Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/1AD64F18D23411EAAFD6AA3AC4F9AE02.roa
File:                     1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (raw, json)
Hash identifier:          MqlBf1TAsOwILwTo3JKCmLFuWYyQ3RYADDcjd7qhNAo=
Subject key identifier:   1C:C7:D7:A3:DE:10:B8:87:C8:9C:4A:CF:0F:48:85:DA:D9:50:A4:AB
Certificate issuer:       /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial:       170C
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/1AD64F18D23411EAAFD6AA3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:45:54 +0000
ROA not before:           Mon 10 Nov 2025 07:01:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198381
IP address blocks:        103.27.23.0/24 maxlen: 24
                          175.111.1.0/24 maxlen: 24
                          175.111.8.0/24 maxlen: 24
                          175.111.9.0/24 maxlen: 24
                          175.111.10.0/23 maxlen: 23
                          175.111.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5900 (0x170c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
        Validity
            Not Before: Nov 10 07:01:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a47b52-73fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:a2:e4:bb:2e:b8:5d:94:38:59:fb:e1:9e:
                    f7:fb:17:31:6b:fc:bc:39:dc:13:97:af:d9:40:0b:
                    17:58:3a:b2:7c:f6:44:ad:3f:63:98:50:ba:82:0c:
                    b8:aa:90:51:26:cd:34:96:c9:ac:64:e0:2f:47:72:
                    29:b5:50:3e:8a:60:38:0d:a5:67:74:3e:29:be:8d:
                    13:42:8a:27:14:7b:c5:7f:24:4b:5c:76:60:0b:50:
                    e3:49:b9:7c:09:41:59:d5:97:4d:17:1d:bc:53:bc:
                    25:f8:d3:7c:93:bc:0b:ca:84:15:94:34:5f:e2:76:
                    94:3b:8e:60:b9:f8:94:2f:6e:64:9f:39:76:72:74:
                    27:45:37:5f:ba:f3:a7:b5:d2:0d:02:86:87:e5:57:
                    83:0d:22:f0:04:96:7b:aa:42:78:e1:eb:1b:3f:59:
                    9c:11:74:5a:4a:6e:3e:7e:19:47:50:9d:54:d0:fe:
                    34:68:85:68:8d:66:d9:18:08:10:bf:54:98:e5:41:
                    aa:e7:3e:53:57:a5:a7:91:ad:c0:f1:83:12:47:c4:
                    e2:f6:6f:ff:a5:40:c9:07:3e:5c:e1:b9:08:7b:58:
                    4e:d0:49:4a:8c:10:b6:85:d9:57:69:db:b9:2c:22:
                    31:6a:62:36:97:b7:f5:f3:a3:23:37:a6:d5:95:c3:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C7:D7:A3:DE:10:B8:87:C8:9C:4A:CF:0F:48:85:DA:D9:50:A4:AB
            X509v3 Authority Key Identifier:
                keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/1AD64F18D23411EAAFD6AA3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.23.0/24
                  175.111.1.0/24
                  175.111.8.0-175.111.13.255

    Signature Algorithm: sha256WithRSAEncryption
         59:2f:b1:39:b3:56:ae:54:8d:8e:18:61:e0:93:35:b8:4d:f2:
         f8:11:c7:c2:4d:f0:85:3f:45:32:c6:00:d0:a0:06:1d:c9:5f:
         6f:fe:f4:a5:cf:52:ea:e2:5c:81:dd:0c:6b:ca:a9:9a:22:09:
         10:b9:fe:2b:2f:80:a7:fd:8b:db:5c:54:0e:ce:f3:c3:93:29:
         8d:5e:79:1f:30:e4:e8:38:83:8b:bf:16:ba:59:75:63:01:b4:
         9d:c1:e5:98:d5:8d:79:54:61:7d:19:3d:65:cc:44:33:4d:86:
         60:86:75:2d:cd:1b:e0:ef:2c:c9:0a:f7:68:a3:50:05:65:ff:
         00:e8:aa:88:41:ed:ef:22:bd:3b:a6:7c:e0:e8:42:0f:d1:e9:
         7c:2f:85:61:3f:4d:18:b7:79:a2:c4:93:49:80:03:99:d2:73:
         05:01:73:1b:95:1e:01:be:09:04:f3:48:34:16:49:bf:a9:95:
         ab:28:c9:32:5f:57:6d:1d:9b:32:74:7e:2d:e5:bb:87:fb:f5:
         8f:94:d2:90:af:8b:6a:79:18:03:fe:99:fa:73:7a:f3:11:f9:
         94:20:ef:7d:a6:d3:37:f4:e7:8d:13:3a:7d:df:9f:1d:bc:1f:
         c1:8e:1f:ae:60:18:34:dd:73:b8:7c:09:fe:a7:b9:d7:06:48:
         98:e1:14:53
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICFwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3
RjEyMUYwNTMwHhcNMjUxMTEwMDcwMTI3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2I1Mi03M2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn2+i5LsuuF2UOFn74Z73+xcxa/y8OdwTl6/ZQAsXWDqyfPZErT9jmFC6ggy4
qpBRJs00lsmsZOAvR3IptVA+imA4DaVndD4pvo0TQoonFHvFfyRLXHZgC1DjSbl8
CUFZ1ZdNFx28U7wl+NN8k7wLyoQVlDRf4naUO45gufiUL25knzl2cnQnRTdfuvOn
tdINAoaH5VeDDSLwBJZ7qkJ44esbP1mcEXRaSm4+fhlHUJ1U0P40aIVojWbZGAgQ
v1SY5UGq5z5TV6Wnka3A8YMSR8Ti9m//pUDJBz5c4bkIe1hO0ElKjBC2hdlXadu5
LCIxamI2l7f186MjN6bVlcM3/QIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFBzH16Pe
ELiHyJxKzw9IhdrZUKSrMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2
MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjExODUvM0VBOUREM0ExNjIzMTFFODkyQzRBOTQwQzRGOUFFMDIvMUFENjRGMThE
MjM0MTFFQUFGRDZBQTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaAwQAZxsXAwQAr28BMAwDBAOvbwgDBAGvbwwwDQYJKoZIhvcNAQELBQAD
ggEBAFkvsTmzVq5UjY4YYeCTNbhN8vgRx8JN8IU/RTLGANCgBh3JX2/+9KXPUuri
XIHdDGvKqZoiCRC5/isvgKf9i9tcVA7O88OTKY1eeR8w5Og4g4u/FrpZdWMBtJ3B
5ZjVjXlUYX0ZPWXMRDNNhmCGdS3NG+DvLMkK92ijUAVl/wDoqohB7e8ivTumfODo
Qg/R6XwvhWE/TRi3eaLEk0mAA5nScwUBcxuVHgG+CQTzSDQWSb+plasoyTJfV20d
mzJ0fi3lu4f79Y+U0pCvi2p5GAP+mfpzevMR+ZQg732m0zf0540TOn3fnx28H8GO
H65gGDTdc7h8Cf6nudcGSJjhFFM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:58 2026 by rpki-client