Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/61A85BEE21CF11EBA0C85857C4F9AE02.roa
File:                     61A85BEE21CF11EBA0C85857C4F9AE02.roa (raw, json)
Hash identifier:          k25mGg2F5n8UJwp6eRSCGIM2AwOiMLd27y+spCrOgFE=
Subject key identifier:   F7:B1:ED:3D:45:D9:FD:6D:7B:07:DC:7F:A0:6D:8B:6B:B2:7E:57:FA
Certificate issuer:       /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Certificate serial:       103E
Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/61A85BEE21CF11EBA0C85857C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:21:28 +0000
ROA not before:           Tue 30 Sep 2025 17:46:14 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138538
IP address blocks:        103.99.40.0/23 maxlen: 24
                          103.132.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
                          rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4158 (0x103e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
        Validity
            Not Before: Sep 30 17:46:14 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47598-d464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:e8:48:19:20:6e:5a:1a:1c:14:7d:bc:b6:
                    f4:15:2f:77:df:a9:0e:b5:90:d4:3a:f4:03:1b:de:
                    53:f6:4b:40:bf:96:de:87:c5:2e:c1:61:48:a6:85:
                    33:82:66:b2:70:a9:83:59:c3:51:3b:1c:cb:b5:30:
                    d1:ed:b9:11:6c:59:a4:ba:c6:9e:8d:6e:c9:00:61:
                    17:c3:32:90:00:7e:5b:ad:2d:07:3e:14:48:ba:82:
                    bb:92:56:4b:76:1f:4b:26:8c:7d:c8:c9:93:b4:8c:
                    e6:ab:8b:0b:84:31:c5:b6:e8:5a:94:69:e4:1e:58:
                    da:8d:52:68:26:4a:68:c6:76:09:48:a8:77:d0:23:
                    63:38:3e:6b:0b:dc:de:ba:1b:54:fc:5b:8a:37:eb:
                    80:0f:6f:20:e8:bf:a6:d5:0a:1d:61:af:07:e7:5c:
                    a7:2e:0b:00:46:fc:98:5f:a6:cf:c8:9d:40:78:d2:
                    e6:7f:06:e7:24:55:9b:98:75:5b:17:9c:ac:93:06:
                    53:5a:5f:88:db:98:b3:c5:93:92:b0:c0:ea:3b:18:
                    47:04:25:a7:94:fe:95:37:a3:e0:f9:cb:2c:e0:0b:
                    c1:18:35:53:63:39:30:00:ff:cc:79:c9:80:44:23:
                    92:a6:d6:50:c2:be:7d:89:25:f9:85:6b:f5:6a:90:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B1:ED:3D:45:D9:FD:6D:7B:07:DC:7F:A0:6D:8B:6B:B2:7E:57:FA
            X509v3 Authority Key Identifier:
                keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/61A85BEE21CF11EBA0C85857C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.40.0/23
                  103.132.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:f1:49:e5:2c:d2:5e:00:b8:f1:1e:b0:55:84:82:34:38:4f:
         d4:11:5a:52:7f:37:fc:a5:b9:c5:ea:41:bf:00:84:7a:b7:6b:
         88:f2:89:b4:5e:df:5c:70:e6:1f:bd:8c:d6:39:75:e1:a9:52:
         e5:0a:61:08:72:09:51:d6:6b:67:62:b0:c1:e1:37:b9:1f:41:
         b7:8a:7b:bc:8b:0c:4c:40:a9:77:9d:d6:6a:88:09:f8:6f:9b:
         fe:a0:f5:54:64:dc:4e:ae:e6:6b:2f:6b:00:9c:01:25:f2:b0:
         5b:c3:8a:e1:8f:4e:75:62:34:06:35:d9:7e:1a:1f:6e:1b:4f:
         ca:0f:d3:b8:0a:62:d1:17:05:ab:4e:70:0a:e2:b8:cd:9a:10:
         64:ad:41:65:20:bf:42:6b:71:bd:bb:61:bd:06:27:ab:f0:7b:
         8e:b4:bb:f2:2b:a5:95:c0:4a:60:94:bf:fe:e5:b1:94:4d:61:
         69:fc:aa:12:fd:eb:42:bf:9b:f3:b8:d8:7e:bd:56:85:35:7d:
         e6:21:3e:d1:70:d7:19:d6:97:49:cd:43:38:71:94:1d:08:ff:
         15:0a:07:9d:5a:ba:cc:b5:3e:b9:bd:74:28:47:78:86:50:15:
         96:75:e1:6c:fd:dc:f3:54:f6:5a:df:a2:38:c5:37:ce:f5:2f:
         e3:52:fe:bb
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICED4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM2QjQxMTAvBgNVBAUTKDZDQTZCMkFDMUREMTdCMDE0REI2Qzc2NzI3OUQwOEM2
NkU0RUZDMDUwHhcNMjUwOTMwMTc0NjE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzU5OC1kNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv7noSBkgbloaHBR9vLb0FS9336kOtZDUOvQDG95T9ktAv5beh8UuwWFIpoUz
gmaycKmDWcNROxzLtTDR7bkRbFmkusaejW7JAGEXwzKQAH5brS0HPhRIuoK7klZL
dh9LJox9yMmTtIzmq4sLhDHFtuhalGnkHljajVJoJkpoxnYJSKh30CNjOD5rC9ze
uhtU/FuKN+uAD28g6L+m1QodYa8H51ynLgsARvyYX6bPyJ1AeNLmfwbnJFWbmHVb
F5yskwZTWl+I25izxZOSsMDqOxhHBCWnlP6VN6Pg+css4AvBGDVTYzkwAP/MecmA
RCOSptZQwr59iSX5hWv1apBJ2QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPex7T1F
2f1tewfcf6Bti2uyflf6MB8GA1UdIwQYMBaAFGymsqwd0XsBTbbHZyedCMZuTvwF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZCNC83MjZGNTFDMjYz
RjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3Rk50c2RuSjUwSXhtNU9f
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JLYXlyQjNSZXdGTnRzZG5KNTBJeG01T19BVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkM2QjQvNzI2RjUxQzI2M0YyMTFFOUJCMjBERDQ1QzRGOUFFMDIvNjFBODVCRUUy
MUNGMTFFQkEwQzg1ODU3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZ2MoAwQBZ4TqMA0GCSqGSIb3DQEBCwUAA4IBAQBz8UnlLNJeALjx
HrBVhII0OE/UEVpSfzf8pbnF6kG/AIR6t2uI8om0Xt9ccOYfvYzWOXXhqVLlCmEI
cglR1mtnYrDB4Te5H0G3inu8iwxMQKl3ndZqiAn4b5v+oPVUZNxOruZrL2sAnAEl
8rBbw4rhj051YjQGNdl+Gh9uG0/KD9O4CmLRFwWrTnAK4rjNmhBkrUFlIL9Ca3G9
u2G9Bier8HuOtLvyK6WVwEpglL/+5bGUTWFp/KoS/etCv5vzuNh+vVaFNX3mIT7R
cNcZ1pdJzUM4cZQdCP8VCgedWrrMtT65vXQoR3iGUBWWdeFs/dzzVPZa36I4xTfO
9S/jUv67
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:02 2026 by rpki-client