Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/B70755C04C7311F1ACB58F89C4833773.roa
File:                     B70755C04C7311F1ACB58F89C4833773.roa (raw, json)
Hash identifier:          pbUg3PFND8BW35Ac8y+pE07cA8Uh/q0+nLe6J6NGxvY=
Subject key identifier:   55:01:BB:9E:86:16:32:3E:4A:43:92:1A:5A:1D:AA:73:B7:CC:2E:DD
Certificate issuer:       /CN=A91B6899/serialNumber=3A6EE6F015941F5072AE71391B172058A0190142
Certificate serial:       2C
Authority key identifier: 3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/B70755C04C7311F1ACB58F89C4833773.roa
Signing time:             Wed 29 Jul 2026 10:59:06 +0000
ROA not before:           Wed 29 Jul 2026 10:59:06 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     17088
IP address blocks:        103.22.167.0/24 maxlen: 24
                          103.28.73.0/24 maxlen: 24
                          103.241.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl
                          rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6899, serialNumber=3A6EE6F015941F5072AE71391B172058A0190142
        Validity
            Not Before: Jul 29 10:59:06 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a69dcfa-405e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:56:d1:2c:1c:dc:ec:1f:e2:2f:5a:7e:87:
                    50:2e:8d:58:a8:9d:57:d5:98:6a:c8:59:eb:dc:e0:
                    3f:07:ef:79:cf:e4:6f:f8:18:52:8d:13:1f:39:23:
                    56:8e:69:d5:2f:28:28:a3:32:77:61:62:53:fc:90:
                    96:4d:70:7d:87:81:31:bc:1e:b3:27:be:4b:ac:3d:
                    2c:28:29:b1:08:35:5c:ed:5c:b6:c1:52:fd:9d:f8:
                    6b:49:54:07:4f:20:52:90:af:73:ec:00:d2:5a:24:
                    3a:70:be:c9:cb:5c:33:e9:02:f2:e8:8c:82:c7:ba:
                    42:31:c8:e2:33:92:b0:00:b9:c3:4c:7f:ef:72:10:
                    89:39:34:d4:1f:e4:c5:83:50:f4:f3:61:05:25:0d:
                    b1:45:ed:f5:c4:50:87:a7:d6:55:1e:e5:1c:ea:3b:
                    c0:18:70:4e:f8:4b:d3:13:0c:a1:6f:ae:e7:fd:07:
                    b0:ef:8e:13:6d:62:e3:f8:47:a5:f9:47:77:b3:5c:
                    01:b5:f1:d5:61:ae:f4:bb:f1:39:d2:88:42:9e:87:
                    23:2e:19:67:5e:d3:81:39:5e:f4:f3:09:90:44:62:
                    71:8c:ad:e5:ba:ed:c1:51:af:ae:5d:b1:76:c3:48:
                    a9:a7:d3:7d:05:62:6f:b2:84:54:b8:46:db:a2:1b:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:01:BB:9E:86:16:32:3E:4A:43:92:1A:5A:1D:AA:73:B7:CC:2E:DD
            X509v3 Authority Key Identifier:
                keyid:3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/B70755C04C7311F1ACB58F89C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.167.0/24
                  103.28.73.0/24
                  103.241.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:a4:c0:ce:95:90:2e:17:8a:db:96:42:bd:50:c2:45:66:21:
         3c:25:26:a7:11:f7:18:b7:bf:17:a9:6c:c1:18:cb:20:db:6a:
         c4:f2:06:c4:ed:1e:a4:98:32:69:41:b9:91:df:72:ee:1e:a4:
         dd:bf:c1:a0:e4:cb:34:73:0d:bc:d3:01:fb:42:13:ed:74:47:
         de:b2:65:d7:26:b6:b4:6e:0b:30:e4:f7:3f:bb:5a:f4:7a:a2:
         c1:8b:31:1d:41:df:e8:af:4d:a4:d1:c8:f5:ed:a2:09:bf:4a:
         f7:5d:81:23:77:3f:03:09:ee:f8:ac:a8:25:2a:d1:ae:c6:fe:
         e2:d9:04:fe:06:b8:40:06:0c:0c:26:d0:a6:ab:40:8c:15:63:
         a1:6f:79:94:e9:70:09:d2:20:b9:28:be:68:91:2d:5a:c6:22:
         ca:a0:9a:91:91:df:50:c3:f7:9f:15:05:48:b2:96:27:64:60:
         85:18:f3:14:cf:a4:17:3d:47:03:31:83:02:d2:2f:f2:b4:b3:
         96:09:af:ef:c9:77:82:15:d8:fb:d1:e0:90:9a:60:83:71:d0:
         d0:e8:74:41:fa:e8:b9:48:e0:51:28:96:84:fe:87:da:0a:dc:
         51:4f:eb:9e:f5:fb:6a:b7:7d:b3:77:78:7d:f5:8d:a4:e2:7d:
         74:4c:bd:88
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
Njg5OTExMC8GA1UEBRMoM0E2RUU2RjAxNTk0MUY1MDcyQUU3MTM5MUIxNzIwNThB
MDE5MDE0MjAeFw0yNjA3MjkxMDU5MDZaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNjlkY2ZhLTQwNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgjlbRLBzc7B/iL1p+h1AujVionVfVmGrIWevc4D8H73nP5G/4GFKNEx85I1aO
adUvKCijMndhYlP8kJZNcH2HgTG8HrMnvkusPSwoKbEINVztXLbBUv2d+GtJVAdP
IFKQr3PsANJaJDpwvsnLXDPpAvLojILHukIxyOIzkrAAucNMf+9yEIk5NNQf5MWD
UPTzYQUlDbFF7fXEUIen1lUe5RzqO8AYcE74S9MTDKFvruf9B7DvjhNtYuP4R6X5
R3ezXAG18dVhrvS78TnSiEKehyMuGWde04E5XvTzCZBEYnGMreW67cFRr65dsXbD
SKmn030FYm+yhFS4RtuiG/UbAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUVQG7noYW
Mj5KQ5IaWh2qc7fMLt0wHwYDVR0jBBgwFoAUOm7m8BWUH1ByrnE5GxcgWKAZAUIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODk5LzYwQTIwRkZFNEM3
MzExRjE5QUJERTAwNUM0ODMzNzczL09tN204QldVSDFCeXJuRTVHeGNnV0tBWkFV
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT203bThCV1VIMUJ5cm5FNUd4Y2dXS0FaQVVJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Njg5OS82MEEyMEZGRTRDNzMxMUYxOUFCREUwMDVDNDgzMzc3My9CNzA3NTVDMDRD
NzMxMUYxQUNCNThGODlDNDgzMzc3My5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE
AgABMBIDBABnFqcDBABnHEkDBABn8WgwDQYJKoZIhvcNAQELBQADggEBAHekwM6V
kC4XituWQr1QwkVmITwlJqcR9xi3vxepbMEYyyDbasTyBsTtHqSYMmlBuZHfcu4e
pN2/waDkyzRzDbzTAftCE+10R96yZdcmtrRuCzDk9z+7WvR6osGLMR1B3+ivTaTR
yPXtogm/SvddgSN3PwMJ7visqCUq0a7G/uLZBP4GuEAGDAwm0KarQIwVY6FveZTp
cAnSILkovmiRLVrGIsqgmpGR31DD958VBUiylidkYIUY8xTPpBc9RwMxgwLSL/K0
s5YJr+/Jd4IV2PvR4JCaYINx0NDodEH66LlI4FEoloT+h9oK3FFP6571+2q3fbN3
eH31jaTifXRMvYg=
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:51:50 2026 by rpki-client