Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/E5723CA260C111F0A9EB0333C4F9AE02.roa
File:                     E5723CA260C111F0A9EB0333C4F9AE02.roa (raw, json)
Hash identifier:          vxcGwI8Luk+cexqrtDI44NCym1uBtp6Sxq28P5I1c3Q=
Subject key identifier:   06:66:14:4E:D9:DC:95:E2:AD:ED:54:3E:EE:0D:7D:0B:31:9E:B7:E1
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       B5
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/E5723CA260C111F0A9EB0333C4F9AE02.roa
Signing time:             Tue 09 Jun 2026 07:39:19 +0000
ROA not before:           Tue 09 Jun 2026 07:39:19 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     151335
IP address blocks:        103.105.22.0/24 maxlen: 24
                          103.196.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Jun  9 07:39:19 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a27c327-1a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:e6:d2:23:28:7e:af:71:17:c8:f5:e9:a4:
                    87:8b:f5:83:b1:ff:29:a0:e2:b8:4d:90:43:03:c6:
                    7d:d1:ff:a1:f0:33:f1:b8:cf:4a:f7:1a:47:73:63:
                    ec:44:e8:60:41:81:f7:b9:fc:75:0a:8e:78:10:f1:
                    f2:c6:18:f2:99:76:30:1e:2a:31:96:c0:26:e4:63:
                    15:69:dd:cf:f8:6b:e4:e5:aa:57:a5:e5:0f:ab:5e:
                    e6:0f:bf:52:16:94:e7:51:de:50:39:52:af:04:66:
                    e9:23:b8:95:90:62:75:3e:5a:8a:95:95:37:42:ba:
                    80:41:ff:ec:01:58:0f:6e:79:ab:87:5f:5a:1b:3c:
                    fb:58:24:63:3f:d9:f5:0e:b9:b1:55:2b:25:4c:e1:
                    34:a7:66:98:87:a7:aa:d6:0f:1f:da:36:b8:6e:95:
                    dc:9d:a8:12:72:1c:e1:fe:47:82:d4:3b:32:55:c3:
                    c5:5d:ac:ce:cd:97:5d:8b:72:33:2f:38:e6:94:5c:
                    eb:34:96:f1:c6:b1:4f:87:8a:89:88:f2:3b:94:43:
                    6e:40:77:ee:27:13:2e:ed:17:7c:95:84:3c:76:08:
                    8c:4a:8a:46:a5:09:e9:d2:21:40:ed:5b:9f:44:27:
                    a2:8a:8c:5c:60:30:6f:8c:39:1a:06:11:30:f1:b3:
                    be:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:66:14:4E:D9:DC:95:E2:AD:ED:54:3E:EE:0D:7D:0B:31:9E:B7:E1
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/E5723CA260C111F0A9EB0333C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.22.0/24
                  103.196.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:80:c0:f5:33:e2:97:a1:96:be:d1:37:a7:d3:fb:ac:bf:37:
         7e:42:0d:0c:62:79:f8:39:55:8b:bb:54:77:21:f9:67:2f:5d:
         7f:3e:1a:ee:a5:c5:2b:18:a1:3d:52:0e:00:09:3e:65:48:72:
         af:47:cc:17:bc:e5:1d:5f:ea:27:30:a8:4d:d7:b6:cd:99:11:
         4e:b2:45:f4:e7:fa:2a:a6:0d:f3:8b:76:e3:04:e2:89:2d:f9:
         d7:57:ab:ce:0a:64:9f:a4:e2:c3:a8:30:ce:8a:21:6a:8b:ed:
         c2:db:6d:da:93:3f:92:85:3c:be:40:3c:c8:30:c9:96:f0:8c:
         2b:a0:7c:14:1b:92:32:44:c3:7e:76:02:d5:ee:1b:ca:73:45:
         17:55:e6:78:f3:59:24:a1:0d:b7:0e:47:2b:b0:c2:d4:00:84:
         e5:72:22:11:6d:0e:03:80:bf:60:a2:93:00:47:39:c4:96:94:
         13:de:4f:65:f1:dd:04:e6:cc:d4:7e:6e:b6:68:3a:81:03:9a:
         0e:34:9a:b0:d4:0c:34:6d:1e:2d:39:13:86:fa:1b:12:d0:03:
         12:64:33:a4:3f:73:85:9e:9e:05:2d:5e:17:8c:63:e8:b5:1c:
         d8:84:b8:55:34:be:46:74:9d:2e:43:e4:bc:4b:3b:0e:95:3c:
         9c:12:f6:c9
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1MTUxMTAvBgNVBAUTKDM2REI0NEQ0QzE1OTg4NjczODIxNUE1NjEwQjExMEMy
NDQ4NkNBNTYwHhcNMjYwNjA5MDczOTE5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI3YzMyNy0xYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl6rm0iMofq9xF8j16aSHi/WDsf8poOK4TZBDA8Z90f+h8DPxuM9K9xpHc2Ps
ROhgQYH3ufx1Co54EPHyxhjymXYwHioxlsAm5GMVad3P+Gvk5apXpeUPq17mD79S
FpTnUd5QOVKvBGbpI7iVkGJ1PlqKlZU3QrqAQf/sAVgPbnmrh19aGzz7WCRjP9n1
DrmxVSslTOE0p2aYh6eq1g8f2ja4bpXcnagSchzh/keC1DsyVcPFXazOzZddi3Iz
LzjmlFzrNJbxxrFPh4qJiPI7lENuQHfuJxMu7Rd8lYQ8dgiMSopGpQnp0iFA7Vuf
RCeiioxcYDBvjDkaBhEw8bO+LwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAZmFE7Z
3JXire1UPu4NfQsxnrfhMB8GA1UdIwQYMBaAFDbbRNTBWYhnOCFaVhCxEMJEhspW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjUxNS84NEM0Njc0QTYw
QzExMUYwOEJENUI4MkVDNEY5QUUwMi9OdHRFMU1GWmlHYzRJVnBXRUxFUXdrU0d5
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL050dEUxTUZaaUdjNElWcFdFTEVRd2tTR3lsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzY1MTUvODRDNDY3NEE2MEMxMTFGMDhCRDVCODJFQzRGOUFFMDIvRTU3MjNDQTI2
MEMxMTFGMEE5RUIwMzMzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ2kWAwQAZ8S7MA0GCSqGSIb3DQEBCwUAA4IBAQAHgMD1M+KXoZa+
0Ten0/usvzd+Qg0MYnn4OVWLu1R3IflnL11/PhrupcUrGKE9Ug4ACT5lSHKvR8wX
vOUdX+onMKhN17bNmRFOskX05/oqpg3zi3bjBOKJLfnXV6vOCmSfpOLDqDDOiiFq
i+3C223akz+ShTy+QDzIMMmW8IwroHwUG5IyRMN+dgLV7hvKc0UXVeZ481kkoQ23
DkcrsMLUAITlciIRbQ4DgL9gopMARznElpQT3k9l8d0E5szUfm62aDqBA5oONJqw
1Aw0bR4tOROG+hsS0AMSZDOkP3OFnp4FLV4XjGPotRzYhLhVNL5GdJ0uQ+S8SzsO
lTycEvbJ
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:55:36 2026 by rpki-client