Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/BC17B1DCB96311EDA3070C82C4F9AE02.roa
File:                     BC17B1DCB96311EDA3070C82C4F9AE02.roa (raw, json)
Hash identifier:          ainrPW4caW26MCWS9x7JgevvYU6cLT5nNG0wHcsMmaw=
Subject key identifier:   EB:45:AA:EF:83:CB:AE:25:64:A8:B0:67:B2:B2:CE:97:56:CF:AA:78
Certificate issuer:       /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial:       047B
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/BC17B1DCB96311EDA3070C82C4F9AE02.roa
Signing time:             Mon 21 Sep 2026 00:50:51 +0000
ROA not before:           Mon 21 Sep 2026 00:50:51 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     136984
IP address blocks:        103.173.251.0/24 maxlen: 24
                          2406:5a00:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
        Validity
            Not Before: Sep 21 00:50:51 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ab07f6b-a92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:29:a5:79:ee:58:38:4e:08:8f:de:35:89:
                    d1:89:8c:7a:9e:fd:37:76:52:bf:b3:bb:60:5e:b9:
                    4b:90:8d:de:cf:0c:94:c6:77:58:c8:83:86:74:01:
                    8d:24:2d:ea:fb:ee:e3:7e:52:11:45:30:63:31:64:
                    5c:74:52:9d:f9:e8:19:cb:3d:c4:6b:86:93:2d:6d:
                    57:0f:fe:e4:ef:7b:eb:9d:23:13:65:dd:63:52:9b:
                    ac:0f:1c:13:14:a9:bc:fb:e1:a8:20:50:73:68:38:
                    12:a7:ed:2e:5f:b9:6a:3f:06:e0:12:b8:f0:3e:82:
                    f8:dc:1f:50:23:79:29:40:79:ae:7d:5d:59:66:90:
                    53:31:dc:01:a7:5f:3a:38:d3:83:32:b2:b7:ec:c5:
                    fd:69:65:07:e8:c0:d2:64:5b:20:9e:01:ba:79:de:
                    df:9a:4c:87:0b:37:2d:5d:97:fa:af:f1:3a:23:04:
                    33:ac:39:bf:fa:1c:bc:6b:db:dc:19:47:62:55:76:
                    02:43:59:f4:18:2a:5f:16:43:20:0c:4e:d7:68:5c:
                    11:25:02:d5:7d:b8:1c:91:95:04:db:74:41:bf:2a:
                    05:86:e3:01:5d:36:63:d0:52:81:ff:22:67:00:5a:
                    13:a0:ad:4c:cf:36:4f:18:72:3c:a5:c0:e7:7d:30:
                    63:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:AA:EF:83:CB:AE:25:64:A8:B0:67:B2:B2:CE:97:56:CF:AA:78
            X509v3 Authority Key Identifier:
                keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/BC17B1DCB96311EDA3070C82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.251.0/24
                IPv6:
                  2406:5a00:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:de:ba:9f:f0:d3:30:77:2d:ba:bc:8c:dd:aa:f1:9b:9c:9d:
         05:70:31:f4:79:79:0d:77:cb:e8:ab:53:8a:1b:49:90:fe:73:
         55:16:a5:9a:29:2e:2e:43:87:ef:65:ba:bf:6a:2b:f6:90:95:
         19:1a:8a:f4:77:b8:5b:34:36:eb:12:cf:bd:d0:41:3b:9d:f2:
         f7:b4:8e:ea:aa:71:39:49:9b:5c:fa:0e:12:ac:83:46:f0:85:
         64:bc:6d:79:c6:fb:20:e1:d0:77:9b:2a:b8:64:83:d8:6d:08:
         6e:e9:33:0d:37:55:aa:23:c1:26:80:61:ee:4d:b4:c4:ae:1c:
         9e:44:fe:3b:24:ca:14:90:a6:00:80:cb:ab:33:96:7a:3c:4e:
         27:c5:88:72:8c:09:ee:a1:f7:5a:be:2a:dc:21:b7:f8:14:a4:
         e8:5b:21:9c:ab:92:d5:81:97:14:38:2f:50:1a:8f:1d:f4:49:
         31:d8:a1:24:e1:8f:cc:dd:3b:40:03:65:47:63:e4:d8:46:18:
         fd:8a:9f:cc:a1:77:34:3e:95:76:ab:f3:b3:04:1b:3a:b4:48:
         77:57:b2:7f:c0:8d:54:a8:5d:e7:97:7e:e5:63:e3:08:29:b0:
         96:18:e5:03:0e:3f:c0:b7:d2:a4:d0:a2:0b:a7:1e:c5:7f:6a:
         cb:61:f0:9b
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMyNjkxMTAvBgNVBAUTKDMwRTIwNjFGN0MyMEJEODQzQkVFNTM3MkMxMzIxQzM1
RkJCMUQzRUYwHhcNMjYwOTIxMDA1MDUxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIwN2Y2Yi1hOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0lQppXnuWDhOCI/eNYnRiYx6nv03dlK/s7tgXrlLkI3ezwyUxndYyIOGdAGN
JC3q++7jflIRRTBjMWRcdFKd+egZyz3Ea4aTLW1XD/7k73vrnSMTZd1jUpusDxwT
FKm8++GoIFBzaDgSp+0uX7lqPwbgErjwPoL43B9QI3kpQHmufV1ZZpBTMdwBp186
ONODMrK37MX9aWUH6MDSZFsgngG6ed7fmkyHCzctXZf6r/E6IwQzrDm/+hy8a9vc
GUdiVXYCQ1n0GCpfFkMgDE7XaFwRJQLVfbgckZUE23RBvyoFhuMBXTZj0FKB/yJn
AFoToK1MzzZPGHI8pcDnfTBjKwIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFOtFqu+D
y64lZKiwZ7KyzpdWz6p4MB8GA1UdIwQYMBaAFDDiBh98IL2EO+5TcsEyHDX7sdPv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CQTY3NkUzMENG
RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZUTc3bE55d1RJY05mdXgw
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PSUdIM3dndllRNzdsTnl3VEljTmZ1eDAtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkMyNjkvQkE2NzZFMzBDRkU1MTFFQzk0QkJDNzVBQzRGOUFFMDIvQkMxN0IxRENC
OTYzMTFFREEzMDcwQzgyQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM
BAIAATAGAwQAZ637MA4EAgACMAgDBgAkBloAATANBgkqhkiG9w0BAQsFAAOCAQEA
u966n/DTMHcturyM3arxm5ydBXAx9Hl5DXfL6KtTihtJkP5zVRalmikuLkOH72W6
v2or9pCVGRqK9He4WzQ26xLPvdBBO53y97SO6qpxOUmbXPoOEqyDRvCFZLxtecb7
IOHQd5squGSD2G0IbukzDTdVqiPBJoBh7k20xK4cnkT+OyTKFJCmAIDLqzOWejxO
J8WIcowJ7qH3Wr4q3CG3+BSk6FshnKuS1YGXFDgvUBqPHfRJMdihJOGPzN07QANl
R2Pk2EYY/YqfzKF3ND6VdqvzswQbOrRId1eyf8CNVKhd55d+5WPjCCmwlhjlAw4/
wLfSpNCiC6cexX9qy2Hwmw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:42:28 2026 by rpki-client