Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/51C204DAEA9011EFB8B82081C4F9AE02.roa
File:                     51C204DAEA9011EFB8B82081C4F9AE02.roa (raw, json)
Hash identifier:          z68jUM3pwDuhNvw5K6zmL6nh/8X6Z+78EEQu+Tv6QwI=
Subject key identifier:   EB:AD:DC:65:DE:89:E3:A6:4E:A3:15:35:5D:C6:F9:10:A1:8F:21:8D
Certificate issuer:       /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Certificate serial:       022A
Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/51C204DAEA9011EFB8B82081C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:29:00 +0000
ROA not before:           Wed 25 Jun 2025 02:50:48 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136609
IP address blocks:        103.93.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
        Validity
            Not Before: Jun 25 02:50:48 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3eabc-44d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:0f:4c:68:28:16:49:06:dc:c5:bd:39:1b:
                    ad:53:0f:1d:be:8b:88:fd:6a:3b:67:60:a6:6a:23:
                    5e:36:26:23:d9:f5:bf:6d:21:1f:67:e9:e4:7c:26:
                    92:38:54:f3:ad:38:ea:6d:b5:e5:83:92:4e:07:03:
                    d5:41:23:8d:cf:bf:ea:39:c4:2e:f8:36:e5:84:c3:
                    7e:c7:20:d6:e2:89:cf:72:e2:9e:87:3c:21:22:97:
                    46:0d:d3:44:20:d5:4d:e7:38:ad:9f:fe:5e:d6:a0:
                    ce:18:4b:2e:65:69:53:03:a4:16:a5:30:c1:ee:42:
                    a5:82:db:21:88:aa:9d:40:bf:05:2b:be:15:dd:af:
                    83:a4:a3:4a:2f:d9:4f:e2:6f:0b:10:92:f3:ec:cf:
                    a7:56:d9:d7:80:d7:33:13:44:f3:16:14:1b:48:f1:
                    9a:70:0b:4b:bb:fa:48:f7:04:35:5a:98:dc:71:a1:
                    fa:6c:5a:48:7d:15:04:38:0b:f3:25:bc:b0:74:d8:
                    50:6b:d5:ef:90:cb:1f:94:50:8c:64:24:27:3a:b3:
                    26:47:93:71:0b:8c:5b:c1:12:54:dc:6f:55:93:9d:
                    14:47:eb:98:53:a1:fa:2a:ed:41:bc:23:ee:fd:37:
                    00:cb:bc:8e:11:7d:2e:2d:53:69:63:1f:ee:3a:82:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AD:DC:65:DE:89:E3:A6:4E:A3:15:35:5D:C6:F9:10:A1:8F:21:8D
            X509v3 Authority Key Identifier:
                keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/51C204DAEA9011EFB8B82081C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:38:c1:c1:4c:c6:24:ef:fd:16:3f:b3:e5:04:cf:33:4a:28:
         c1:82:93:88:87:09:d9:f9:4a:9d:f9:b9:2d:bf:c4:ab:0c:29:
         04:4c:f8:ae:3b:46:99:cf:3b:93:44:d4:d7:ac:22:db:7f:63:
         9b:9f:de:44:e6:5b:61:ba:9b:fe:b1:6e:ff:88:33:9d:bd:f1:
         e3:be:7d:57:1e:8b:b3:11:0c:db:25:ab:0f:62:e9:7a:b8:99:
         e6:89:7b:a9:80:4f:69:5c:00:89:5b:45:86:40:5f:a1:74:04:
         1d:9b:e1:0b:5d:59:79:15:53:ed:d7:55:fc:ca:70:d7:2b:a1:
         bd:4d:74:29:78:34:d9:28:59:6d:92:66:05:75:ed:1b:9e:1f:
         b0:8f:e8:97:6a:64:db:95:ee:ed:ff:63:e8:e3:7f:b8:5a:68:
         e9:d6:57:41:5f:06:53:86:54:4c:fb:ba:c7:d2:af:2d:50:f7:
         cd:5c:6c:c0:0e:c2:2f:fc:f9:70:26:c0:95:cd:44:4e:94:3b:
         1c:40:e8:90:14:7c:8a:c0:ec:64:8c:98:3d:fa:7b:f1:68:c6:
         a8:b1:e6:86:19:6e:a5:79:92:6e:f5:b9:c6:8c:2d:11:69:77:
         1a:2c:d3:1e:fa:f8:29:51:40:31:1f:73:12:6d:24:ec:9b:a2:
         a0:d1:28:ab
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG
ODlFMTNBNzAwHhcNMjUwNjI1MDI1MDQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWFiYy00NGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzMAPTGgoFkkG3MW9ORutUw8dvouI/Wo7Z2CmaiNeNiYj2fW/bSEfZ+nkfCaS
OFTzrTjqbbXlg5JOBwPVQSONz7/qOcQu+DblhMN+xyDW4onPcuKehzwhIpdGDdNE
INVN5zitn/5e1qDOGEsuZWlTA6QWpTDB7kKlgtshiKqdQL8FK74V3a+DpKNKL9lP
4m8LEJLz7M+nVtnXgNczE0TzFhQbSPGacAtLu/pI9wQ1WpjccaH6bFpIfRUEOAvz
JbywdNhQa9XvkMsflFCMZCQnOrMmR5NxC4xbwRJU3G9Vk50UR+uYU6H6Ku1BvCPu
/TcAy7yOEX0uLVNpYx/uOoIK9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOut3GXe
ieOmTqMVNV3G+RChjyGNMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5
RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDFFMzAvNUNBNTA1MkNDOUQ3MTFFRDkyQTEzODJDQzRGOUFFMDIvNTFDMjA0REFF
QTkwMTFFRkI4QjgyMDgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ13vMA0GCSqGSIb3DQEBCwUAA4IBAQDZOMHBTMYk7/0WP7PlBM8z
SijBgpOIhwnZ+Uqd+bktv8SrDCkETPiuO0aZzzuTRNTXrCLbf2Obn95E5lthupv+
sW7/iDOdvfHjvn1XHouzEQzbJasPYul6uJnmiXupgE9pXACJW0WGQF+hdAQdm+EL
XVl5FVPt11X8ynDXK6G9TXQpeDTZKFltkmYFde0bnh+wj+iXamTble7t/2Po43+4
Wmjp1ldBXwZThlRM+7rH0q8tUPfNXGzADsIv/PlwJsCVzUROlDscQOiQFHyKwOxk
jJg9+nvxaMaoseaGGW6leZJu9bnGjC0RaXcaLNMe+vgpUUAxH3MSbSTsm6Kg0Sir
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:31:50 2026 by rpki-client