Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/1FAB60EE9EB111E99ED10D84C4F9AE02.roa
File:                     1FAB60EE9EB111E99ED10D84C4F9AE02.roa (raw, json)
Hash identifier:          JoDyF1+0/uHXUe4b6JwZuFvOHh5ZoEWfFz+rLvuX/DE=
Subject key identifier:   2B:1E:41:D5:47:E9:5B:AD:9A:6B:17:B3:C8:42:76:45:AC:52:A9:27
Certificate issuer:       /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D
Certificate serial:       0F09
Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/1FAB60EE9EB111E99ED10D84C4F9AE02.roa
Signing time:             Thu 16 Apr 2026 18:21:51 +0000
ROA not before:           Thu 16 Apr 2026 18:21:51 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     136277
IP address blocks:        103.85.214.0/24 maxlen: 24
                          103.85.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3849 (0xf09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D
        Validity
            Not Before: Apr 16 18:21:51 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e128bf-f605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:5e:21:c0:90:81:4a:ea:c1:06:e5:31:0a:
                    14:5e:dd:b5:d5:78:da:23:9c:6b:c7:9c:9b:2d:f0:
                    ac:f9:25:fe:23:fd:a2:26:98:d6:d5:55:28:77:ae:
                    a6:64:18:fc:aa:ec:12:b4:ef:4d:0c:fa:3f:e3:1e:
                    84:9e:86:bb:91:d8:b6:4a:fa:26:ca:d4:3f:6e:f8:
                    69:2e:85:42:4f:51:97:de:09:71:09:3a:67:d0:0c:
                    a5:c4:d8:56:9d:f7:d7:09:7a:34:5d:60:a1:06:d9:
                    2d:28:c1:b2:e7:93:ce:28:57:df:fe:be:7b:66:39:
                    30:cc:f7:3e:31:53:55:76:4e:8e:52:11:45:a9:c8:
                    c3:2a:37:ea:e3:cb:3a:9f:b4:18:c1:02:73:9c:b0:
                    d5:c9:1e:6d:e6:78:e2:a4:3f:1c:6c:e4:f3:75:bf:
                    05:2c:3c:25:09:8b:7b:fe:df:87:08:c3:2d:8a:14:
                    6d:c1:1a:cc:e2:5f:e9:f1:35:83:d5:b2:f2:e8:3c:
                    57:69:ff:99:5e:a6:19:33:86:f5:94:62:e4:53:93:
                    b5:44:40:42:c7:da:ea:ec:1e:0a:22:95:8b:1a:56:
                    81:65:c4:ee:ba:7c:c8:f4:91:30:da:a5:e6:e2:90:
                    05:ca:1a:37:70:93:5e:55:65:cc:82:94:8e:51:82:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1E:41:D5:47:E9:5B:AD:9A:6B:17:B3:C8:42:76:45:AC:52:A9:27
            X509v3 Authority Key Identifier:
                keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/1FAB60EE9EB111E99ED10D84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:59:9f:a1:a8:62:66:ad:59:02:4e:94:10:67:7d:b7:df:
         28:26:44:07:70:00:e4:d6:c9:04:1f:83:eb:ab:7c:fa:70:06:
         ed:f1:c0:73:75:81:24:3a:5c:14:fb:0d:3e:0f:71:59:3d:94:
         94:bf:3f:3b:5d:92:4a:83:a3:c6:5e:7e:70:44:39:ce:fc:59:
         08:4b:23:88:fd:f0:b1:3b:68:91:45:9b:cd:d4:84:94:6d:30:
         21:16:e1:81:06:9c:ef:48:2a:3d:8a:8a:57:a0:88:17:d8:0b:
         5f:2d:0a:c8:4b:22:3f:26:3b:d8:4f:c7:9e:62:54:77:33:8b:
         f1:4c:59:ea:74:05:f0:53:22:64:f4:26:cc:b6:d8:6f:a5:6a:
         24:f5:ec:5a:fc:20:20:cd:86:1c:bc:e2:a5:28:0a:33:4d:19:
         43:bb:36:23:d4:77:ee:31:8f:e9:0a:0e:03:30:ee:ab:0c:77:
         70:00:7c:25:74:5e:c9:1e:91:c4:65:38:96:38:f2:6c:54:1c:
         78:4e:fb:3c:ed:d4:a5:71:05:30:a8:98:8b:11:af:a6:73:13:
         ee:fb:d2:f0:de:c7:ab:21:04:e9:66:35:38:06:6b:09:d6:23:
         ef:1f:78:db:6a:ef:d9:5b:72:e3:00:e9:a0:51:58:49:64:f7:
         2b:5b:c0:ea
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5
QjlDMkQxNEQwHhcNMjYwNDE2MTgyMTUxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWUxMjhiZi1mNjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyLleIcCQgUrqwQblMQoUXt211XjaI5xrx5ybLfCs+SX+I/2iJpjW1VUod66m
ZBj8quwStO9NDPo/4x6Enoa7kdi2SvomytQ/bvhpLoVCT1GX3glxCTpn0AylxNhW
nffXCXo0XWChBtktKMGy55POKFff/r57ZjkwzPc+MVNVdk6OUhFFqcjDKjfq48s6
n7QYwQJznLDVyR5t5njipD8cbOTzdb8FLDwlCYt7/t+HCMMtihRtwRrM4l/p8TWD
1bLy6DxXaf+ZXqYZM4b1lGLkU5O1REBCx9rq7B4KIpWLGlaBZcTuunzI9JEw2qXm
4pAFyho3cJNeVWXMgpSOUYKuGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCseQdVH
6VutmmsXs8hCdkWsUqknMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF
QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0FBNjkvNDBFMUZDOUM5RUIwMTFFOUIwN0U3QTgyQzRGOUFFMDIvMUZBQjYwRUU5
RUIxMTFFOTlFRDEwRDg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ1XWMA0GCSqGSIb3DQEBCwUAA4IBAQBj1lmfoahiZq1ZAk6UEGd9
t98oJkQHcADk1skEH4Prq3z6cAbt8cBzdYEkOlwU+w0+D3FZPZSUvz87XZJKg6PG
Xn5wRDnO/FkISyOI/fCxO2iRRZvN1ISUbTAhFuGBBpzvSCo9iopXoIgX2AtfLQrI
SyI/JjvYT8eeYlR3M4vxTFnqdAXwUyJk9CbMtthvpWok9exa/CAgzYYcvOKlKAoz
TRlDuzYj1HfuMY/pCg4DMO6rDHdwAHwldF7JHpHEZTiWOPJsVBx4Tvs87dSlcQUw
qJiLEa+mcxPu+9Lw3serIQTpZjU4BmsJ1iPvH3jbau/ZW3LjAOmgUVhJZPcrW8Dq
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:24 2026 by rpki-client