Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/26FB999C92FC11EE9104E34AC4F9AE02.roa
File:                     26FB999C92FC11EE9104E34AC4F9AE02.roa (raw, json)
Hash identifier:          5Z1OItc548DjHVCG7CXpVGHd9l81pbpViREy3/eyYGc=
Subject key identifier:   C6:B5:28:5B:C7:6A:95:2F:86:0C:FD:88:A2:BC:A0:5F:14:30:CA:F0
Certificate issuer:       /CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C
Certificate serial:       06EF
Authority key identifier: 47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/26FB999C92FC11EE9104E34AC4F9AE02.roa
Signing time:             Mon 02 Jun 2025 22:30:46 +0000
ROA not before:           Mon 02 Jun 2025 22:30:46 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     132836
IP address blocks:        103.98.86.0/23 maxlen: 23
                          103.98.86.0/24 maxlen: 24
                          103.98.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl
                          rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 21:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775 (0x6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C911D, serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C
        Validity
            Not Before: Jun  2 22:30:46 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=683e2616-f067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:db:1a:d1:38:be:8f:2b:07:1b:ac:23:52:
                    35:f9:6a:e8:b4:6a:d1:f7:12:e4:1b:7c:5e:95:68:
                    67:dd:d4:be:ea:62:25:66:ff:09:9f:57:9a:bd:7f:
                    c9:1c:82:9f:42:f1:f6:03:28:a2:63:7c:31:45:01:
                    6a:30:da:88:83:ac:b4:fb:7d:35:be:3e:e4:f1:15:
                    57:25:ee:45:4c:a1:e1:10:e0:d7:7a:6a:0c:b0:5a:
                    94:54:dd:e8:3e:4c:81:dd:35:a0:19:bb:4e:61:5c:
                    e3:17:87:35:6b:ff:c1:1c:d2:1d:49:d9:be:20:d5:
                    d3:59:e2:66:c7:7c:76:42:ef:75:32:6c:8c:a9:59:
                    c3:19:7c:9c:8a:07:dd:6a:a9:a4:4b:9f:f2:98:b4:
                    05:98:08:8d:3f:ed:16:a9:00:3f:49:1d:68:ce:e5:
                    d7:f6:f3:b6:0c:a5:da:a1:4a:93:71:10:db:9c:a7:
                    61:00:cf:ad:06:c9:cf:01:a9:0f:0b:c0:aa:d1:66:
                    3a:9d:df:16:95:50:af:b3:b6:a0:52:54:80:1b:f8:
                    1e:91:80:e2:a6:d4:84:e6:56:2f:d0:dc:ca:83:14:
                    14:4a:f5:d1:79:fc:7c:13:dc:fd:ae:9d:01:cc:f6:
                    e4:6b:5e:93:01:5e:b8:86:39:c1:e4:4d:e8:34:29:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B5:28:5B:C7:6A:95:2F:86:0C:FD:88:A2:BC:A0:5F:14:30:CA:F0
            X509v3 Authority Key Identifier:
                keyid:47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/26FB999C92FC11EE9104E34AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:20:d9:80:a6:0d:e7:d5:23:8f:fd:95:50:2d:d6:66:87:66:
         a3:6b:07:de:37:09:61:3c:1e:87:a1:f7:9e:ba:b9:33:32:6a:
         24:17:4d:63:e5:b6:bc:06:af:fa:b6:df:f9:06:41:13:f5:1a:
         64:51:ad:1e:55:0b:2b:7b:03:9c:31:53:11:bb:24:e8:8b:2f:
         b6:06:23:28:c9:e8:a3:ce:fe:e6:ac:1f:20:f1:db:65:4d:91:
         c4:8b:cb:4d:9b:04:ac:5f:cf:b1:99:49:3c:3f:9e:4c:82:0f:
         01:69:1e:a8:8c:ac:95:84:e4:f5:be:33:8a:a2:6a:98:74:97:
         75:d3:1e:0b:8e:d0:a5:a6:57:3c:35:7f:5f:c1:1a:08:81:84:
         61:8d:86:df:00:f4:32:e3:d4:91:ab:b4:87:c8:bb:d2:be:39:
         5c:58:0c:b9:13:f2:1d:5a:eb:b4:20:7f:bf:e6:cf:aa:9d:8a:
         15:01:4f:7d:66:38:21:2d:b0:29:60:54:ee:f2:de:9c:3a:e4:
         26:4b:e5:64:92:7c:e5:21:a0:1b:12:4d:6b:a5:a7:46:22:63:
         7f:c7:f0:4a:f8:97:26:d5:1f:97:f9:df:f3:a4:fa:66:51:92:
         9b:a7:6c:f8:7d:36:4e:1b:6e:3d:62:bb:a6:85:80:2c:f2:20:
         a2:a0:f8:22
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkxMUQxMTAvBgNVBAUTKDQ3NUI2MkE1RjIzM0VEMDVBQzcyRDg3ODEyMzRFMTA5
QkYzQTkwOEMwHhcNMjUwNjAyMjIzMDQ2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNlMjYxNi1mMDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6XbGtE4vo8rBxusI1I1+WrotGrR9xLkG3xelWhn3dS+6mIlZv8Jn1eavX/J
HIKfQvH2AyiiY3wxRQFqMNqIg6y0+301vj7k8RVXJe5FTKHhEODXemoMsFqUVN3o
PkyB3TWgGbtOYVzjF4c1a//BHNIdSdm+INXTWeJmx3x2Qu91MmyMqVnDGXycigfd
aqmkS5/ymLQFmAiNP+0WqQA/SR1ozuXX9vO2DKXaoUqTcRDbnKdhAM+tBsnPAakP
C8Cq0WY6nd8WlVCvs7agUlSAG/gekYDiptSE5lYv0NzKgxQUSvXRefx8E9z9rp0B
zPbka16TAV64hjnB5E3oNCnMGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMa1KFvH
apUvhgz9iKK8oF8UMMrwMB8GA1UdIwQYMBaAFEdbYqXyM+0FrHLYeBI04Qm/OpCM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTExRC83QjEzQjM4NDZD
MDMxMUVCODg0NDc4NEJDNEY5QUUwMi9SMXRpcGZJejdRV3NjdGg0RWpUaENiODZr
SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IxdGlwZkl6N1FXc2N0aDRFalRoQ2I4NmtJdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzkxMUQvN0IxM0IzODQ2QzAzMTFFQjg4NDQ3ODRCQzRGOUFFMDIvMjZGQjk5OUM5
MkZDMTFFRTkxMDRFMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnYlYwDQYJKoZIhvcNAQELBQADggEBAIgg2YCmDefVI4/9
lVAt1maHZqNrB943CWE8Hoeh9566uTMyaiQXTWPltrwGr/q23/kGQRP1GmRRrR5V
Cyt7A5wxUxG7JOiLL7YGIyjJ6KPO/uasHyDx22VNkcSLy02bBKxfz7GZSTw/nkyC
DwFpHqiMrJWE5PW+M4qiaph0l3XTHguO0KWmVzw1f1/BGgiBhGGNht8A9DLj1JGr
tIfIu9K+OVxYDLkT8h1a67Qgf7/mz6qdihUBT31mOCEtsClgVO7y3pw65CZL5WSS
fOUhoBsSTWulp0YiY3/H8Er4lybVH5f53/Ok+mZRkpunbPh9Nk4bbj1iu6aFgCzy
IKKg+CI=
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:25:17 2025 by rpki-client