Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6811EDA5FB811F094135B2FC4F9AE02.roa
File:                     C6811EDA5FB811F094135B2FC4F9AE02.roa (raw, json)
Hash identifier:          T6KSryUHXuRELPEz+qpJAT6GR/I4g/UllOuA9IXvdfc=
Subject key identifier:   A1:9C:C6:16:75:DA:B8:66:B9:1D:5D:22:17:B9:47:B0:2D:3F:29:57
Certificate issuer:       /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial:       B8
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6811EDA5FB811F094135B2FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:10:17 +0000
ROA not before:           Sun 18 Jan 2026 17:55:00 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136209
IP address blocks:        103.43.70.0/24 maxlen: 24
                          103.43.71.0/24 maxlen: 24
                          103.50.91.0/24 maxlen: 24
                          103.82.141.0/24 maxlen: 24
                          103.82.142.0/24 maxlen: 24
                          103.82.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
                          rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
        Validity
            Not Before: Jan 18 17:55:00 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a48109-c145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:76:00:d6:9a:87:ba:fc:f0:55:60:d7:48:
                    54:f2:dc:59:e1:67:eb:4c:3f:1b:4b:4b:8b:96:1e:
                    3d:89:72:75:d9:5a:71:c0:9e:98:1f:42:79:27:15:
                    35:f7:a0:04:8e:6a:f0:07:74:10:d4:b1:53:e9:9e:
                    f7:8e:3b:91:80:b0:12:93:29:81:10:a2:a7:94:a6:
                    ca:4e:dd:4f:be:e3:62:19:ba:71:9c:1a:db:c9:d6:
                    b3:88:d3:07:bd:4a:07:f9:7d:7b:4e:55:44:f8:ca:
                    25:b2:a0:72:e5:f4:42:2c:62:3e:b5:33:8a:67:83:
                    8f:65:ad:f5:2e:5c:3c:3b:ce:89:3d:d2:b3:79:0d:
                    f6:8c:c2:d9:a7:42:5f:f1:18:8b:2e:0e:21:b5:67:
                    d9:eb:ab:b1:2a:77:91:18:78:27:8a:6b:59:7f:02:
                    b9:bb:25:d6:04:80:e8:00:cd:cf:39:72:6d:88:39:
                    a8:7a:10:bc:88:90:88:de:ad:cb:78:67:b3:cd:9a:
                    7e:8b:44:60:a1:2c:07:18:73:62:1d:07:18:b9:be:
                    bf:9a:df:c6:de:da:a3:4c:02:1a:e8:0a:d1:3b:4d:
                    5c:cd:21:9f:aa:b8:20:d3:ac:94:6d:de:cd:69:16:
                    2f:d7:a9:e6:78:74:ee:13:5b:35:18:3a:e8:31:b9:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9C:C6:16:75:DA:B8:66:B9:1D:5D:22:17:B9:47:B0:2D:3F:29:57
            X509v3 Authority Key Identifier:
                keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6811EDA5FB811F094135B2FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.70.0/23
                  103.50.91.0/24
                  103.82.141.0-103.82.143.255

    Signature Algorithm: sha256WithRSAEncryption
         3a:a1:04:5b:72:5a:55:f4:3a:45:ae:74:8f:f4:c8:29:98:25:
         a9:18:e8:ef:bc:80:37:f0:63:2b:fc:e1:eb:bb:21:44:65:ff:
         af:68:9d:42:22:eb:fd:96:2a:1b:d0:d4:3a:bb:4f:98:fa:d2:
         47:b2:91:ef:2f:a9:10:f4:0a:83:81:ab:f8:90:f0:ae:dd:03:
         1c:1e:42:50:0f:f6:9a:63:e6:b4:17:51:74:99:bd:a0:94:61:
         f8:b1:f6:62:68:a5:f8:a7:f6:69:9d:0f:f0:29:40:0b:91:60:
         55:98:a4:60:9c:62:7f:ab:19:b6:99:b8:f6:67:f1:79:58:1a:
         7c:a2:be:f3:71:60:69:8d:c2:e0:ea:89:fe:ae:de:4c:7e:5a:
         75:e3:8a:5d:fe:60:ed:7c:4e:55:30:43:87:62:55:b5:46:8b:
         c3:45:85:83:9e:1d:42:c5:d1:c4:21:d9:4d:2a:3f:e0:eb:25:
         1c:b2:3a:ea:09:5c:18:91:21:09:48:d0:38:bb:62:7d:f6:08:
         26:ed:91:16:75:93:ce:77:8a:59:76:2f:57:5c:11:40:fd:d3:
         df:79:e6:c2:df:aa:81:b8:2f:ab:38:81:e9:28:8c:2e:04:bf:
         30:53:34:58:f2:d7:f9:cf:02:0c:b8:4c:17:4a:38:d2:92:1f:
         ab:c3:3f:ed
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0
N0I2NTA2MjAwHhcNMjYwMTE4MTc1NTAwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODEwOS1jMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmt2ANaah7r88FVg10hU8txZ4WfrTD8bS0uLlh49iXJ12VpxwJ6YH0J5JxU1
96AEjmrwB3QQ1LFT6Z73jjuRgLASkymBEKKnlKbKTt1PvuNiGbpxnBrbydaziNMH
vUoH+X17TlVE+MolsqBy5fRCLGI+tTOKZ4OPZa31Llw8O86JPdKzeQ32jMLZp0Jf
8RiLLg4htWfZ66uxKneRGHgnimtZfwK5uyXWBIDoAM3POXJtiDmoehC8iJCI3q3L
eGezzZp+i0RgoSwHGHNiHQcYub6/mt/G3tqjTAIa6ArRO01czSGfqrgg06yUbd7N
aRYv16nmeHTuE1s1GDroMbl76QIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFKGcxhZ1
2rhmuR1dIhe5R7AtPylXMB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG
QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0MwQzkvQzVEQUJFRUE1RkI0MTFGMDgyMDM0NDdEQzRGOUFFMDIvQzY4MTFFREE1
RkI4MTFGMDk0MTM1QjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaAwQBZytGAwQAZzJbMAwDBABnUo0DBARnUoAwDQYJKoZIhvcNAQELBQAD
ggEBADqhBFtyWlX0OkWudI/0yCmYJakY6O+8gDfwYyv84eu7IURl/69onUIi6/2W
KhvQ1Dq7T5j60keyke8vqRD0CoOBq/iQ8K7dAxweQlAP9ppj5rQXUXSZvaCUYfix
9mJopfin9mmdD/ApQAuRYFWYpGCcYn+rGbaZuPZn8XlYGnyivvNxYGmNwuDqif6u
3kx+WnXjil3+YO18TlUwQ4diVbVGi8NFhYOeHULF0cQh2U0qP+DrJRyyOuoJXBiR
IQlI0Di7Yn32CCbtkRZ1k853ill2L1dcEUD909955sLfqoG4L6s4gekojC4EvzBT
NFjy1/nPAgy4TBdKONKSH6vDP+0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:58 2026 by rpki-client