Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/5417C204181311F1BB2D572D153D8C67.roa
File:                     5417C204181311F1BB2D572D153D8C67.roa (raw, json)
Hash identifier:          zJkgueGHn82J9kxPh9Ojean9JnFzwHRZHhlrlDNf/4o=
Subject key identifier:   A0:D3:A9:23:31:3C:F4:97:64:AD:8D:08:C5:C7:AD:EE:05:98:97:90
Certificate issuer:       /CN=A91D30A3/serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
Certificate serial:       6B
Authority key identifier: 13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/5417C204181311F1BB2D572D153D8C67.roa
Signing time:             Fri 11 Sep 2026 08:59:12 +0000
ROA not before:           Fri 11 Sep 2026 08:59:12 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     133624
IP address blocks:        103.36.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl
                          rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 07:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D30A3, serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
        Validity
            Not Before: Sep 11 08:59:12 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa3c2e0-f4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:cf:8c:de:fb:98:53:3e:7e:eb:94:cc:78:
                    ce:48:37:dc:10:f9:88:49:ce:45:3e:9a:9a:19:0c:
                    54:93:e2:5c:87:1b:74:7d:d7:cd:14:f4:b6:69:31:
                    c3:59:31:44:9b:7f:59:74:ef:d7:75:71:b1:9c:51:
                    61:ff:96:cb:12:80:0e:62:10:d7:1c:bc:8f:f8:43:
                    c7:b3:84:e9:9a:ca:e1:35:75:d9:0a:cc:17:81:01:
                    4c:a8:64:79:71:74:8f:8f:7a:93:16:8b:2c:fa:73:
                    15:b1:4f:80:0d:ba:58:a6:dd:59:14:b5:49:4d:e7:
                    58:4a:6d:77:14:db:9b:21:25:9d:07:5c:40:a7:dc:
                    41:34:5c:df:1b:35:26:8a:fc:d4:18:f3:1b:0e:75:
                    e7:c1:55:7b:5d:a3:03:b1:9c:51:df:39:49:dc:d4:
                    8c:06:7c:e1:49:60:e2:76:1c:3f:d7:1c:63:18:a8:
                    5c:b5:3c:82:e7:92:6e:37:81:ef:2e:63:b6:e3:c1:
                    ed:dd:de:5e:3f:b7:3e:fc:54:56:6d:0d:9f:3d:d1:
                    0b:2a:41:b5:db:d9:63:af:75:5d:8b:17:27:24:6c:
                    d6:d4:9d:98:9d:24:8b:97:2f:68:f8:b9:01:5e:5f:
                    75:89:72:31:29:9f:ec:d4:8e:aa:86:a0:b1:54:9f:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D3:A9:23:31:3C:F4:97:64:AD:8D:08:C5:C7:AD:EE:05:98:97:90
            X509v3 Authority Key Identifier:
                keyid:13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/5417C204181311F1BB2D572D153D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:31:5c:64:ab:c7:19:82:50:b1:40:57:1b:fc:aa:8b:62:96:
         b6:62:01:00:5a:6b:31:37:d5:e4:c8:d1:b2:bc:da:6d:4e:ab:
         a7:c8:e5:fb:20:f8:19:ad:40:0e:9b:01:b8:76:97:2a:e7:95:
         d6:11:8a:8e:57:25:18:59:a2:2c:22:13:70:58:9c:fa:86:ce:
         95:fa:3e:c0:d5:2b:06:9e:26:99:bd:c9:82:d0:41:21:e3:a1:
         d3:73:d5:0c:7f:e3:a7:91:c9:a4:9f:ae:9c:ed:93:86:ae:44:
         60:3e:e3:fa:11:37:0f:2e:b6:c3:c2:ef:30:26:08:83:31:1f:
         84:8f:86:3c:0b:8b:d1:ad:73:7f:8b:5b:89:7b:8e:5d:fb:3e:
         ac:cc:3e:f5:fc:4b:ec:91:68:c6:61:69:ec:8c:24:56:a7:10:
         2b:73:b1:40:7d:39:41:d8:b1:25:9b:00:4f:97:1b:e6:b1:34:
         19:a2:a0:4b:8d:76:17:7b:23:c1:ec:94:62:65:10:98:9e:b6:
         9d:2c:59:29:fc:df:14:ae:19:48:37:5e:e0:f4:a4:ec:12:86:
         38:24:15:86:23:3f:62:b8:86:89:62:61:1a:0e:04:5f:b2:6d:
         fe:8f:c6:3d:60:59:fb:bd:c1:bf:db:6b:f8:57:7f:45:d5:14:
         e9:a9:34:7f
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MzBBMzExMC8GA1UEBRMoMTM0OEQ0NkFBNzBCMDMwM0IwNDAyM0YwNEE2MzA1OEI0
RDY5NjNCNzAeFw0yNjA5MTEwODU5MTJaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYTNjMmUwLWY0YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZHM+M3vuYUz5+65TMeM5IN9wQ+YhJzkU+mpoZDFST4lyHG3R9180U9LZpMcNZ
MUSbf1l079d1cbGcUWH/lssSgA5iENccvI/4Q8ezhOmayuE1ddkKzBeBAUyoZHlx
dI+PepMWiyz6cxWxT4ANulim3VkUtUlN51hKbXcU25shJZ0HXECn3EE0XN8bNSaK
/NQY8xsOdefBVXtdowOxnFHfOUnc1IwGfOFJYOJ2HD/XHGMYqFy1PILnkm43ge8u
Y7bjwe3d3l4/tz78VFZtDZ890QsqQbXb2WOvdV2LFyckbNbUnZidJIuXL2j4uQFe
X3WJcjEpn+zUjqqGoLFUn6FDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUoNOpIzE8
9JdkrY0Ixcet7gWYl5AwHwYDVR0jBBgwFoAUE0jUaqcLAwOwQCPwSmMFi01pY7cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMEEzLzYwMDY0QkMyMTgw
ODExRjE5OTY1NzA1NjExM0Q4QzY3L0UwalVhcWNMQXdPd1FDUHdTbU1GaTAxcFk3
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRTBqVWFxY0xBd093UUNQd1NtTUZpMDFwWTdjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzBBMy82MDA2NEJDMjE4MDgxMUYxOTk2NTcwNTYxMTNEOEM2Ny81NDE3QzIwNDE4
MTMxMUYxQkIyRDU3MkQxNTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnJAAwDQYJKoZIhvcNAQELBQADggEBADoxXGSrxxmCULFAVxv8qoti
lrZiAQBaazE31eTI0bK82m1Oq6fI5fsg+BmtQA6bAbh2lyrnldYRio5XJRhZoiwi
E3BYnPqGzpX6PsDVKwaeJpm9yYLQQSHjodNz1Qx/46eRyaSfrpztk4auRGA+4/oR
Nw8utsPC7zAmCIMxH4SPhjwLi9Gtc3+LW4l7jl37PqzMPvX8S+yRaMZhaeyMJFan
ECtzsUB9OUHYsSWbAE+XG+axNBmioEuNdhd7I8HslGJlEJietp0sWSn83xSuGUg3
XuD0pOwShjgkFYYjP2K4holiYRoOBF+ybf6Pxj1gWfu9wb/ba/hXf0XVFOmpNH8=
-----END CERTIFICATE-----
Generated at Tue Oct 13 14:06:23 2026 by rpki-client