Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/BA61C87692D911F083913E3DC4F9AE02.roa
File:                     BA61C87692D911F083913E3DC4F9AE02.roa (raw, json)
Hash identifier:          afAWZLC+mw9EyDI9/JJmoeXdskWuwhW3nTaeQPUOC20=
Subject key identifier:   41:6C:EC:51:36:C2:3F:7F:22:51:C1:F4:B7:F6:AE:A0:BF:A0:9E:B6
Certificate issuer:       /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Certificate serial:       26BA
Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/BA61C87692D911F083913E3DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:38:40 +0000
ROA not before:           Tue 16 Sep 2025 08:47:08 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     58657
IP address blocks:        103.12.166.0/24 maxlen: 24
                          103.31.108.0/24 maxlen: 24
                          103.234.192.0/23 maxlen: 24
                          150.129.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl
                          rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9914 (0x26ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC302, serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
        Validity
            Not Before: Sep 16 08:47:08 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a479a0-4636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f3:db:b4:76:c1:7b:c5:9d:8b:1f:33:49:01:
                    7e:32:4d:c7:aa:9e:a4:2c:5a:77:e8:36:1d:e1:0c:
                    75:8c:45:ac:3c:0c:ee:f4:fc:6c:d8:69:56:e2:d2:
                    71:f9:42:8c:31:76:71:6a:cd:31:2b:20:f0:f9:34:
                    53:87:5e:2c:17:ac:a5:0d:e2:dd:00:cd:03:61:07:
                    5b:bd:5f:c0:3c:2f:ce:fc:af:2d:54:a4:93:fe:f0:
                    0a:2f:24:fb:a4:98:38:c8:29:8d:11:c0:d1:ec:82:
                    30:76:31:eb:c9:ab:94:cd:20:77:eb:b1:f1:85:4f:
                    34:76:5c:6e:a3:c8:62:ef:47:ae:46:25:d9:44:e9:
                    97:18:f9:a4:af:32:bb:71:9e:c6:40:5f:4d:bf:0e:
                    0b:e2:b8:36:c4:10:3b:e6:13:4c:07:bb:8c:df:52:
                    de:40:7e:95:ce:1f:82:ce:d9:b1:23:aa:cd:5a:35:
                    0f:77:a2:96:ae:fe:89:9e:01:0d:8f:6d:89:d5:fb:
                    c5:b3:2d:88:41:06:11:71:04:67:5c:af:50:a3:ff:
                    46:65:62:40:92:3a:b6:68:6e:6d:b2:b0:55:3f:a6:
                    94:96:99:88:e5:f7:5d:df:50:fc:84:8a:15:c2:12:
                    dc:96:e3:00:0b:d2:37:80:46:98:19:26:44:a5:89:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6C:EC:51:36:C2:3F:7F:22:51:C1:F4:B7:F6:AE:A0:BF:A0:9E:B6
            X509v3 Authority Key Identifier:
                keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/BA61C87692D911F083913E3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.166.0/24
                  103.31.108.0/24
                  103.234.192.0/23
                  150.129.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:13:a4:72:fb:63:35:11:ac:ca:0d:5f:94:33:0c:99:8d:bf:
         73:b6:1a:bb:f7:66:ce:7d:94:ae:c7:e0:5f:4f:de:1d:ca:69:
         be:d2:1f:b7:d4:6e:a6:64:d5:03:55:6a:3c:63:87:b2:7f:7e:
         df:ee:6a:36:5e:65:07:4d:cf:72:bb:97:b7:77:2b:3c:97:4b:
         fa:4a:f7:03:f4:36:f5:86:16:c7:ed:e8:26:09:a9:07:a9:68:
         11:95:fa:4e:38:76:85:ff:1e:a5:b4:d9:54:f0:8c:5e:6a:42:
         de:d6:64:cd:cc:e0:93:d3:16:94:ea:71:5a:77:c3:ab:9e:d4:
         86:de:d9:c6:be:b7:dd:05:b9:58:f9:d6:23:77:a2:56:a5:1d:
         c8:c2:b1:18:2f:03:ce:1a:b4:85:51:70:04:10:5e:8d:3c:c1:
         58:45:00:07:f4:30:66:55:68:c4:53:4a:5b:bf:06:f7:2f:c5:
         cb:31:85:a1:2b:67:dc:3d:92:27:a7:d1:72:6d:21:59:64:e2:
         f6:38:71:8f:d3:3c:3c:ba:7f:48:cf:11:ae:43:d9:c5:12:bf:
         38:8c:fc:c2:86:9d:45:e3:b5:8b:38:23:77:8a:b6:67:a1:65:
         d4:9b:6d:52:0b:08:f5:08:12:ca:92:f4:54:8c:e8:06:7d:db:
         a5:8c:52:f6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICJrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMDIxMTAvBgNVBAUTKDM5QkY5Njk5NEFCNEM1NEM5ODNFRTBGNTEwMzY1RjRG
RDk4NDE1NDEwHhcNMjUwOTE2MDg0NzA4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzlhMC00NjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4vPbtHbBe8Wdix8zSQF+Mk3Hqp6kLFp36DYd4Qx1jEWsPAzu9Pxs2GlW4tJx
+UKMMXZxas0xKyDw+TRTh14sF6ylDeLdAM0DYQdbvV/APC/O/K8tVKST/vAKLyT7
pJg4yCmNEcDR7IIwdjHryauUzSB367HxhU80dlxuo8hi70euRiXZROmXGPmkrzK7
cZ7GQF9Nvw4L4rg2xBA75hNMB7uM31LeQH6Vzh+CztmxI6rNWjUPd6KWrv6JngEN
j22J1fvFsy2IQQYRcQRnXK9Qo/9GZWJAkjq2aG5tsrBVP6aUlpmI5fdd31D8hIoV
whLcluMAC9I3gEaYGSZEpYk+QwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFEFs7FE2
wj9/IlHB9Lf2rqC/oJ62MB8GA1UdIwQYMBaAFDm/lplKtMVMmD7g9RA2X0/ZhBVB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMwMi80RUE0OEU4NEZC
QTkxMUU0QThCMzRDMjNDNEY5QUUwMi9PYi1XbVVxMHhVeVlQdUQxRURaZlQ5bUVG
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09iLVdtVXEweFV5WVB1RDFFRFpmVDltRUZVRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REMzMDIvNEVBNDhFODRGQkE5MTFFNEE4QjM0QzIzQzRGOUFFMDIvQkE2MUM4NzY5
MkQ5MTFGMDgzOTEzRTNEQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQAZwymAwQAZx9sAwQBZ+rAAwQBloEQMA0GCSqGSIb3DQEBCwUAA4IB
AQDIE6Ry+2M1EazKDV+UMwyZjb9zthq792bOfZSux+BfT94dymm+0h+31G6mZNUD
VWo8Y4eyf37f7mo2XmUHTc9yu5e3dys8l0v6SvcD9Db1hhbH7egmCakHqWgRlfpO
OHaF/x6ltNlU8IxeakLe1mTNzOCT0xaU6nFad8OrntSG3tnGvrfdBblY+dYjd6JW
pR3IwrEYLwPOGrSFUXAEEF6NPMFYRQAH9DBmVWjEU0pbvwb3L8XLMYWhK2fcPZIn
p9FybSFZZOL2OHGP0zw8un9IzxGuQ9nFEr84jPzChp1F47WLOCN3irZnoWXUm21S
Cwj1CBLKkvRUjOgGfduljFL2
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:15 2026 by rpki-client