Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/623705DA339111ED9249064BC4F9AE02.roa
File:                     623705DA339111ED9249064BC4F9AE02.roa (raw, json)
Hash identifier:          dJkQChNuxBTFdv5H2Ke/hDe3+P5lfeBF0mKLDRfy7Ic=
Subject key identifier:   31:1D:20:F0:D9:DC:3B:C4:E2:C0:FE:F0:F6:48:43:24:62:30:D5:E1
Certificate issuer:       /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial:       02A7
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/623705DA339111ED9249064BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:24:31 +0000
ROA not before:           Tue 27 May 2025 02:20:21 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     133209
IP address blocks:        103.186.102.0/23 maxlen: 23
                          103.186.102.0/24 maxlen: 24
                          103.186.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
                          rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
        Validity
            Not Before: May 27 02:20:21 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e9ae-7f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:62:1e:36:4c:9f:7e:89:9a:07:e6:18:32:8a:
                    26:f3:36:85:03:63:0a:e0:66:cd:86:c3:90:a6:c5:
                    8c:21:80:9b:29:ed:b6:eb:9b:0b:00:b3:de:6f:45:
                    e9:61:02:73:f6:6e:16:48:3e:4d:e6:d8:b1:9c:a1:
                    fe:6c:bb:a0:bd:1e:c6:3c:2b:b3:6c:b3:33:44:f4:
                    02:a3:dd:1d:87:8e:f9:e6:af:a1:fc:fe:8c:59:5a:
                    8a:c1:b7:6c:28:f1:c6:06:07:3c:d9:95:ec:57:5f:
                    6b:b0:dd:c8:08:3c:25:db:50:5f:f7:4d:ce:55:50:
                    fc:cb:e2:1f:61:0d:8c:8d:fd:b1:4d:53:3a:79:42:
                    35:3c:87:44:fb:81:8b:41:69:ec:d3:94:1e:95:19:
                    31:3e:7e:45:a3:e8:57:e1:0f:71:3f:3b:ec:51:0e:
                    45:05:7b:d3:b3:a4:ab:2a:e1:b0:93:72:c2:9b:9b:
                    f8:5e:e7:d1:a8:9e:82:6a:2b:02:97:1e:fc:ad:c2:
                    2b:7b:55:69:dd:ef:cd:af:20:fb:c5:40:b7:2b:dc:
                    54:e5:b6:a5:35:2a:64:62:13:bc:c7:23:d2:c6:96:
                    78:f5:1f:4d:af:50:b9:84:4b:1b:78:54:41:4c:a9:
                    29:26:6e:48:a8:44:84:05:d0:a0:62:ca:2a:71:ac:
                    d4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:20:F0:D9:DC:3B:C4:E2:C0:FE:F0:F6:48:43:24:62:30:D5:E1
            X509v3 Authority Key Identifier:
                keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/623705DA339111ED9249064BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:61:7f:bc:ee:76:b1:3d:72:46:10:d9:ae:51:f2:57:2d:7b:
         8f:36:ed:19:32:7e:3a:05:28:d2:9e:25:db:27:a8:f1:12:97:
         4d:92:38:94:ab:10:81:8e:3b:04:8a:0a:44:a3:75:12:ff:7e:
         a5:5a:0c:8d:61:de:98:7f:e6:0d:5e:df:e3:a5:34:2f:7f:34:
         24:70:ea:5f:14:53:06:2b:3b:8e:55:ae:23:6a:03:a7:0d:c9:
         c1:3a:44:01:9a:fe:1d:dc:a7:49:24:b1:3e:d2:df:11:95:d4:
         cd:cc:15:04:1b:be:93:f4:de:51:07:d4:1e:09:93:e9:6b:3b:
         0f:84:5e:1f:77:ef:5e:92:46:59:f5:c3:9d:9b:5d:1b:c9:1c:
         9c:35:32:af:4f:5b:e3:c3:42:e0:33:12:15:1b:be:08:6c:92:
         90:8a:1f:cc:6b:65:38:21:6d:75:37:37:9a:0d:2b:d5:0a:ba:
         52:f3:c1:36:6e:db:5c:58:7c:ac:65:59:9e:94:02:29:e2:a1:
         f1:4e:bb:86:fe:4d:b3:75:2f:56:07:d9:92:ae:04:2b:59:cf:
         6f:a0:ec:83:87:c7:6c:ad:b7:2b:f0:24:3f:c9:12:12:b2:a3:
         d2:0e:5b:aa:79:fc:59:24:09:0d:78:7d:4b:57:a2:b8:30:a1:
         60:30:cf:55
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIyRTUxMTAvBgNVBAUTKDIzRURFQjc0RkQyMzQwRTQ3RjAxQkM4QkY3ODQzQjc2
OTFEQzA2MTUwHhcNMjUwNTI3MDIyMDIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTlhZS03ZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoGIeNkyffomaB+YYMoom8zaFA2MK4GbNhsOQpsWMIYCbKe2265sLALPeb0Xp
YQJz9m4WSD5N5tixnKH+bLugvR7GPCuzbLMzRPQCo90dh4755q+h/P6MWVqKwbds
KPHGBgc82ZXsV19rsN3ICDwl21Bf903OVVD8y+IfYQ2Mjf2xTVM6eUI1PIdE+4GL
QWns05QelRkxPn5Fo+hX4Q9xPzvsUQ5FBXvTs6SrKuGwk3LCm5v4XufRqJ6CaisC
lx78rcIre1Vp3e/NryD7xUC3K9xU5balNSpkYhO8xyPSxpZ49R9Nr1C5hEsbeFRB
TKkpJm5IqESEBdCgYsoqcazU+wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDEdIPDZ
3DvE4sD+8PZIQyRiMNXhMB8GA1UdIwQYMBaAFCPt63T9I0DkfwG8i/eEO3aR3AYV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFNS9GNUUzNEU2NDMz
OEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFPUl9BYnlMOTRRN2RwSGNC
aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ktM3JkUDBqUU9SX0FieUw5NFE3ZHBIY0JoVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTIyRTUvRjVFMzRFNjQzMzhEMTFFRDk3RTNFMjVGQzRGOUFFMDIvNjIzNzA1REEz
MzkxMTFFRDkyNDkwNjRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ7pmMA0GCSqGSIb3DQEBCwUAA4IBAQBhYX+87naxPXJGENmuUfJX
LXuPNu0ZMn46BSjSniXbJ6jxEpdNkjiUqxCBjjsEigpEo3US/36lWgyNYd6Yf+YN
Xt/jpTQvfzQkcOpfFFMGKzuOVa4jagOnDcnBOkQBmv4d3KdJJLE+0t8RldTNzBUE
G76T9N5RB9QeCZPpazsPhF4fd+9ekkZZ9cOdm10byRycNTKvT1vjw0LgMxIVG74I
bJKQih/Ma2U4IW11NzeaDSvVCrpS88E2bttcWHysZVmelAIp4qHxTruG/k2zdS9W
B9mSrgQrWc9voOyDh8dsrbcr8CQ/yRISsqPSDluqefxZJAkNeH1LV6K4MKFgMM9V
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:09 2026 by rpki-client