Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/121E99A8F21911EE95F21158C4F9AE02.roa
File:                     121E99A8F21911EE95F21158C4F9AE02.roa (raw, json)
Hash identifier:          MxjihytyjqbI0kprRCcgZJxlcagSJ1SZVxyrVtzudrM=
Subject key identifier:   FE:FD:D2:C8:11:9B:C7:89:D0:A8:88:D9:48:E6:4C:F6:41:73:7D:07
Certificate issuer:       /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Certificate serial:       01D0
Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/121E99A8F21911EE95F21158C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 04:54:30 +0000
ROA not before:           Thu 03 Sep 2026 04:54:30 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     64015
IP address blocks:        103.192.240.0/22 maxlen: 22
                          103.192.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
        Validity
            Not Before: Sep  3 04:54:30 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98fd85-ae7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:8d:b2:57:c2:95:2a:bf:82:55:17:8f:8c:
                    b3:36:bf:fc:72:34:19:10:54:95:2b:7c:76:c4:74:
                    55:4d:dc:51:33:2b:d9:44:ff:c2:6c:e7:31:65:7b:
                    e7:26:55:d5:99:7f:d2:3c:59:ce:54:65:6e:75:c8:
                    e4:bc:ee:8b:4d:ab:83:1a:e4:5f:3a:d2:c2:72:77:
                    47:18:45:65:1c:bb:e5:d0:94:c0:5b:31:94:5c:0c:
                    ce:b1:99:3a:df:0a:ae:00:20:f7:2f:d8:75:10:36:
                    53:6e:6c:fa:09:74:7e:06:e3:be:7e:55:a0:b4:4a:
                    bb:eb:4e:dd:01:58:37:78:4e:c1:b8:a1:45:37:0d:
                    cc:c5:59:c3:d6:f3:69:93:ae:95:84:d8:87:2d:ce:
                    25:4a:b1:b1:c5:b7:cd:c3:77:9b:b8:fa:23:29:cc:
                    68:81:87:74:7a:12:a5:1c:65:9d:ee:09:7f:c3:ab:
                    3c:99:b1:29:ce:72:28:e9:12:3e:37:89:ba:bc:53:
                    52:be:09:18:a8:bf:6c:f8:ea:2c:99:d0:0f:f8:6b:
                    df:69:b4:6a:48:6e:38:2b:60:97:e1:15:fe:1c:d2:
                    35:9a:f9:38:b4:a6:06:a2:9f:b1:4a:aa:91:ff:1b:
                    9c:d1:2a:be:d7:3d:f7:ad:df:b1:ca:3b:53:66:6f:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FD:D2:C8:11:9B:C7:89:D0:A8:88:D9:48:E6:4C:F6:41:73:7D:07
            X509v3 Authority Key Identifier:
                keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/121E99A8F21911EE95F21158C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:07:d2:4a:f1:31:99:21:41:2a:c0:31:f5:ef:21:e7:32:69:
         d1:26:c9:61:cd:70:7b:d8:24:bc:d2:12:32:18:5c:71:27:fc:
         14:3e:a1:12:79:23:81:bf:cf:86:03:66:04:52:8c:c7:5a:cc:
         5a:8b:bb:5c:fb:77:cb:ee:37:c4:6f:a9:eb:af:b3:81:71:89:
         78:5d:dd:60:37:f6:8a:15:62:7c:02:0a:e1:49:73:49:f1:77:
         9d:77:af:c4:ea:7a:fc:21:1f:1f:00:a7:0e:02:b6:2a:d0:6a:
         a0:4f:2c:c2:ab:31:88:74:63:c9:27:c6:fa:b7:df:d5:a2:3a:
         c9:a6:c8:f6:bf:00:7a:0b:2a:54:84:fa:45:ba:8d:e0:71:e4:
         9b:50:be:b2:54:4f:ed:c4:5b:32:2d:0b:f7:c7:71:fc:1d:f9:
         c8:72:65:d7:ec:6b:2b:66:4b:26:22:64:65:da:d7:29:23:4f:
         c8:d5:fd:2a:47:13:22:68:26:ab:be:4f:46:90:9b:ca:29:9e:
         f1:24:9e:9c:7c:8b:c6:45:31:6d:f3:bd:99:7e:0c:45:5e:e9:
         69:15:60:ce:df:c0:77:27:cb:e1:5e:e4:5c:b4:4e:c2:2d:ad:
         45:4b:aa:2d:38:1c:cf:90:2e:69:6a:33:05:b9:7f:e5:ac:e7:
         49:e1:b2:3d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy
MTkwN0IzRjcwHhcNMjYwOTAzMDQ1NDMwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4ZmQ4NS1hZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu5mNslfClSq/glUXj4yzNr/8cjQZEFSVK3x2xHRVTdxRMyvZRP/CbOcxZXvn
JlXVmX/SPFnOVGVudcjkvO6LTauDGuRfOtLCcndHGEVlHLvl0JTAWzGUXAzOsZk6
3wquACD3L9h1EDZTbmz6CXR+BuO+flWgtEq7607dAVg3eE7BuKFFNw3MxVnD1vNp
k66VhNiHLc4lSrGxxbfNw3ebuPojKcxogYd0ehKlHGWd7gl/w6s8mbEpznIo6RI+
N4m6vFNSvgkYqL9s+OosmdAP+GvfabRqSG44K2CX4RX+HNI1mvk4tKYGop+xSqqR
/xuc0Sq+1z33rd+xyjtTZm9nywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP790sgR
m8eJ0KiI2UjmTPZBc30HMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy
MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFFMkUvRTcxQTBCQkNGMjE3MTFFRUJDQ0MzMTIwQzRGOUFFMDIvMTIxRTk5QThG
MjE5MTFFRTk1RjIxMTU4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ8DwMA0GCSqGSIb3DQEBCwUAA4IBAQBSB9JK8TGZIUEqwDH17yHn
MmnRJslhzXB72CS80hIyGFxxJ/wUPqESeSOBv8+GA2YEUozHWsxai7tc+3fL7jfE
b6nrr7OBcYl4Xd1gN/aKFWJ8AgrhSXNJ8Xedd6/E6nr8IR8fAKcOArYq0GqgTyzC
qzGIdGPJJ8b6t9/VojrJpsj2vwB6CypUhPpFuo3gceSbUL6yVE/txFsyLQv3x3H8
HfnIcmXX7GsrZksmImRl2tcpI0/I1f0qRxMiaCarvk9GkJvKKZ7xJJ6cfIvGRTFt
872ZfgxFXulpFWDO38B3J8vhXuRctE7CLa1FS6otOBzPkC5pajMFuX/lrOdJ4bI9
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:24:05 2026 by rpki-client