Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/1E17772C282A11F18C2E09ECC4833773.roa
File:                     1E17772C282A11F18C2E09ECC4833773.roa (raw, json)
Hash identifier:          wvq+eeKQICfr0xthABW2pw2lePGMaoO+cQ143TEevew=
Subject key identifier:   50:3F:2B:46:79:D2:A0:72:BA:57:CE:56:3D:3A:3C:0E:E7:5E:B3:F7
Certificate issuer:       /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial:       01A3
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/1E17772C282A11F18C2E09ECC4833773.roa
Signing time:             Thu 03 Sep 2026 05:55:13 +0000
ROA not before:           Thu 03 Sep 2026 05:55:13 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     40115
IP address blocks:        103.110.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
                          rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
        Validity
            Not Before: Sep  3 05:55:13 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a990bc1-e835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:42:fc:77:80:01:18:79:61:3a:be:9f:de:
                    70:1e:d4:27:ec:80:3a:c2:59:4f:f3:a2:7b:fa:d0:
                    9c:49:99:64:16:02:88:b2:78:be:30:07:da:24:44:
                    d5:5a:45:57:09:de:80:38:38:35:63:1a:17:f2:f7:
                    04:49:f4:ac:63:19:e1:07:b3:b6:d1:9c:bc:dc:c6:
                    f2:6b:fd:20:84:23:b6:18:d1:59:98:9b:16:43:43:
                    14:0f:5b:00:9c:9e:ca:f9:45:31:6c:57:28:74:9d:
                    54:61:bd:7e:f2:4e:b1:75:92:19:df:e4:a6:d7:04:
                    11:7d:58:9d:c9:14:16:84:ea:14:8a:07:0a:1b:4a:
                    04:5b:dd:3c:cf:ec:29:0c:ff:eb:4f:37:5e:90:4e:
                    86:c2:55:b1:1d:97:6b:dd:93:28:f6:5e:55:69:a0:
                    93:06:96:32:e1:81:e9:9f:49:d1:3b:77:e8:a0:52:
                    b3:33:b7:13:a6:6d:81:70:33:8b:bd:bd:d9:87:b4:
                    be:16:7a:ee:65:52:77:9f:86:26:c2:ac:2f:0e:b5:
                    b9:ed:88:7c:45:36:af:6f:11:14:54:2e:90:1f:7f:
                    64:08:1c:7b:f7:d2:26:fd:da:84:54:de:66:28:50:
                    2a:0c:5a:a1:8e:96:70:44:5c:18:e1:0c:e9:61:3d:
                    7d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3F:2B:46:79:D2:A0:72:BA:57:CE:56:3D:3A:3C:0E:E7:5E:B3:F7
            X509v3 Authority Key Identifier:
                keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/1E17772C282A11F18C2E09ECC4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:a7:9a:75:97:8c:ea:ba:3a:07:3e:6b:90:96:87:11:da:e8:
         4b:13:ee:f5:b5:b6:2b:1c:3a:8e:98:74:a8:9f:99:f8:87:d2:
         f2:fe:ca:76:0a:4d:0e:95:43:b6:05:12:cc:df:f1:a4:18:b8:
         be:ec:24:4c:bd:85:c5:69:71:1f:71:b1:18:5d:81:f9:06:6c:
         9b:56:2f:58:cf:43:b7:61:c3:41:da:a3:e0:42:28:fd:75:1f:
         7b:4a:9d:20:23:f7:4d:f6:c3:a4:e9:67:09:32:c8:3c:13:19:
         a8:37:99:bb:9a:70:4a:97:bb:be:88:9c:42:65:52:8f:3c:91:
         94:e9:63:19:37:97:85:c2:ec:5f:52:23:be:1b:80:41:63:0c:
         76:54:84:d7:52:05:d8:66:c2:a7:42:3a:b0:2d:33:96:b0:65:
         4e:19:a4:34:f8:d7:58:c5:e9:5d:31:96:d2:a9:21:df:b8:36:
         50:dc:42:b1:e6:35:df:84:0d:8d:ac:59:ab:da:fd:7d:d0:65:
         6a:a4:40:0f:fc:9a:45:e0:42:9a:20:d4:9f:0f:01:45:a0:47:
         86:d4:af:5e:b9:22:8d:6b:5a:a5:bb:d0:3f:66:7e:d5:c1:38:
         1e:eb:20:57:88:32:5d:0b:c7:66:30:18:48:9e:10:16:4d:4c:
         ef:13:34:79
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2
M0ZCMDhFREQwHhcNMjYwOTAzMDU1NTEzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk5MGJjMS1lODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0flC/HeAARh5YTq+n95wHtQn7IA6wllP86J7+tCcSZlkFgKIsni+MAfaJETV
WkVXCd6AODg1YxoX8vcESfSsYxnhB7O20Zy83Mbya/0ghCO2GNFZmJsWQ0MUD1sA
nJ7K+UUxbFcodJ1UYb1+8k6xdZIZ3+Sm1wQRfVidyRQWhOoUigcKG0oEW908z+wp
DP/rTzdekE6GwlWxHZdr3ZMo9l5VaaCTBpYy4YHpn0nRO3fooFKzM7cTpm2BcDOL
vb3Zh7S+FnruZVJ3n4YmwqwvDrW57Yh8RTavbxEUVC6QH39kCBx799Im/dqEVN5m
KFAqDFqhjpZwRFwY4QzpYT19LQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFA/K0Z5
0qByulfOVj06PA7nXrP3MB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD
NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq
dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjNCNEMvREM5REUyOEU4QzUwMTFFRkEwNjdDODE1QzRGOUFFMDIvMUUxNzc3MkMy
ODJBMTFGMThDMkUwOUVDQzQ4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ27cMA0GCSqGSIb3DQEBCwUAA4IBAQCbp5p1l4zqujoHPmuQlocR
2uhLE+71tbYrHDqOmHSon5n4h9Ly/sp2Ck0OlUO2BRLM3/GkGLi+7CRMvYXFaXEf
cbEYXYH5BmybVi9Yz0O3YcNB2qPgQij9dR97Sp0gI/dN9sOk6WcJMsg8ExmoN5m7
mnBKl7u+iJxCZVKPPJGU6WMZN5eFwuxfUiO+G4BBYwx2VITXUgXYZsKnQjqwLTOW
sGVOGaQ0+NdYxeldMZbSqSHfuDZQ3EKx5jXfhA2NrFmr2v190GVqpEAP/JpF4EKa
INSfDwFFoEeG1K9euSKNa1qlu9A/Zn7VwTge6yBXiDJdC8dmMBhInhAWTUzvEzR5
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:09:00 2026 by rpki-client