:ba:df:12:d9:74:85:
                    93:bc:27:4a:6f:3c:15:db:21:0d:5f:6f:91:69:54:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:59:6C:5D:E6:6E:DD:AE:05:C9:99:04:0A:0F:80:A2:12:3C:A6:01
            X509v3 Authority Key Identifier:
                keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/61FA8E20DCD011F0B585C4234F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:d5:a9:e4:77:5b:23:7d:90:68:2a:83:8b:ac:8b:92:8c:
         6d:b9:76:da:89:fe:fc:c3:14:eb:b8:6e:5b:e5:c5:de:d6:eb:
         ac:74:81:15:0f:2e:a6:c2:0c:0b:0b:8a:9f:86:30:7a:f6:19:
         64:3d:45:84:ae:da:00:1b:38:47:23:ff:e7:bc:f7:5e:e5:d3:
         7c:b5:a6:8e:f0:bd:a4:7b:e3:f0:d4:43:db:81:1a:a7:30:d5:
         52:9d:ad:3e:7e:1f:02:4c:69:ed:46:88:32:62:81:0a:1b:9b:
         3b:82:f8:1f:7d:e7:45:ee:93:0d:86:8d:e2:75:1e:2e:6b:bc:
         27:9f:01:2f:97:76:fa:8c:7b:bd:0d:f1:90:99:1e:2e:49:a3:
         9b:5b:1d:1a:1d:46:5c:1f:46:18:6d:04:6b:49:5a:77:42:02:
         46:2b:a2:f2:80:58:e3:56:84:2b:f0:3f:52:81:03:b8:4b:14:
         58:5a:42:63:91:09:22:9b:88:b7:47:47:20:4d:83:33:7e:04:
         a6:e4:58:33:e7:2e:08:80:e4:59:34:03:3b:14:f1:95:59:e4:
         27:88:d5:b8:30:e7:c0:98:de:f4:92:23:37:33:a4:83:4d:71:
         17:6e:8d:62:18:80:00:b1:fc:22:35:94:7c:4a:a6:10:61:b4:
         ce:d8:4c:c3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy
MzYwRkQwRjUwHhcNMjUxMjE5MTE0NjQwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODM4Zi0wYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAks508lK5YstdkqHjezH/tqKlnGUhL5v4T9PVxY3qkhOQm/w61/GDELE/M3fa
k3KWO1LOWLclnwgZFxwcHFLzjk3KNGhz25j5M9slrlSnrFaVOO1arUcpX6J6YCrn
Tmb0Il4S9etcdg3HasLmiReFApbeSB3thv+mvmJwaobTJuEAdaXDS3IP9fY0x9+d
DNLv4Kdo0yKz3EyEdJKuizgN2BPwxdv1hwJu+0OUQS/7FcBdUqXxYWx3ALt58sSM
E3Yzpy6GzRbQnR/N8BBe+bFWGyWf6DMqLMR6/R0lmT9uj5sd0a4i1OtTxWa63xLZ
dIWTvCdKbzwV2yENX2+RaVRUkwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCxZbF3m
bt2uBcmZBAoPgKISPKYBMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE
NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw
UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTY5NDMvQjcxODExNjg4RDUxMTFFQUI4QjI2Mzg0QzRGOUFFMDIvNjFGQThFMjBE
Q0QwMTFGMEI1ODVDNDIzNEY2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ+tOMA0GCSqGSIb3DQEBCwUAA4IBAQB0xtWp5HdbI32QaCqDi6yL
koxtuXbaif78wxTruG5b5cXe1uusdIEVDy6mwgwLC4qfhjB69hlkPUWErtoAGzhH
I//nvPde5dN8taaO8L2ke+Pw1EPbgRqnMNVSna0+fh8CTGntRogyYoEKG5s7gvgf
fedF7pMNho3idR4ua7wnnwEvl3b6jHu9DfGQmR4uSaObWx0aHUZcH0YYbQRrSVp3
QgJGK6LygFjjVoQr8D9SgQO4SxRYWkJjkQkim4i3R0cgTYMzfgSm5Fgz5y4IgORZ
NAM7FPGVWeQniNW4MOfAmN70kiM3M6SDTXEXbo1iGIAAsfwiNZR8SqYQYbTO2EzD
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:26 2026 by rpki-client