Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/9A4B6146EED111EC9BDD4C49C4F9AE02.roa
File:                     9A4B6146EED111EC9BDD4C49C4F9AE02.roa (raw, json)
Hash identifier:          yIITaHKhLktq8hIVDB/hFkrrSu/yxWdnPRfSTHr4wTQ=
Subject key identifier:   BE:6D:DB:63:F9:07:DB:2E:36:A2:27:EF:6E:BC:E6:42:BC:DC:88:18
Certificate issuer:       /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Certificate serial:       03AA
Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/9A4B6146EED111EC9BDD4C49C4F9AE02.roa
Signing time:             Mon 27 Jul 2026 01:49:42 +0000
ROA not before:           Mon 27 Jul 2026 01:49:42 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     149868
IP address blocks:        103.189.218.0/23 maxlen: 24
                          2001:df0:db40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
                          rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938 (0x3aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
        Validity
            Not Before: Jul 27 01:49:42 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a66b936-4879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:09:38:28:37:42:4c:67:d6:a5:88:8b:26:
                    41:82:a2:44:7d:83:c6:ee:10:b1:03:e6:3c:22:2b:
                    ff:7c:6b:49:1d:54:68:2d:b8:4f:20:f1:93:70:44:
                    ea:e0:f4:9c:a8:cb:da:97:da:ae:b8:c4:71:7d:9f:
                    2c:bc:21:70:2c:3e:1b:35:92:c2:60:7e:f8:82:23:
                    7a:03:ef:71:b9:93:ab:7d:8e:a4:3f:57:25:2c:6d:
                    d6:4f:59:0c:e3:42:47:73:74:75:5b:da:3f:84:34:
                    1c:b3:ac:3b:a2:f3:68:73:19:69:36:fd:37:05:4d:
                    d1:3d:1b:52:2f:14:0d:96:93:0f:54:2b:76:31:1c:
                    1d:67:af:5b:b7:da:bb:3b:3f:5f:8f:92:cc:4f:21:
                    7d:d0:c6:4f:a4:8a:e4:c6:40:72:00:36:21:16:26:
                    0c:c1:42:a3:30:1d:22:11:3b:81:83:eb:4f:b3:8e:
                    b9:e7:63:2b:51:88:ac:51:64:63:b2:a0:ed:97:40:
                    c1:fd:79:2d:f9:11:a9:fd:6e:5d:58:8c:44:3b:2d:
                    86:18:54:56:2c:38:14:0e:52:da:6e:55:6f:a9:fd:
                    72:ef:38:2a:1e:53:1b:b6:aa:f8:81:84:91:99:87:
                    1b:ba:69:73:4a:bd:8f:95:cc:01:62:84:45:77:a0:
                    49:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6D:DB:63:F9:07:DB:2E:36:A2:27:EF:6E:BC:E6:42:BC:DC:88:18
            X509v3 Authority Key Identifier:
                keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/9A4B6146EED111EC9BDD4C49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.218.0/23
                IPv6:
                  2001:df0:db40::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:92:ca:fe:25:aa:d1:ff:08:2c:80:3f:b7:85:48:06:77:b1:
         fe:4c:a7:10:d8:73:7a:6b:66:f7:fe:28:2d:58:4d:98:47:ea:
         83:82:3f:f8:3e:f0:2e:14:74:27:0e:20:f8:5d:e9:ae:fe:91:
         ef:33:69:95:a9:db:0d:7c:da:be:1a:c1:1d:fc:b4:18:a4:0a:
         f2:20:c6:07:c9:19:9b:67:94:b9:e6:b0:68:4c:ad:05:9d:41:
         4a:02:8d:58:cf:98:ea:df:08:84:d1:02:ad:09:cd:21:73:7a:
         c5:bc:ee:b5:ed:f9:3d:d1:af:b0:0e:43:fd:8f:32:00:fd:90:
         1c:36:12:23:33:0e:10:a1:5e:8d:2f:0f:4d:61:5d:ee:68:8e:
         10:1e:6b:ff:51:ea:5e:a6:3d:54:01:c4:0a:6c:c3:23:22:96:
         fa:cc:03:09:61:b5:c6:81:d3:df:7d:bf:08:8c:32:3f:0a:e5:
         a0:f9:c3:0b:50:28:85:26:f1:83:58:90:6b:c2:40:e1:99:98:
         78:53:e4:39:89:53:d9:1e:2e:9e:b1:14:79:23:79:12:32:af:
         bd:82:b8:4d:14:d5:8b:04:18:a7:73:18:f4:b5:02:60:98:81:
         2f:37:c0:cb:29:31:ad:de:fe:c7:64:c7:71:7c:b3:04:a4:e3:
         25:1d:42:ea
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMxNzQxMTAvBgNVBAUTKEU0MjJCRjAyNjE0MEQyMDNFRkQ2QkZERUFFRTI2OEFB
OEIwNDY2RDUwHhcNMjYwNzI3MDE0OTQyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY2YjkzNi00ODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQcJOCg3Qkxn1qWIiyZBgqJEfYPG7hCxA+Y8Iiv/fGtJHVRoLbhPIPGTcETq
4PScqMval9quuMRxfZ8svCFwLD4bNZLCYH74giN6A+9xuZOrfY6kP1clLG3WT1kM
40JHc3R1W9o/hDQcs6w7ovNocxlpNv03BU3RPRtSLxQNlpMPVCt2MRwdZ69bt9q7
Oz9fj5LMTyF90MZPpIrkxkByADYhFiYMwUKjMB0iETuBg+tPs46552MrUYisUWRj
sqDtl0DB/Xkt+RGp/W5dWIxEOy2GGFRWLDgUDlLablVvqf1y7zgqHlMbtqr4gYSR
mYcbumlzSr2PlcwBYoRFd6BJWwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFL5t22P5
B9suNqIn72685kK83IgYMB8GA1UdIwQYMBaAFOQivwJhQNID79a/3q7iaKqLBGbV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzE3NC9CMTMxRjg5Q0VF
Q0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBnUHYxcl9lcnVKb3Fvc0Va
dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVDS19BbUZBMGdQdjFyX2VydUpvcW9zRVp0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzMxNzQvQjEzMUY4OUNFRUNEMTFFQzhDRjQ0NzFFQzRGOUFFMDIvOUE0QjYxNDZF
RUQxMTFFQzlCREQ0QzQ5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ73aMA8EAgACMAkDBwAgAQ3w20AwDQYJKoZIhvcNAQELBQADggEB
AG6Syv4lqtH/CCyAP7eFSAZ3sf5MpxDYc3prZvf+KC1YTZhH6oOCP/g+8C4UdCcO
IPhd6a7+ke8zaZWp2w182r4awR38tBikCvIgxgfJGZtnlLnmsGhMrQWdQUoCjVjP
mOrfCITRAq0JzSFzesW87rXt+T3Rr7AOQ/2PMgD9kBw2EiMzDhChXo0vD01hXe5o
jhAea/9R6l6mPVQBxApswyMilvrMAwlhtcaB0999vwiMMj8K5aD5wwtQKIUm8YNY
kGvCQOGZmHhT5DmJU9keLp6xFHkjeRIyr72CuE0U1YsEGKdzGPS1AmCYgS83wMsp
Ma3e/sdkx3F8swSk4yUdQuo=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:46:40 2026 by rpki-client