Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa
File:                     A074721624CA11EF93486579C4F9AE02.roa (raw, json)
Hash identifier:          0ZjczDm7aIX+bNxeqOM4pFjf0/nzgG8TxDhOz7G1+BA=
Subject key identifier:   83:90:E1:95:E4:08:2A:36:59:AA:51:41:92:EF:F0:66:A3:BD:E0:ED
Certificate issuer:       /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial:       017B
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:16:26 +0000
ROA not before:           Thu 23 Oct 2025 07:19:19 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134165
IP address blocks:        103.37.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
                          rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
        Validity
            Not Before: Oct 23 07:19:19 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a59bba-a345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:c8:81:d5:33:a2:8f:44:d9:3f:c1:14:29:
                    ff:dd:e1:08:a7:99:77:3d:71:9d:df:5b:cd:d1:19:
                    08:8b:22:0d:7f:e3:86:2c:4e:d2:9a:f5:c2:42:92:
                    e9:23:de:f2:e8:e5:e4:61:4e:25:8b:33:a8:91:31:
                    af:42:c8:1f:30:b3:dc:47:c3:31:2c:e7:9b:26:e5:
                    d1:0f:17:51:3e:4d:27:4d:07:8c:42:44:ae:79:21:
                    50:25:fb:be:21:48:6e:95:86:d4:e1:90:d6:e9:9b:
                    be:60:a8:1e:9c:e2:46:bf:dc:d7:e0:2c:cf:1e:05:
                    69:b9:8a:e7:68:11:c8:82:06:40:df:23:af:75:65:
                    06:73:3d:4c:ce:83:45:fb:ca:57:24:c8:9e:9a:3d:
                    de:4a:be:33:d1:75:d5:fb:14:33:85:ac:f9:b4:aa:
                    66:38:38:87:8c:82:79:b4:49:fc:0f:9f:cd:fd:f2:
                    8f:8e:b1:e9:d1:63:a4:9f:f5:89:64:fd:09:6a:05:
                    e9:3d:38:b2:09:68:c2:d6:c2:fb:f8:d7:4c:2e:61:
                    d9:87:4c:c5:ec:2b:c4:b0:68:09:19:e8:80:23:68:
                    80:14:4e:d6:eb:10:67:06:78:ae:ba:cf:51:5c:c8:
                    3c:0d:4c:a9:bc:cf:cf:cd:99:6d:df:29:d6:a3:80:
                    a5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:90:E1:95:E4:08:2A:36:59:AA:51:41:92:EF:F0:66:A3:BD:E0:ED
            X509v3 Authority Key Identifier:
                keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:e3:27:d6:45:1d:bf:df:9a:7f:ec:85:f8:b8:fb:93:5e:90:
         d9:6c:2a:2d:8f:bf:a6:53:db:88:e9:72:35:e5:df:36:99:b1:
         68:4b:49:c0:48:0b:36:96:43:42:4f:99:80:6a:35:58:8d:95:
         95:4c:65:f5:a8:03:da:36:30:03:59:f2:b1:15:d7:bd:59:c6:
         cc:62:98:c9:12:44:b4:e6:83:eb:de:08:dd:6a:9a:13:ec:0f:
         15:b9:ad:c1:97:c4:b6:73:9b:38:7b:aa:fc:41:4e:7d:be:53:
         c8:fd:0e:25:dd:d4:8a:2a:38:c7:d8:12:71:8e:b3:1e:ff:83:
         e5:9b:79:b2:18:e5:69:c5:be:df:fa:61:d4:a1:d1:d3:24:6d:
         0c:5b:d3:b1:ca:9b:12:30:73:03:a0:e6:b1:95:2b:88:08:70:
         fe:b9:ef:d7:ce:9d:6c:c5:e6:9a:b8:5f:02:7f:95:8f:8c:fa:
         e1:11:8a:5c:dc:c8:13:e1:f7:0b:9e:30:d4:33:4c:b5:f2:ca:
         33:0e:5e:84:2d:2c:dd:4d:8b:46:82:01:ea:5d:d9:27:dc:78:
         67:e2:70:ea:c8:aa:54:14:1a:fa:e4:a3:7e:39:ac:db:89:e5:
         a7:a2:a4:d6:58:96:24:c9:1e:5d:9b:dd:67:cc:5e:44:da:82:
         00:8e:c4:29
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE
NTk1OUYzMjUwHhcNMjUxMDIzMDcxOTE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWJiYS1hMzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBHIgdUzoo9E2T/BFCn/3eEIp5l3PXGd31vN0RkIiyINf+OGLE7SmvXCQpLp
I97y6OXkYU4lizOokTGvQsgfMLPcR8MxLOebJuXRDxdRPk0nTQeMQkSueSFQJfu+
IUhulYbU4ZDW6Zu+YKgenOJGv9zX4CzPHgVpuYrnaBHIggZA3yOvdWUGcz1MzoNF
+8pXJMiemj3eSr4z0XXV+xQzhaz5tKpmODiHjIJ5tEn8D5/N/fKPjrHp0WOkn/WJ
ZP0JagXpPTiyCWjC1sL7+NdMLmHZh0zF7CvEsGgJGeiAI2iAFE7W6xBnBniuus9R
XMg8DUypvM/PzZlt3ynWo4ClFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIOQ4ZXk
CCo2WapRQZLv8GajveDtMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0
QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJDOEEvNjFFQzQ5MTYyNEM5MTFFRjlDOEM2MjU5QzRGOUFFMDIvQTA3NDcyMTYy
NENBMTFFRjkzNDg2NTc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZyXkMA0GCSqGSIb3DQEBCwUAA4IBAQBl4yfWRR2/35p/7IX4uPuT
XpDZbCotj7+mU9uI6XI15d82mbFoS0nASAs2lkNCT5mAajVYjZWVTGX1qAPaNjAD
WfKxFde9WcbMYpjJEkS05oPr3gjdapoT7A8Vua3Bl8S2c5s4e6r8QU59vlPI/Q4l
3dSKKjjH2BJxjrMe/4Plm3myGOVpxb7f+mHUodHTJG0MW9OxypsSMHMDoOaxlSuI
CHD+ue/Xzp1sxeaauF8Cf5WPjPrhEYpc3MgT4fcLnjDUM0y18sozDl6ELSzdTYtG
ggHqXdkn3Hhn4nDqyKpUFBr65KN+OazbieWnoqTWWJYkyR5dm91nzF5E2oIAjsQp
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:39 2026 by rpki-client