Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/6AC62B967FD711EBA2ECB43BC4F9AE02.roa
File:                     6AC62B967FD711EBA2ECB43BC4F9AE02.roa (raw, json)
Hash identifier:          SQFJ7Wc/wjOeD0z1iMaM5gKsZ5f6hkCS3qqNtIgacZ4=
Subject key identifier:   AD:51:2B:37:62:2D:3B:FE:43:73:B0:15:36:53:9A:64:EA:98:07:33
Certificate issuer:       /CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
Certificate serial:       06FE
Authority key identifier: AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/6AC62B967FD711EBA2ECB43BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:44:02 +0000
ROA not before:           Thu 20 Mar 2025 22:33:39 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     141763
IP address blocks:        103.163.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl
                          rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A799E, serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
        Validity
            Not Before: Mar 20 22:33:39 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a40a62-f8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:5b:65:20:8a:6d:5a:7d:45:94:f7:30:11:
                    7f:d4:24:31:f3:c2:dc:c4:22:10:e0:e4:46:48:f2:
                    a8:e0:a8:52:4e:66:6b:ce:79:ea:7e:39:02:5b:01:
                    da:59:a1:af:57:2e:20:bf:4f:40:59:b0:28:09:7c:
                    d2:c6:79:c7:36:fd:75:4f:32:36:29:93:63:f7:a1:
                    c2:4d:0f:4c:54:22:a3:d6:4d:f0:0e:c0:e1:69:be:
                    0c:f7:f1:68:b9:ea:98:b0:96:a7:91:1f:ca:6e:5b:
                    99:93:35:f3:4b:fc:4e:35:75:1d:6f:f8:bb:f1:e5:
                    db:89:00:ad:de:5b:4b:69:c1:89:1b:93:ac:bb:bb:
                    41:3a:b1:d8:01:61:76:23:69:9e:1a:71:98:7b:11:
                    b5:82:4e:63:4f:1d:ba:60:20:ac:ce:98:05:59:01:
                    8d:bd:aa:e0:b9:e1:e6:62:ed:0f:49:2f:a9:c6:94:
                    f0:3e:74:16:87:2b:a0:41:3a:31:a7:bb:0d:2b:f9:
                    83:43:51:ab:77:f0:7a:ad:07:b7:cb:2e:26:7c:5a:
                    72:ba:f8:bf:53:1b:4b:1d:4a:91:39:ed:d3:fe:81:
                    95:81:77:2f:54:41:86:86:ab:53:f7:02:95:11:da:
                    a6:b9:0a:df:81:59:a4:c5:eb:b1:17:48:ba:49:b7:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:51:2B:37:62:2D:3B:FE:43:73:B0:15:36:53:9A:64:EA:98:07:33
            X509v3 Authority Key Identifier:
                keyid:AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/6AC62B967FD711EBA2ECB43BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:84:6b:f7:a7:27:3d:be:d3:dd:3a:72:f0:72:5b:8b:74:fa:
         a3:96:53:ff:25:ee:b5:6e:42:a9:24:a4:bc:ae:65:ce:cd:27:
         a0:b3:e7:ab:5b:42:e1:fd:b3:fc:ae:9a:3f:68:7e:e8:cf:c4:
         d5:f5:0d:5d:52:d1:e0:de:91:61:77:d2:bc:38:e4:ea:97:58:
         bb:bd:c5:a3:cd:af:bd:d8:4f:e9:09:34:82:98:da:10:cd:7d:
         31:6a:a6:6d:93:11:f7:bb:f0:85:37:e2:00:3c:6a:a1:58:b3:
         51:55:99:43:6d:a7:5f:77:18:93:b3:3a:43:28:1f:72:19:31:
         45:4a:40:d9:20:ff:aa:be:54:91:89:5e:40:57:ee:d6:2f:37:
         77:d0:9c:fa:b0:22:22:d0:c0:5e:46:1b:e4:4b:d7:a0:0b:4f:
         38:d5:1a:f8:37:98:63:8b:73:06:88:f8:bd:7b:1c:1b:ef:c2:
         1e:f7:ee:a0:8a:c1:88:64:bb:2c:75:5a:3d:d2:2b:3f:89:19:
         95:d3:a4:09:c9:94:99:ea:76:35:c8:27:99:40:72:29:e9:b6:
         cc:4d:bb:2a:3a:4d:66:8c:e2:8c:09:79:9f:c6:0a:40:3b:42:
         69:9f:bc:b3:cc:18:ab:37:bd:6c:c8:68:d5:b2:70:03:01:71:
         a1:e2:26:01
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc5OUUxMTAvBgNVBAUTKEFDNTVGQjc1QkZFMzQzRTQ5NDg3RDg1MUMwMTM5QzEz
NjRDQUU5Q0UwHhcNMjUwMzIwMjIzMzM5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGE2Mi1mOGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqmxbZSCKbVp9RZT3MBF/1CQx88LcxCIQ4ORGSPKo4KhSTmZrznnqfjkCWwHa
WaGvVy4gv09AWbAoCXzSxnnHNv11TzI2KZNj96HCTQ9MVCKj1k3wDsDhab4M9/Fo
ueqYsJankR/KbluZkzXzS/xONXUdb/i78eXbiQCt3ltLacGJG5Osu7tBOrHYAWF2
I2meGnGYexG1gk5jTx26YCCszpgFWQGNvargueHmYu0PSS+pxpTwPnQWhyugQTox
p7sNK/mDQ1Grd/B6rQe3yy4mfFpyuvi/UxtLHUqROe3T/oGVgXcvVEGGhqtT9wKV
EdqmuQrfgVmkxeuxF0i6SbdaxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK1RKzdi
LTv+Q3OwFTZTmmTqmAczMB8GA1UdIwQYMBaAFKxV+3W/40PklIfYUcATnBNkyunO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzk5RS8yNTVDRTgzNDdG
RDYxMUVCOUZEMTIzM0JDNEY5QUUwMi9yRlg3ZGJfalEtU1VoOWhSd0JPY0UyVEs2
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JGWDdkYl9qUS1TVWg5aFJ3Qk9jRTJUSzZjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTc5OUUvMjU1Q0U4MzQ3RkQ2MTFFQjlGRDEyMzNCQzRGOUFFMDIvNkFDNjJCOTY3
RkQ3MTFFQkEyRUNCNDNCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6OqMA0GCSqGSIb3DQEBCwUAA4IBAQBEhGv3pyc9vtPdOnLwcluL
dPqjllP/Je61bkKpJKS8rmXOzSegs+erW0Lh/bP8rpo/aH7oz8TV9Q1dUtHg3pFh
d9K8OOTql1i7vcWjza+92E/pCTSCmNoQzX0xaqZtkxH3u/CFN+IAPGqhWLNRVZlD
badfdxiTszpDKB9yGTFFSkDZIP+qvlSRiV5AV+7WLzd30Jz6sCIi0MBeRhvkS9eg
C0841Rr4N5hji3MGiPi9exwb78Ie9+6gisGIZLssdVo90is/iRmV06QJyZSZ6nY1
yCeZQHIp6bbMTbsqOk1mjOKMCXmfxgpAO0Jpn7yzzBirN71syGjVsnADAXGh4iYB
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:46 2026 by rpki-client