Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/460AA4AE03CF11ECA480B07CC4F9AE02.roa
File:                     460AA4AE03CF11ECA480B07CC4F9AE02.roa (raw, json)
Hash identifier:          lwBd5Cu3FrXZsvsaCtwRFnBd3GgAPC6R4lTlq4TEtoA=
Subject key identifier:   71:B8:73:9A:95:9E:B4:1E:3C:C0:36:D3:C7:AE:05:E7:53:B1:84:B3
Certificate issuer:       /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2
Certificate serial:       061E
Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/460AA4AE03CF11ECA480B07CC4F9AE02.roa
Signing time:             Sat 12 Sep 2026 22:44:16 +0000
ROA not before:           Sat 12 Sep 2026 22:44:16 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137967
IP address blocks:        103.172.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl
                          rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2
        Validity
            Not Before: Sep 12 22:44:16 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa5d5c0-247e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:3c:ac:8b:f9:5f:56:3b:8a:68:21:73:57:
                    15:38:ae:f3:3e:32:5a:e8:ea:4a:25:19:72:9e:a6:
                    05:0c:7a:fa:52:a8:a0:14:09:7a:4e:df:95:87:a3:
                    d0:b4:47:53:90:ed:12:eb:53:2b:39:ca:b0:4a:de:
                    29:7c:88:f7:4e:d6:88:b4:16:d1:68:fe:4e:34:2f:
                    4c:12:9a:75:6f:7a:8a:2d:ba:94:ce:b1:d2:87:ec:
                    32:db:d2:e0:a9:f1:2a:5d:73:70:20:bd:21:d0:dd:
                    67:f8:62:fb:a9:ad:0b:04:e2:de:e3:d0:24:51:db:
                    dc:d0:fd:42:c7:a2:ea:4a:74:b7:09:2f:f8:9b:c0:
                    98:c0:4a:34:4a:18:54:e6:fc:9a:61:c3:2b:dc:e0:
                    ae:38:1a:3f:6d:f2:e2:68:47:e6:7e:a8:8a:ec:c3:
                    89:c6:4b:9b:85:ef:3e:7f:3f:33:f2:69:e3:e5:61:
                    41:f0:3e:2b:f0:e8:13:45:71:1b:85:53:31:59:aa:
                    2a:57:20:55:43:fa:e2:cb:71:16:4d:7f:42:85:a3:
                    2b:4f:44:98:dd:f9:bc:0e:00:7d:5e:e8:3c:d2:fd:
                    2e:f5:78:85:d8:d3:ce:a8:a5:bb:49:0d:aa:80:24:
                    52:9c:5e:15:6e:07:ed:fe:64:5e:c7:33:be:89:80:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B8:73:9A:95:9E:B4:1E:3C:C0:36:D3:C7:AE:05:E7:53:B1:84:B3
            X509v3 Authority Key Identifier:
                keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/460AA4AE03CF11ECA480B07CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:f4:2f:26:f8:9b:a3:0a:4e:83:07:ee:65:c3:90:1b:c6:71:
         28:fc:41:1c:9e:b4:db:ca:c4:b1:6f:ea:78:07:e6:6d:5e:2f:
         05:8a:6e:e9:25:4c:14:01:41:42:2c:e1:d1:3c:e3:ff:67:fb:
         8c:c1:19:8b:bd:d2:34:4a:df:5e:1d:75:3e:5f:d8:f6:e0:bd:
         05:4e:24:d5:2a:af:bd:58:0c:39:76:c2:cf:0e:a7:9f:a8:44:
         59:36:dd:94:23:53:f0:03:36:2d:80:9a:11:19:54:65:49:82:
         13:53:0d:12:e5:1d:33:ae:da:9e:f8:c5:09:20:ca:3c:0e:fa:
         6d:93:7d:2c:4e:82:d3:09:21:b8:92:9f:40:58:8a:85:ae:d1:
         97:0c:ef:06:0d:48:b6:8e:ad:66:97:80:d2:f0:a2:2a:c6:c1:
         2f:85:bb:8e:87:f4:60:46:ab:aa:11:4e:56:ac:52:9d:03:6c:
         e2:1d:80:80:25:07:63:a3:00:93:a5:7e:94:29:69:fd:7e:51:
         59:0e:24:af:fb:32:48:37:de:0e:8e:e3:5d:f9:c1:6d:e9:6a:
         6b:36:06:d6:ff:f6:f1:5a:cb:0e:8e:79:a3:a2:38:fc:8b:8a:
         8a:32:cb:34:99:fb:b9:77:d1:f0:68:fe:58:c5:78:43:ee:66:
         50:bc:a5:92
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy
QTFDQTBCQTIwHhcNMjYwOTEyMjI0NDE2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWE1ZDVjMC0yNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2g8rIv5X1Y7imghc1cVOK7zPjJa6OpKJRlynqYFDHr6UqigFAl6Tt+Vh6PQ
tEdTkO0S61MrOcqwSt4pfIj3TtaItBbRaP5ONC9MEpp1b3qKLbqUzrHSh+wy29Lg
qfEqXXNwIL0h0N1n+GL7qa0LBOLe49AkUdvc0P1Cx6LqSnS3CS/4m8CYwEo0ShhU
5vyaYcMr3OCuOBo/bfLiaEfmfqiK7MOJxkubhe8+fz8z8mnj5WFB8D4r8OgTRXEb
hVMxWaoqVyBVQ/riy3EWTX9ChaMrT0SY3fm8DgB9Xug80v0u9XiF2NPOqKW7SQ2q
gCRSnF4Vbgft/mRexzO+iYBDKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHG4c5qV
nrQePMA208euBedTsYSzMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz
Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD
NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUI4NUEvMTg1QzM5QjYwM0NEMTFFQ0FCQ0U2OTdCQzRGOUFFMDIvNDYwQUE0QUUw
M0NGMTFFQ0E0ODBCMDdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6wdMA0GCSqGSIb3DQEBCwUAA4IBAQA69C8m+JujCk6DB+5lw5Ab
xnEo/EEcnrTbysSxb+p4B+ZtXi8Fim7pJUwUAUFCLOHRPOP/Z/uMwRmLvdI0St9e
HXU+X9j24L0FTiTVKq+9WAw5dsLPDqefqERZNt2UI1PwAzYtgJoRGVRlSYITUw0S
5R0zrtqe+MUJIMo8Dvptk30sToLTCSG4kp9AWIqFrtGXDO8GDUi2jq1ml4DS8KIq
xsEvhbuOh/RgRquqEU5WrFKdA2ziHYCAJQdjowCTpX6UKWn9flFZDiSv+zJIN94O
juNd+cFt6WprNgbW//bxWssOjnmjojj8i4qKMss0mfu5d9HwaP5YxXhD7mZQvKWS
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:35:42 2026 by rpki-client