Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/03706138786411EC8624EB12C4F9AE02.roa
File:                     03706138786411EC8624EB12C4F9AE02.roa (raw, json)
Hash identifier:          BrG7Q3Tkykmo9xilseoxsNjwLBVZ7ijytYCkK61f/ms=
Subject key identifier:   0D:62:F4:DD:49:77:FA:3F:AB:32:12:9D:54:D7:91:02:35:82:C9:6C
Certificate issuer:       /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
Certificate serial:       09B9
Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/03706138786411EC8624EB12C4F9AE02.roa
Signing time:             Wed 08 Apr 2026 20:25:25 +0000
ROA not before:           Wed 08 Apr 2026 20:25:25 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     34440
IP address blocks:        103.35.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl
                          rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2489 (0x9b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
        Validity
            Not Before: Apr  8 20:25:25 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d6b9b5-de7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:1c:70:92:b7:35:1b:5c:e7:2b:1e:2f:58:
                    c1:f3:35:86:ab:a9:04:59:fb:92:b6:42:e6:82:76:
                    c9:68:8c:aa:83:ba:a8:ad:7d:5f:a4:2e:95:46:b9:
                    36:1f:e7:b8:7a:4b:3d:59:a3:07:a0:fd:b0:36:d6:
                    1b:49:4f:69:19:94:cf:67:74:9d:70:34:66:77:fe:
                    60:8c:27:7f:ca:af:a0:f3:5c:83:24:c1:36:80:18:
                    ea:12:f7:e7:77:19:93:a5:70:01:af:04:26:df:65:
                    01:38:00:c8:a9:e4:9b:c4:2c:4a:aa:81:a9:58:fa:
                    c8:1a:ae:2a:e2:b0:11:88:37:e0:ba:f0:b7:14:69:
                    89:89:2e:a2:70:c0:69:51:9d:24:a5:ae:15:7d:39:
                    e5:41:ca:70:40:c9:77:ac:0f:06:15:fc:38:4f:3e:
                    df:3e:e7:83:0f:d1:c0:a7:6c:67:f5:51:e6:a3:28:
                    54:61:d9:cc:f2:71:90:fa:62:8c:e1:56:ac:57:50:
                    97:c6:84:ef:03:a2:6c:f6:b9:c4:1c:b2:ca:bc:a2:
                    29:cb:40:68:7c:a3:b2:30:69:aa:ee:d7:f3:42:f0:
                    98:01:92:51:a4:62:c9:06:52:b9:9f:81:4b:44:a4:
                    d2:dd:c6:1d:f2:b5:a6:b5:4c:83:9d:fe:64:35:1b:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:62:F4:DD:49:77:FA:3F:AB:32:12:9D:54:D7:91:02:35:82:C9:6C
            X509v3 Authority Key Identifier:
                keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/03706138786411EC8624EB12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:bd:f8:a6:74:5c:34:60:f5:0d:b3:d7:32:bd:61:d1:f9:40:
         a1:7a:cf:68:5d:28:af:13:62:74:2b:88:dc:d5:05:23:a8:35:
         79:8c:03:72:80:31:65:42:ab:9e:79:0a:f0:a1:09:41:89:6b:
         70:31:59:65:be:74:21:3d:c5:56:96:5e:bf:a9:db:d6:42:ad:
         c0:05:92:68:ce:12:0b:35:88:ac:6a:42:d9:6a:ee:cb:71:e9:
         38:85:8d:90:af:cc:58:80:cd:b9:c2:11:9a:05:da:ed:19:0b:
         ce:fc:44:82:a5:26:67:df:2a:31:5b:e2:cf:8c:1a:99:43:a1:
         02:58:9a:f4:bb:99:94:fe:f3:9c:55:01:4c:8b:83:fd:76:82:
         fb:56:da:f4:f5:03:a5:e0:78:a7:e8:7e:35:44:8b:b8:68:74:
         98:df:0c:e2:9a:5e:ad:03:3c:1d:61:e8:98:38:35:77:59:61:
         b4:9a:e8:c4:74:f3:2a:ae:86:32:b9:d1:b2:50:31:90:8a:41:
         11:d4:58:72:f0:c9:0e:71:66:92:71:77:c1:35:5f:0d:1b:64:
         8f:4e:3a:84:8d:40:dc:2c:87:31:eb:5c:1d:c4:1f:9f:7a:86:
         89:af:c7:ff:e3:6f:ea:0e:9d:f3:54:ee:70:69:dd:dc:da:d6:
         bc:7a:19:23
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4
QjcyNDNDNTIwHhcNMjYwNDA4MjAyNTI1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ2YjliNS1kZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBgccJK3NRtc5yseL1jB8zWGq6kEWfuStkLmgnbJaIyqg7qorX1fpC6VRrk2
H+e4eks9WaMHoP2wNtYbSU9pGZTPZ3SdcDRmd/5gjCd/yq+g81yDJME2gBjqEvfn
dxmTpXABrwQm32UBOADIqeSbxCxKqoGpWPrIGq4q4rARiDfguvC3FGmJiS6icMBp
UZ0kpa4VfTnlQcpwQMl3rA8GFfw4Tz7fPueDD9HAp2xn9VHmoyhUYdnM8nGQ+mKM
4VasV1CXxoTvA6Js9rnEHLLKvKIpy0BofKOyMGmq7tfzQvCYAZJRpGLJBlK5n4FL
RKTS3cYd8rWmtUyDnf5kNRu1LwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA1i9N1J
d/o/qzISnVTXkQI1gslsMB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG
QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDgzRDAvMEExNjIwOEFBRkJDMTFFQUE5NjFDQjg2QzRGOUFFMDIvMDM3MDYxMzg3
ODY0MTFFQzg2MjRFQjEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZyNbMA0GCSqGSIb3DQEBCwUAA4IBAQCYvfimdFw0YPUNs9cyvWHR
+UChes9oXSivE2J0K4jc1QUjqDV5jANygDFlQqueeQrwoQlBiWtwMVllvnQhPcVW
ll6/qdvWQq3ABZJozhILNYisakLZau7Lcek4hY2Qr8xYgM25whGaBdrtGQvO/ESC
pSZn3yoxW+LPjBqZQ6ECWJr0u5mU/vOcVQFMi4P9doL7Vtr09QOl4Hin6H41RIu4
aHSY3wziml6tAzwdYeiYODV3WWG0mujEdPMqroYyudGyUDGQikER1Fhy8MkOcWaS
cXfBNV8NG2SPTjqEjUDcLIcx61wdxB+feoaJr8f/42/qDp3zVO5wad3c2ta8ehkj
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:31 2026 by rpki-client