Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/CBD093368EF411F1A6E45BB36711F970.roa
File:                     CBD093368EF411F1A6E45BB36711F970.roa (raw, json)
Hash identifier:          6GB9HCBaIVd5msJsBxx9tYImZtutKcl7gQwFTn315L0=
Subject key identifier:   DE:33:A6:8D:03:84:F1:44:12:A3:8B:D8:5E:4F:98:FF:82:10:72:9B
Certificate issuer:       /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial:       076F
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/CBD093368EF411F1A6E45BB36711F970.roa
Signing time:             Thu 08 Oct 2026 22:43:10 +0000
ROA not before:           Thu 08 Oct 2026 22:43:10 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     834
IP address blocks:        103.106.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
                          rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 22:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903 (0x76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
        Validity
            Not Before: Oct  8 22:43:10 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ac81c7e-e84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:6b:40:d5:3f:9e:46:97:5d:d4:eb:e7:c5:
                    d4:97:dd:ba:c6:16:61:30:00:36:74:ca:11:15:75:
                    68:87:90:bf:8f:76:64:29:01:d9:57:8a:f3:25:da:
                    54:9b:31:8c:bd:ed:0e:34:11:f1:95:72:56:d6:2a:
                    57:46:f0:f4:0b:98:a0:bf:7a:be:38:cd:54:12:94:
                    87:3e:bc:f8:b8:d7:bd:1d:e8:a9:8a:6c:ec:93:6d:
                    eb:92:04:3f:69:24:19:64:5d:49:07:61:fc:83:46:
                    46:10:4b:4f:79:e3:a0:6a:ed:54:0f:f9:45:dd:45:
                    32:82:05:d7:c4:42:58:45:02:32:51:2d:2c:85:ed:
                    a8:53:04:94:ab:fd:c7:50:8f:e9:85:c9:a5:46:c9:
                    cb:80:e5:a9:d3:18:1a:4a:e8:e0:fe:c3:37:e4:40:
                    38:b0:5e:42:bf:23:79:f9:3c:1b:53:94:3b:d7:49:
                    e1:fc:a2:4a:f8:2b:05:8f:a9:97:30:6a:46:df:14:
                    14:2d:58:bf:7c:6e:7c:fc:31:53:ca:cb:b9:a5:47:
                    91:83:dc:99:ab:7e:ee:af:db:56:5f:c8:cb:7b:ce:
                    33:a8:33:6d:ca:3b:82:24:fd:55:82:33:b9:a1:ab:
                    5e:f6:e5:dd:84:b3:49:bc:6c:5c:e6:09:df:60:b8:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:33:A6:8D:03:84:F1:44:12:A3:8B:D8:5E:4F:98:FF:82:10:72:9B
            X509v3 Authority Key Identifier:
                keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/CBD093368EF411F1A6E45BB36711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:fe:d3:d3:74:2f:7a:2a:43:a9:5b:f3:1d:fc:d1:14:80:bb:
         47:c2:40:e7:4b:27:2b:7a:b5:55:a3:be:eb:fb:65:a3:fb:39:
         ca:89:69:01:de:b7:6b:81:9d:04:48:1a:52:93:74:e6:d5:51:
         c4:36:af:93:e6:4a:e6:c8:e3:9b:27:f4:2d:ab:9f:f6:ba:c9:
         6a:13:43:3e:ff:3c:af:2a:c5:13:fe:d0:39:03:04:85:68:e3:
         76:bc:83:5c:e4:54:b9:78:3c:06:1f:e7:d9:39:fe:55:47:c2:
         17:62:5b:b0:7a:ab:5c:4d:9e:3e:5f:e6:cc:f0:b3:2d:33:64:
         0b:0e:99:d2:19:df:d0:54:91:8d:d8:ce:71:0e:df:38:6d:87:
         ab:73:97:4b:62:65:2e:f2:c2:14:bc:7f:88:22:dd:78:03:22:
         ba:6d:3f:22:d9:f5:04:c6:8a:72:ec:a7:1c:7d:70:77:bd:b5:
         d7:76:d1:15:69:8d:65:00:03:60:30:1b:50:a2:12:b0:47:5c:
         85:f8:22:ba:dc:90:4c:a3:97:ad:ca:39:c5:33:65:9d:6b:87:
         82:3e:90:0e:5d:c4:24:e7:9f:3f:f4:89:b5:38:b4:3c:c3:80:
         d0:8d:c5:b7:d5:13:85:2c:1f:5e:d7:48:21:05:7d:78:df:77:
         41:1c:9c:79
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5
NEU5RjUwOTUwHhcNMjYxMDA4MjI0MzEwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM4MWM3ZS1lODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkq5rQNU/nkaXXdTr58XUl926xhZhMAA2dMoRFXVoh5C/j3ZkKQHZV4rzJdpU
mzGMve0ONBHxlXJW1ipXRvD0C5igv3q+OM1UEpSHPrz4uNe9Heipimzsk23rkgQ/
aSQZZF1JB2H8g0ZGEEtPeeOgau1UD/lF3UUyggXXxEJYRQIyUS0she2oUwSUq/3H
UI/phcmlRsnLgOWp0xgaSujg/sM35EA4sF5CvyN5+TwbU5Q710nh/KJK+CsFj6mX
MGpG3xQULVi/fG58/DFTysu5pUeRg9yZq37ur9tWX8jLe84zqDNtyjuCJP1VgjO5
oate9uXdhLNJvGxc5gnfYLh/EwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN4zpo0D
hPFEEqOL2F5PmP+CEHKbMB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1
QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUE4OTcvRTFEMTE3NzA5NUJBMTFFQkIyODEyMzcxQzRGOUFFMDIvQ0JEMDkzMzY4
RUY0MTFGMUE2RTQ1QkIzNjcxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ2rKMA0GCSqGSIb3DQEBCwUAA4IBAQBz/tPTdC96KkOpW/Md/NEU
gLtHwkDnSycrerVVo77r+2Wj+znKiWkB3rdrgZ0ESBpSk3Tm1VHENq+T5krmyOOb
J/Qtq5/2uslqE0M+/zyvKsUT/tA5AwSFaON2vINc5FS5eDwGH+fZOf5VR8IXYluw
eqtcTZ4+X+bM8LMtM2QLDpnSGd/QVJGN2M5xDt84bYerc5dLYmUu8sIUvH+IIt14
AyK6bT8i2fUExopy7KccfXB3vbXXdtEVaY1lAANgMBtQohKwR1yF+CK63JBMo5et
yjnFM2Wda4eCPpAOXcQk558/9Im1OLQ8w4DQjcW31ROFLB9e10ghBX1433dBHJx5
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:21:43 2026 by rpki-client