Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/539AC1C6B27A11F19678C2773511F970.roa
File:                     539AC1C6B27A11F19678C2773511F970.roa (raw, json)
Hash identifier:          kjhI0eeZ4Kl7oEROg4YfSikLSMN/fVN+2AESo76PF0k=
Subject key identifier:   BF:36:A6:31:22:96:0E:6E:98:9F:73:54:39:59:36:7B:AB:10:81:25
Certificate issuer:       /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial:       1790
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/539AC1C6B27A11F19678C2773511F970.roa
Signing time:             Thu 17 Sep 2026 09:29:48 +0000
ROA not before:           Thu 17 Sep 2026 09:29:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198381
IP address blocks:        103.27.23.0/24 maxlen: 24
                          175.111.1.0/24 maxlen: 24
                          175.111.8.0/24 maxlen: 24
                          175.111.9.0/24 maxlen: 24
                          175.111.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6032 (0x1790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
        Validity
            Not Before: Sep 17 09:29:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aabb30c-64e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:5a:c2:b4:41:fc:30:a8:d4:e8:7f:99:69:
                    87:26:32:32:e0:4c:de:34:88:70:91:74:41:1e:97:
                    1c:db:df:ef:93:a0:2d:2d:00:87:b7:e6:d0:c6:b3:
                    ce:d4:f4:90:25:9c:39:3a:44:3c:e2:ab:66:a9:be:
                    1f:98:1d:ee:c0:4f:71:9a:47:3b:ea:c4:1b:55:07:
                    b6:e3:00:1f:77:b8:46:ea:7e:d7:ce:63:15:bd:4d:
                    48:90:5d:4a:ef:c2:dc:27:16:6e:20:b1:33:85:e7:
                    f8:e6:39:66:0e:9d:02:cd:8a:e1:c7:57:2d:b4:92:
                    7a:71:21:c9:e0:ec:eb:30:a0:f1:2f:c9:77:94:c7:
                    65:9f:18:65:91:b6:40:84:6e:8f:b6:62:1c:df:28:
                    6a:71:a1:a8:14:4a:9f:3b:38:5a:03:62:3d:94:16:
                    41:0e:bc:16:08:04:01:12:1d:0d:3d:47:8a:bc:fa:
                    13:49:de:49:50:cb:28:44:69:e5:fc:7c:a0:c7:75:
                    d0:ab:b4:52:99:4a:f0:2a:7f:05:a5:5d:1b:74:27:
                    1c:61:f3:0a:81:7c:ed:e8:96:84:64:c1:c7:dc:d0:
                    b4:fc:df:47:2b:e1:b5:17:4f:34:31:fc:ab:cf:a4:
                    d0:4d:8a:71:f3:9f:8d:23:86:a0:19:35:57:a5:1d:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:36:A6:31:22:96:0E:6E:98:9F:73:54:39:59:36:7B:AB:10:81:25
            X509v3 Authority Key Identifier:
                keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/539AC1C6B27A11F19678C2773511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.23.0/24
                  175.111.1.0/24
                  175.111.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:76:bd:61:fa:93:28:e5:27:6c:da:47:f0:fe:8a:21:55:42:
         99:4d:aa:c0:96:f7:cf:09:97:8f:d8:82:63:ca:9f:54:a0:8c:
         98:e2:da:31:d7:33:af:53:1c:42:82:7b:35:df:0e:a2:79:2f:
         1a:9a:ab:8d:87:40:e3:ce:71:bf:cd:2a:7d:a8:40:2d:75:65:
         a5:28:04:07:d3:0e:be:b4:13:0b:6a:e8:c2:a3:6e:01:d2:0c:
         76:6d:fe:5b:c3:29:82:be:3a:12:e6:90:63:85:2b:76:46:69:
         60:78:f8:0d:cc:87:51:a3:bc:58:bb:11:e3:cc:9c:67:40:e1:
         bf:95:db:b2:9c:c3:5b:f4:27:f0:d3:f0:ac:2c:44:0f:36:dc:
         51:73:a6:07:c0:64:be:56:37:00:41:d6:6d:fd:e5:fd:11:50:
         b2:2c:ce:0d:7c:3b:84:85:88:be:0f:23:02:3c:ee:7d:0c:2b:
         b2:97:a3:e1:95:92:99:7e:e0:2a:e8:19:eb:b1:d7:94:a1:a9:
         89:45:e2:36:31:ac:fc:20:52:ae:f5:97:ad:d1:54:57:3b:4a:
         7a:d5:da:c7:a8:5c:55:54:3b:55:94:1b:96:ef:a1:84:16:10:
         18:e1:69:fe:26:2b:a7:fd:ac:4c:ac:e7:0e:95:35:78:8f:72:
         0d:d9:d8:29
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICF5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3
RjEyMUYwNTMwHhcNMjYwOTE3MDkyOTQ4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFiYjMwYy02NGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoZawrRB/DCo1Oh/mWmHJjIy4EzeNIhwkXRBHpcc29/vk6AtLQCHt+bQxrPO
1PSQJZw5OkQ84qtmqb4fmB3uwE9xmkc76sQbVQe24wAfd7hG6n7XzmMVvU1IkF1K
78LcJxZuILEzhef45jlmDp0CzYrhx1cttJJ6cSHJ4OzrMKDxL8l3lMdlnxhlkbZA
hG6PtmIc3yhqcaGoFEqfOzhaA2I9lBZBDrwWCAQBEh0NPUeKvPoTSd5JUMsoRGnl
/Hygx3XQq7RSmUrwKn8FpV0bdCccYfMKgXzt6JaEZMHH3NC0/N9HK+G1F080Mfyr
z6TQTYpx85+NI4agGTVXpR05iwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFL82pjEi
lg5umJ9zVDlZNnurEIElMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2
MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjExODUvM0VBOUREM0ExNjIzMTFFODkyQzRBOTQwQzRGOUFFMDIvNTM5QUMxQzZC
MjdBMTFGMTk2NzhDMjc3MzUxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZxsXAwQAr28BAwQCr28IMA0GCSqGSIb3DQEBCwUAA4IBAQAxdr1h
+pMo5Sds2kfw/oohVUKZTarAlvfPCZeP2IJjyp9UoIyY4tox1zOvUxxCgns13w6i
eS8amquNh0DjznG/zSp9qEAtdWWlKAQH0w6+tBMLaujCo24B0gx2bf5bwymCvjoS
5pBjhSt2RmlgePgNzIdRo7xYuxHjzJxnQOG/lduynMNb9Cfw0/CsLEQPNtxRc6YH
wGS+VjcAQdZt/eX9EVCyLM4NfDuEhYi+DyMCPO59DCuyl6PhlZKZfuAq6BnrsdeU
oamJReI2Maz8IFKu9Zet0VRXO0p61drHqFxVVDtVlBuW76GEFhAY4Wn+Jiun/axM
rOcOlTV4j3IN2dgp
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:10:36 2026 by rpki-client