Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/7474F998377111EE8AFEB74DC4F9AE02.roa
File:                     7474F998377111EE8AFEB74DC4F9AE02.roa (raw, json)
Hash identifier:          XLyiIx6bH4MWL4cXY1N6tcvmekDJmpJls17+hd3FRlA=
Subject key identifier:   99:41:4C:7F:F1:79:33:50:AF:A4:2A:39:88:B4:C7:1A:D2:C2:5F:0E
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0215
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/7474F998377111EE8AFEB74DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:04:50 +0000
ROA not before:           Sun 03 Aug 2025 04:10:41 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38136
IP address blocks:        103.229.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Aug  3 04:10:41 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47fc2-b7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:8f:63:43:40:dd:c2:58:1f:a1:39:30:b3:
                    c3:67:d0:aa:df:ea:f4:5e:93:07:c5:8d:a5:a6:d0:
                    ce:e5:7d:74:50:61:f1:cd:d2:fa:d9:ac:c5:0f:af:
                    18:6e:66:18:c5:09:9e:6e:5e:1a:67:9d:ae:36:05:
                    9d:87:57:65:75:f9:d8:fb:c7:ba:7a:94:89:39:23:
                    44:fd:45:91:e4:37:9e:33:6f:bb:5a:75:e2:43:f1:
                    4f:af:b7:5e:7c:f5:f4:bd:ea:17:d5:4a:11:58:f0:
                    f1:00:89:17:f4:81:1c:e1:c3:3d:7b:bf:c7:50:ab:
                    48:46:b7:16:1e:75:6e:c5:2e:ed:ca:36:fd:4c:ad:
                    e4:80:22:ca:01:01:79:94:ca:9c:d3:01:26:f8:10:
                    4d:09:55:60:02:ed:d9:c4:f6:6b:c2:f7:bf:8d:d0:
                    d3:5a:97:b5:8e:7a:77:41:e1:41:20:72:0d:13:6b:
                    31:f5:27:d4:12:7f:86:91:53:cb:1a:27:ab:d7:22:
                    da:2c:1a:4d:ff:37:77:84:81:1e:ab:bb:ff:31:0b:
                    eb:1f:e4:87:4b:12:c2:4a:09:4f:90:40:ba:5b:d7:
                    5c:b6:d9:d9:75:2c:73:53:e5:17:d1:d8:e2:67:36:
                    12:0b:65:63:18:58:01:f3:72:79:25:7b:bf:14:a8:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:41:4C:7F:F1:79:33:50:AF:A4:2A:39:88:B4:C7:1A:D2:C2:5F:0E
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/7474F998377111EE8AFEB74DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:34:be:63:39:ef:93:31:fb:4a:a2:3a:a9:ec:f2:df:43:34:
         9a:65:06:2a:7c:11:f5:c8:e2:1d:0d:61:2a:fb:43:45:fb:84:
         e3:97:c0:16:ae:80:64:92:a7:54:4b:56:0c:d7:46:4f:87:0c:
         6d:59:cf:1c:2d:7e:99:1f:b7:6c:2d:27:7d:29:75:45:10:e6:
         04:a8:d4:8f:04:32:a8:3f:eb:ae:23:6c:8b:03:a7:de:29:3b:
         48:08:02:68:13:6f:59:89:72:60:a2:db:51:d3:85:3a:35:45:
         28:cc:b0:f1:32:68:1f:c4:2d:a6:ca:02:86:bd:38:d0:2b:1f:
         4a:9d:07:e8:49:2a:84:db:c7:86:0c:43:c5:b6:ab:04:e3:d5:
         38:8d:26:f7:cd:40:c3:a6:b6:26:0a:60:29:f4:4a:eb:8e:55:
         d6:c3:9d:5f:99:69:61:c4:ec:4c:c6:db:cf:f8:ba:a1:32:57:
         3b:35:d3:c2:88:83:6e:7c:2a:e6:64:0b:9a:81:ca:0e:f9:9c:
         bf:77:53:a2:cb:63:ba:38:c6:26:bc:04:f6:a8:60:5a:ee:e5:
         41:35:6d:10:1b:19:81:00:93:c1:e1:d4:4e:05:08:30:e3:2f:
         6f:9d:8e:5f:67:6f:ea:8d:01:5f:db:54:5d:09:a4:1f:d8:a7:
         b6:53:01:a4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3
RDREQUE4OTAwHhcNMjUwODAzMDQxMDQxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2ZjMi1iN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArF+PY0NA3cJYH6E5MLPDZ9Cq3+r0XpMHxY2lptDO5X10UGHxzdL62azFD68Y
bmYYxQmebl4aZ52uNgWdh1dldfnY+8e6epSJOSNE/UWR5DeeM2+7WnXiQ/FPr7de
fPX0veoX1UoRWPDxAIkX9IEc4cM9e7/HUKtIRrcWHnVuxS7tyjb9TK3kgCLKAQF5
lMqc0wEm+BBNCVVgAu3ZxPZrwve/jdDTWpe1jnp3QeFBIHINE2sx9SfUEn+GkVPL
Gier1yLaLBpN/zd3hIEeq7v/MQvrH+SHSxLCSglPkEC6W9dcttnZdSxzU+UX0dji
ZzYSC2VjGFgB83J5JXu/FKgMawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJlBTH/x
eTNQr6QqOYi0xxrSwl8OMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3
NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTdCOTQvQ0M3NDFCQjYzNzcwMTFFRThEQzhCQjM0QzRGOUFFMDIvNzQ3NEY5OTgz
NzcxMTFFRThBRkVCNzREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ+U2MA0GCSqGSIb3DQEBCwUAA4IBAQCWNL5jOe+TMftKojqp7PLf
QzSaZQYqfBH1yOIdDWEq+0NF+4Tjl8AWroBkkqdUS1YM10ZPhwxtWc8cLX6ZH7ds
LSd9KXVFEOYEqNSPBDKoP+uuI2yLA6feKTtICAJoE29ZiXJgottR04U6NUUozLDx
MmgfxC2mygKGvTjQKx9KnQfoSSqE28eGDEPFtqsE49U4jSb3zUDDprYmCmAp9Err
jlXWw51fmWlhxOxMxtvP+LqhMlc7NdPCiINufCrmZAuagcoO+Zy/d1Oiy2O6OMYm
vAT2qGBa7uVBNW0QGxmBAJPB4dROBQgw4y9vnY5fZ2/qjQFf21RdCaQf2Ke2UwGk
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:52 2026 by rpki-client