Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa
File:                     BA69B6FABC2C11EA96657B4BC4F9AE02.roa (raw, json)
Hash identifier:          HEUFVHKTOZSnhlxZ6AwmG6nrFJV2vRrcOg1fhgLlxJc=
Subject key identifier:   40:41:8B:21:22:98:D9:37:8C:AA:6B:26:EE:A9:21:AD:A3:AA:D4:84
Certificate issuer:       /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial:       0940
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:49:41 +0000
ROA not before:           Tue 02 Sep 2025 21:11:41 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9311
IP address blocks:        103.240.81.0/24 maxlen: 24
                          103.240.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
                          rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2368 (0x940)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
        Validity
            Not Before: Sep  2 21:11:41 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45205-3f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:36:29:55:0e:ff:74:2d:9a:11:6e:1b:9c:17:
                    a0:41:17:58:aa:d0:fd:fe:38:73:0c:7b:4d:62:74:
                    54:cd:08:18:ba:28:c6:db:13:6b:55:7b:ec:b4:ce:
                    67:78:6e:d1:1c:1b:24:d8:85:a8:21:57:09:09:41:
                    2a:a8:68:95:ce:26:b0:1a:1e:f5:9a:b0:80:c8:75:
                    09:18:09:34:7f:41:d2:a0:c8:26:62:2a:b7:25:c7:
                    77:5a:33:b0:3b:16:c9:49:fe:5e:55:44:47:86:5e:
                    02:76:3f:67:11:a8:f4:2e:83:8a:0e:2b:56:17:d7:
                    a6:17:d0:8a:49:19:60:55:e0:12:60:1e:50:06:32:
                    ac:0f:96:e1:61:4f:63:86:49:16:a1:cf:ea:2b:0b:
                    17:ed:5c:06:a6:e2:ce:10:8a:6c:22:20:d9:ef:3a:
                    02:38:6e:f0:ce:d6:97:c2:38:05:09:27:e2:87:fb:
                    2c:84:fb:f3:bb:b7:16:b3:86:34:69:20:23:42:c3:
                    dc:91:6c:57:2f:90:98:26:19:4e:0a:a8:04:b6:7a:
                    f4:cd:e3:82:0b:d4:08:66:dd:13:c5:65:e5:4e:07:
                    aa:86:8d:ac:a0:6e:26:20:96:58:d0:22:7e:69:50:
                    a4:40:e8:90:7d:ac:65:3a:26:bf:28:d0:61:d3:4c:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:41:8B:21:22:98:D9:37:8C:AA:6B:26:EE:A9:21:AD:A3:AA:D4:84
            X509v3 Authority Key Identifier:
                keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.81.0/24
                  103.240.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f7:ba:cf:a6:7f:60:59:f5:0c:db:b3:63:f3:6d:34:3a:9f:
         84:1a:6a:68:e4:cc:24:38:43:bc:b7:f3:1a:c0:8a:c8:66:ba:
         89:ff:01:04:d6:47:5a:f0:bd:cf:df:33:89:3a:0b:d3:08:f9:
         7b:59:80:20:1c:e8:62:83:dd:18:fe:71:1d:2a:70:1e:dd:ef:
         39:85:85:6d:92:7a:14:4d:83:14:70:69:d9:59:37:bf:70:2b:
         ea:f9:1f:c0:b4:02:c2:99:1f:cb:1c:17:74:f9:3b:e8:ae:13:
         b6:32:ae:03:c3:ba:2a:99:d2:7f:a0:ad:e2:47:cb:40:a5:e5:
         b9:d8:da:9c:a0:5f:10:18:fe:1b:b5:74:a9:3b:f5:4b:1c:1c:
         1c:50:84:b8:f5:c7:51:44:96:01:b9:f3:22:26:df:2d:58:d6:
         16:8e:71:17:20:85:5c:96:e4:56:96:fb:0c:be:c6:0e:58:2d:
         8a:ff:f9:eb:6b:17:ea:d0:c8:a7:47:cb:a9:62:d6:7c:93:80:
         29:6d:32:cc:ed:fb:42:53:74:71:5e:d8:fd:30:2a:7f:dd:8f:
         ba:38:b3:ae:8a:bc:48:5d:4e:3d:54:f8:c2:5c:f7:db:a7:11:
         b6:c4:10:57:78:a8:f9:81:d8:70:f8:f1:75:18:b1:b1:dc:4e:
         df:36:31:a2
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF
QTA2Q0NBQzcwHhcNMjUwOTAyMjExMTQxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTIwNS0zZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5zYpVQ7/dC2aEW4bnBegQRdYqtD9/jhzDHtNYnRUzQgYuijG2xNrVXvstM5n
eG7RHBsk2IWoIVcJCUEqqGiVziawGh71mrCAyHUJGAk0f0HSoMgmYiq3Jcd3WjOw
OxbJSf5eVURHhl4Cdj9nEaj0LoOKDitWF9emF9CKSRlgVeASYB5QBjKsD5bhYU9j
hkkWoc/qKwsX7VwGpuLOEIpsIiDZ7zoCOG7wztaXwjgFCSfih/sshPvzu7cWs4Y0
aSAjQsPckWxXL5CYJhlOCqgEtnr0zeOCC9QIZt0TxWXlTgeqho2soG4mIJZY0CJ+
aVCkQOiQfaxlOia/KNBh00zqcwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEBBiyEi
mNk3jKprJu6pIa2jqtSEMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD
MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTExQjQvQjE5OTNDNDBCQzJCMTFFQTgyQjY4NzRBQzRGOUFFMDIvQkE2OUI2RkFC
QzJDMTFFQTk2NjU3QjRCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ/BRAwQAZ/BTMA0GCSqGSIb3DQEBCwUAA4IBAQCL97rPpn9gWfUM
27Nj8200Op+EGmpo5MwkOEO8t/MawIrIZrqJ/wEE1kda8L3P3zOJOgvTCPl7WYAg
HOhig90Y/nEdKnAe3e85hYVtknoUTYMUcGnZWTe/cCvq+R/AtALCmR/LHBd0+Tvo
rhO2Mq4Dw7oqmdJ/oK3iR8tApeW52NqcoF8QGP4btXSpO/VLHBwcUIS49cdRRJYB
ufMiJt8tWNYWjnEXIIVcluRWlvsMvsYOWC2K//nraxfq0MinR8upYtZ8k4ApbTLM
7ftCU3RxXtj9MCp/3Y+6OLOuirxIXU49VPjCXPfbpxG2xBBXeKj5gdhw+PF1GLGx
3E7fNjGi
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:11 2026 by rpki-client