Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/A50B2F32C68611EFB4077137C4F9AE02.roa
File:                     A50B2F32C68611EFB4077137C4F9AE02.roa (raw, json)
Hash identifier:          1fzcpx/xvt8MI/rxgZvshROVbIS3fA549ggTMJ5QBwA=
Subject key identifier:   D3:D7:67:F9:13:3B:CB:7C:28:6F:59:FA:D1:52:21:46:E2:6E:81:F5
Certificate issuer:       /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Certificate serial:       357E
Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/A50B2F32C68611EFB4077137C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:11:02 +0000
ROA not before:           Thu 10 Jul 2025 14:50:46 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151605
IP address blocks:        103.112.36.0/22 maxlen: 24
                          180.189.160.0/20 maxlen: 24
                          2405:1f00::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl
                          rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13694 (0x357e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
        Validity
            Not Before: Jul 10 14:50:46 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a48136-028c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8f:9a:19:2f:d6:e3:15:6d:01:13:52:d9:1d:
                    a9:b1:33:99:ce:a7:d5:5e:bd:db:f0:09:e6:f1:d9:
                    ba:6b:67:04:72:1d:5e:78:f4:28:29:eb:20:99:cb:
                    5a:16:0b:85:0b:dd:a3:b9:5d:50:39:7e:3a:0d:f0:
                    32:02:a9:07:79:b8:1e:4b:40:12:34:69:50:05:1f:
                    c9:d5:08:15:d3:75:72:ac:01:45:09:fa:9c:61:50:
                    ef:5a:5e:a2:c7:40:8e:a5:c4:c0:bc:03:52:84:48:
                    63:3b:bd:4e:94:24:e6:ec:72:66:47:f0:33:a3:dc:
                    47:eb:10:b2:95:2b:c6:6e:50:ea:35:d8:26:67:96:
                    70:92:ac:fb:07:9d:79:02:39:64:34:ee:fe:ee:02:
                    be:cf:2e:14:fc:5c:45:8e:ce:e4:cc:39:8e:6a:dd:
                    38:c8:b1:eb:03:e1:cc:48:c6:98:1f:d2:85:c8:dc:
                    c7:3f:ed:56:72:8f:ab:50:ad:94:df:4c:2a:3d:68:
                    6d:17:00:e2:bc:7d:c4:43:89:af:8b:a3:8e:69:6a:
                    1a:51:e0:4f:92:1a:98:3c:b2:df:61:f9:51:90:3a:
                    95:a1:d5:e9:a8:19:62:8b:9d:7d:4a:32:36:55:02:
                    fb:66:61:a1:4a:4b:ec:53:ad:c3:89:62:4e:de:66:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D7:67:F9:13:3B:CB:7C:28:6F:59:FA:D1:52:21:46:E2:6E:81:F5
            X509v3 Authority Key Identifier:
                keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/A50B2F32C68611EFB4077137C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.36.0/22
                  180.189.160.0/20
                IPv6:
                  2405:1f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:bf:98:c8:fc:9a:69:de:b0:47:d4:5e:cf:85:bb:76:8a:c4:
         2c:74:2c:86:87:39:48:96:60:ff:d7:0a:c0:b4:04:7d:86:7b:
         f5:81:7e:59:94:39:27:64:ca:07:65:c2:9e:e8:8a:74:f6:d3:
         80:f5:4a:92:8a:e1:90:3d:11:36:9d:43:35:84:bd:ab:d6:fe:
         5c:30:82:cc:73:14:85:c1:db:be:78:e5:eb:8f:8a:82:bf:4f:
         c8:49:f3:d3:ae:ff:f3:86:47:38:67:0d:1a:04:f5:3a:14:f6:
         4d:51:36:b8:87:16:21:70:d6:aa:2f:2c:a8:5a:4a:45:79:1b:
         ca:1c:7e:e0:0f:10:14:2f:15:51:27:8e:64:31:db:22:3e:69:
         ad:db:a5:23:e7:7b:cf:d4:5e:ea:cf:1d:15:76:c6:d8:73:f9:
         d2:a3:73:e3:0b:46:1d:29:b0:bb:34:b5:1e:0c:3c:ef:bd:3f:
         5a:78:d0:9c:f7:42:d2:6d:20:b9:1e:4f:82:e1:ce:11:d8:a3:
         36:46:d0:21:41:5c:4f:c2:5e:c1:c7:4a:a4:72:42:a4:bb:d7:
         73:14:29:6d:f2:35:db:3a:f8:bb:3f:09:71:c1:8c:d0:e8:55:
         97:c2:62:cd:e5:aa:e2:b0:15:a8:a4:0b:77:cd:8c:b7:82:49:
         47:dd:b4:90
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICNX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThEMjIxMTAvBgNVBAUTKEE2ODNGNjcyNEMwMkExM0YyRDM5Q0YyRjIxNTAwQkUw
MDM4MERERTMwHhcNMjUwNzEwMTQ1MDQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODEzNi0wMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjo+aGS/W4xVtARNS2R2psTOZzqfVXr3b8Anm8dm6a2cEch1eePQoKesgmcta
FguFC92juV1QOX46DfAyAqkHebgeS0ASNGlQBR/J1QgV03VyrAFFCfqcYVDvWl6i
x0COpcTAvANShEhjO71OlCTm7HJmR/Azo9xH6xCylSvGblDqNdgmZ5Zwkqz7B515
AjlkNO7+7gK+zy4U/FxFjs7kzDmOat04yLHrA+HMSMaYH9KFyNzHP+1Wco+rUK2U
30wqPWhtFwDivH3EQ4mvi6OOaWoaUeBPkhqYPLLfYflRkDqVodXpqBlii519SjI2
VQL7ZmGhSkvsU63DiWJO3maz0wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFNPXZ/kT
O8t8KG9Z+tFSIUbiboH1MB8GA1UdIwQYMBaAFKaD9nJMAqE/LTnPLyFQC+ADgN3j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEQyMi8yNTI2OTc5ODFE
OTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29UOHRPYzh2SVZBTDRBT0Ez
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvUDJja3dDb1Q4dE9jOHZJVkFMNEFPQTNlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QThEMjIvMjUyNjk3OTgxRDkyMTFFMkI2MThDQUY0MDhCMDJDRDIvQTUwQjJGMzJD
Njg2MTFFRkI0MDc3MTM3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCZ3AkAwQEtL2gMA0EAgACMAcDBQAkBR8AMA0GCSqGSIb3DQEBCwUA
A4IBAQBAv5jI/Jpp3rBH1F7Phbt2isQsdCyGhzlIlmD/1wrAtAR9hnv1gX5ZlDkn
ZMoHZcKe6Ip09tOA9UqSiuGQPRE2nUM1hL2r1v5cMILMcxSFwdu+eOXrj4qCv0/I
SfPTrv/zhkc4Zw0aBPU6FPZNUTa4hxYhcNaqLyyoWkpFeRvKHH7gDxAULxVRJ45k
MdsiPmmt26Uj53vP1F7qzx0VdsbYc/nSo3PjC0YdKbC7NLUeDDzvvT9aeNCc90LS
bSC5Hk+C4c4R2KM2RtAhQVxPwl7Bx0qkckKku9dzFClt8jXbOvi7PwlxwYzQ6FWX
wmLN5arisBWopAt3zYy3gklH3bSQ
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:06 2026 by rpki-client