Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/5FB99B82934511EE87C1BE7EC4F9AE02.roa
File:                     5FB99B82934511EE87C1BE7EC4F9AE02.roa (raw, json)
Hash identifier:          oir1KO7itYRLncdx+k4nMQfCDJqoJ0sGUL8dcRF7ZpA=
Subject key identifier:   F6:53:5D:01:07:56:2C:CB:44:A6:AE:09:60:82:FC:A6:76:BF:F2:0F
Certificate issuer:       /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
Certificate serial:       01C0
Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/5FB99B82934511EE87C1BE7EC4F9AE02.roa
Signing time:             Tue 07 Apr 2026 03:37:23 +0000
ROA not before:           Tue 07 Apr 2026 03:37:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149828
IP address blocks:        103.185.230.0/24 maxlen: 24
                          2001:df0:9dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl
                          rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6C2E, serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
        Validity
            Not Before: Apr  7 03:37:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d47bf3-9b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:d3:3c:d7:61:72:54:e8:b1:84:e8:62:3f:
                    1d:60:82:77:f3:40:a0:84:7c:3d:4a:86:f1:8f:fe:
                    90:03:64:52:71:3c:e1:4c:61:5b:20:f7:6b:f9:57:
                    4e:2f:66:77:ca:8b:d0:cd:68:94:c8:26:e7:e6:2c:
                    62:88:94:1f:d3:c0:c0:71:38:5b:89:20:3f:d1:14:
                    1b:45:f7:49:54:eb:fb:c3:77:48:78:2c:b6:97:00:
                    be:bf:e1:e3:9f:ce:7b:af:1f:50:10:c7:b3:5d:ba:
                    89:4e:59:9a:c3:33:f4:07:3f:38:23:7e:da:bb:63:
                    b2:f5:1c:2e:b9:50:45:d7:8b:66:5f:b6:52:e4:58:
                    4c:ba:61:71:de:41:53:b2:38:12:20:b9:80:d1:8e:
                    fc:62:4c:54:52:a1:a9:b8:08:3c:be:54:0b:7e:c1:
                    dd:84:50:35:38:ce:ff:fe:68:a3:ad:40:a1:cb:fe:
                    e1:9c:51:90:66:2f:db:ad:67:4a:c9:07:ae:f9:13:
                    2e:1e:0f:c5:9e:12:9c:96:ad:24:86:15:a0:ab:d1:
                    30:00:ee:54:64:57:9c:71:0c:f5:7e:6c:27:53:a5:
                    89:4a:aa:17:0a:a3:59:5b:6e:8b:97:25:56:48:76:
                    96:8b:11:95:02:57:19:10:33:63:73:54:9c:14:e0:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:53:5D:01:07:56:2C:CB:44:A6:AE:09:60:82:FC:A6:76:BF:F2:0F
            X509v3 Authority Key Identifier:
                keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/5FB99B82934511EE87C1BE7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.230.0/24
                IPv6:
                  2001:df0:9dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:8c:e4:3e:49:de:23:84:00:39:62:ca:5a:c4:57:bf:db:9c:
         60:60:8e:91:11:a1:f2:da:04:8f:2b:b9:74:1c:cc:b0:d7:3e:
         b1:7a:9b:8e:6d:12:0f:e7:df:1f:5e:fe:8d:20:3a:cd:2c:f8:
         c2:36:5b:e9:f5:52:89:da:eb:da:8e:d3:45:cb:72:0f:e4:c8:
         ce:c5:12:a7:59:19:91:33:c5:b6:1e:75:82:aa:6d:d7:92:86:
         af:77:89:44:85:bd:e7:98:86:18:44:28:b6:b2:f6:d0:e2:ca:
         99:d6:5a:21:8c:b2:e5:9c:4a:3c:e6:ce:19:4d:e4:dc:53:56:
         b2:66:2f:4c:46:69:31:9f:45:ca:40:f5:f3:fe:13:d7:b5:98:
         dc:8c:c6:28:36:3b:04:f6:fe:18:29:54:e2:fb:2b:77:7b:03:
         95:63:b7:7a:10:99:fe:74:93:81:ef:37:14:a2:27:3c:45:2b:
         29:5a:91:72:5b:c5:34:c0:c6:c1:7a:1f:c3:9e:bd:69:63:3c:
         24:32:1e:fe:f1:92:5d:59:35:fd:5d:75:d2:3b:3b:1c:28:4d:
         c3:6b:9c:50:22:63:8d:e9:b9:88:c1:1c:c2:bb:33:72:f0:1b:
         07:56:45:c7:ea:45:24:e5:48:23:43:f1:ea:18:ed:7a:3b:6e:
         10:8e:8d:4a
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDZDMkUxMTAvBgNVBAUTKEU4QjA4QURDRjQ5QzYwQ0JBRDkxRDFFRDZEMzdCRDg0
NDNBREJENEMwHhcNMjYwNDA3MDMzNzIzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ0N2JmMy05YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6LTPNdhclTosYToYj8dYIJ380CghHw9Sobxj/6QA2RScTzhTGFbIPdr+VdO
L2Z3yovQzWiUyCbn5ixiiJQf08DAcThbiSA/0RQbRfdJVOv7w3dIeCy2lwC+v+Hj
n857rx9QEMezXbqJTlmawzP0Bz84I37au2Oy9RwuuVBF14tmX7ZS5FhMumFx3kFT
sjgSILmA0Y78YkxUUqGpuAg8vlQLfsHdhFA1OM7//mijrUChy/7hnFGQZi/brWdK
yQeu+RMuHg/FnhKclq0khhWgq9EwAO5UZFeccQz1fmwnU6WJSqoXCqNZW26LlyVW
SHaWixGVAlcZEDNjc1ScFOBM2QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPZTXQEH
VizLRKauCWCC/KZ2v/IPMB8GA1UdIwQYMBaAFOiwitz0nGDLrZHR7W03vYRDrb1M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkMyRS84MThGREE0Njkz
NDAxMUVFODQzRjgzNzRDNEY5QUUwMi82TENLM1BTY1lNdXRrZEh0YlRlOWhFT3R2
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZMQ0szUFNjWU11dGtkSHRiVGU5aEVPdHZVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDZDMkUvODE4RkRBNDY5MzQwMTFFRTg0M0Y4Mzc0QzRGOUFFMDIvNUZCOTlCODI5
MzQ1MTFFRTg3QzFCRTdFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ7nmMA8EAgACMAkDBwAgAQ3wncAwDQYJKoZIhvcNAQELBQADggEB
AHWM5D5J3iOEADliylrEV7/bnGBgjpERofLaBI8ruXQczLDXPrF6m45tEg/n3x9e
/o0gOs0s+MI2W+n1Uona69qO00XLcg/kyM7FEqdZGZEzxbYedYKqbdeShq93iUSF
veeYhhhEKLay9tDiypnWWiGMsuWcSjzmzhlN5NxTVrJmL0xGaTGfRcpA9fP+E9e1
mNyMxig2OwT2/hgpVOL7K3d7A5Vjt3oQmf50k4HvNxSiJzxFKylakXJbxTTAxsF6
H8OevWljPCQyHv7xkl1ZNf1dddI7OxwoTcNrnFAiY43puYjBHMK7M3LwGwdWRcfq
RSTlSCND8eoY7Xo7bhCOjUo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:42 2026 by rpki-client