Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/1777F060A7CE11E980B87114C4F9AE02.roa
File:                     1777F060A7CE11E980B87114C4F9AE02.roa (raw, json)
Hash identifier:          UzYlF5kVoirkgLJ2+YAX7I5FrYpUxEnHb7ed/BCbCIw=
Subject key identifier:   A9:B9:8E:96:32:99:40:82:3D:2A:79:A8:2F:9A:15:58:98:14:27:9F
Certificate issuer:       /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial:       104F
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/1777F060A7CE11E980B87114C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:37:37 +0000
ROA not before:           Fri 02 May 2025 17:57:37 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139240
IP address blocks:        103.139.90.0/24 maxlen: 24
                          2404:bb41::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
                          rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4175 (0x104f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
        Validity
            Not Before: May  2 17:57:37 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a44f31-1e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:46:83:b9:0c:04:6a:e3:ca:3f:23:d4:28:
                    26:b2:09:c1:ec:c1:83:0b:d1:a3:62:98:ed:be:d4:
                    32:25:2d:d3:4a:d3:6a:bf:27:e9:db:73:f5:eb:2d:
                    0f:28:73:8a:19:2b:2f:79:cb:ba:ca:fb:9b:db:2a:
                    2b:3c:7a:e5:c7:3b:ee:f4:71:3c:a9:63:3b:c0:ce:
                    76:0b:85:86:22:15:fb:e9:a7:43:00:dc:dc:da:d3:
                    3f:73:12:e1:b0:4a:b9:c4:d3:ca:bf:99:91:6a:25:
                    87:ac:95:b5:77:42:f0:ce:1c:2a:32:3b:42:e1:1c:
                    8a:f5:9b:ec:dd:af:b0:7e:3a:7b:c9:b7:84:5b:d9:
                    54:76:79:90:6e:fb:00:e1:2f:8c:bf:c1:26:89:bd:
                    5b:94:67:25:1c:ba:b2:d8:ab:68:98:f3:d7:38:17:
                    ff:44:fb:24:a0:be:3a:38:31:44:5a:47:de:70:6c:
                    81:48:ce:fe:fe:3a:c7:47:b6:cd:47:4a:db:76:ef:
                    07:39:3e:fb:8c:89:39:e0:6d:0a:f1:61:f9:24:f4:
                    fa:f7:a0:2e:84:49:35:9f:7f:ed:0f:24:c0:d8:e8:
                    c5:5e:84:1b:bb:ba:fe:c5:32:e2:ce:3c:ed:51:5d:
                    80:05:6f:be:ac:9f:9a:ce:ff:15:5a:bb:27:21:ad:
                    be:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B9:8E:96:32:99:40:82:3D:2A:79:A8:2F:9A:15:58:98:14:27:9F
            X509v3 Authority Key Identifier:
                keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/1777F060A7CE11E980B87114C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.90.0/24
                IPv6:
                  2404:bb41::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:ba:58:3a:2e:2e:25:cc:16:7e:f1:e5:50:96:b3:ef:3d:25:
         90:34:b0:06:b4:1b:2c:7d:f7:13:58:12:94:98:2d:ae:b5:09:
         eb:aa:36:56:c4:87:91:d9:68:9a:11:23:b0:56:49:79:4a:22:
         ce:5c:e6:e4:ac:3b:fe:58:19:c1:6a:84:13:bd:88:44:ba:6f:
         ba:99:ab:e2:b0:06:e6:a2:37:85:9d:f0:1c:2b:2a:85:29:b5:
         10:3d:20:cc:a7:a8:65:33:e7:71:1f:31:5d:f8:f2:19:ab:7b:
         11:d6:ac:08:5d:e8:05:f3:d1:74:c2:5e:5c:a1:89:ec:98:03:
         34:d5:bc:6a:7e:cb:b7:49:f6:6f:a0:b0:7a:f4:7d:7b:f0:6c:
         2b:d1:3e:9f:6c:82:3c:d0:88:3b:d2:68:14:f4:7e:dc:93:02:
         83:6c:70:08:50:c8:07:7a:82:00:17:77:87:c1:ec:26:e5:8e:
         ac:15:e1:91:44:d9:d2:c2:e3:7c:e8:85:36:53:fb:1c:ed:28:
         d3:89:61:58:76:3a:38:86:07:d4:a7:a2:83:7a:36:1b:42:38:
         7c:4c:53:3b:05:76:1c:f9:a0:ae:65:11:ec:86:74:4b:f3:dc:
         72:f1:a6:90:a0:13:27:fa:2d:f6:58:63:04:67:cb:b9:cf:f1:
         39:63:38:48
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICEE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG
RENDMjQxMEMwHhcNMjUwNTAyMTc1NzM3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGYzMS0xZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwYNGg7kMBGrjyj8j1CgmsgnB7MGDC9GjYpjtvtQyJS3TStNqvyfp23P16y0P
KHOKGSsvecu6yvub2yorPHrlxzvu9HE8qWM7wM52C4WGIhX76adDANzc2tM/cxLh
sEq5xNPKv5mRaiWHrJW1d0LwzhwqMjtC4RyK9Zvs3a+wfjp7ybeEW9lUdnmQbvsA
4S+Mv8Emib1blGclHLqy2KtomPPXOBf/RPskoL46ODFEWkfecGyBSM7+/jrHR7bN
R0rbdu8HOT77jIk54G0K8WH5JPT696AuhEk1n3/tDyTA2OjFXoQbu7r+xTLizjzt
UV2ABW++rJ+azv8VWrsnIa2+4wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKm5jpYy
mUCCPSp5qC+aFViYFCefMB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD
NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR
UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE3RTgvRjE2RTE4NTY1QzUzMTFFOTlBQjVDRjY4QzRGOUFFMDIvMTc3N0YwNjBB
N0NFMTFFOTgwQjg3MTE0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAZ4taMA0EAgACMAcDBQAkBLtBMA0GCSqGSIb3DQEBCwUAA4IBAQBd
ulg6Li4lzBZ+8eVQlrPvPSWQNLAGtBssffcTWBKUmC2utQnrqjZWxIeR2WiaESOw
Vkl5SiLOXObkrDv+WBnBaoQTvYhEum+6mavisAbmojeFnfAcKyqFKbUQPSDMp6hl
M+dxHzFd+PIZq3sR1qwIXegF89F0wl5coYnsmAM01bxqfsu3SfZvoLB69H178Gwr
0T6fbII80Ig70mgU9H7ckwKDbHAIUMgHeoIAF3eHwewm5Y6sFeGRRNnSwuN86IU2
U/sc7SjTiWFYdjo4hgfUp6KDejYbQjh8TFM7BXYc+aCuZRHshnRL89xy8aaQoBMn
+i32WGMEZ8u5z/E5YzhI
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:02 2026 by rpki-client