Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/A9204F96917F11EDA5B26357C4F9AE02.roa
File:                     A9204F96917F11EDA5B26357C4F9AE02.roa (raw, json)
Hash identifier:          XYEh/xOjDbsTNdnGi10ej2EmI6JjqzNUkL1XRZsJguA=
Subject key identifier:   0E:4F:FD:17:A9:F3:FD:10:3B:12:70:77:25:6C:63:CC:8B:65:FC:75
Certificate issuer:       /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial:       120B
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/A9204F96917F11EDA5B26357C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 17:22:04 +0000
ROA not before:           Thu 02 Apr 2026 17:22:04 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     147314
IP address blocks:        103.86.192.0/24 maxlen: 24
                          220.152.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
                          rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4619 (0x120b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
        Validity
            Not Before: Apr  2 17:22:04 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cea5bb-4e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:78:37:6a:b8:50:f7:84:2b:c7:7e:89:b6:0e:
                    38:b9:36:62:0c:1f:92:56:df:a1:5a:67:fa:34:03:
                    df:c2:18:f5:4d:de:0d:7e:54:d6:42:a1:ab:e5:0d:
                    99:a6:a2:be:3b:08:ea:8e:be:9f:40:03:6b:d5:a6:
                    a5:d4:6f:d2:b4:f5:01:27:e5:78:ce:cf:99:9d:42:
                    01:69:ab:7e:51:d4:5f:6b:5c:7a:be:46:c1:16:96:
                    28:22:24:9c:73:ba:b3:9a:4c:db:72:28:4a:66:75:
                    90:46:d5:13:4d:09:ba:9e:b9:1b:78:18:4c:db:1d:
                    65:cc:6c:47:2b:fd:ef:c4:d5:0d:a2:a0:17:d5:79:
                    58:b1:15:0c:68:9f:be:2f:1c:01:95:67:81:c5:6b:
                    db:ca:13:b3:10:8f:82:0e:a2:38:84:25:4e:f0:a9:
                    db:42:51:61:c0:75:12:ee:84:e8:f9:c0:8a:ab:b5:
                    c6:e4:f6:34:41:c2:ca:a7:cc:a9:b8:7e:2a:92:df:
                    de:53:89:07:3f:44:f2:d5:7e:32:97:4a:b7:0a:67:
                    f7:55:2e:3f:20:77:8d:55:44:a6:08:e1:ef:92:19:
                    44:20:2f:fd:9f:e6:35:82:55:12:d8:91:b4:94:16:
                    f3:fc:96:53:12:56:55:84:2e:d8:2f:9a:9f:90:e6:
                    9c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4F:FD:17:A9:F3:FD:10:3B:12:70:77:25:6C:63:CC:8B:65:FC:75
            X509v3 Authority Key Identifier:
                keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/A9204F96917F11EDA5B26357C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.192.0/24
                  220.152.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:1d:5c:14:df:57:40:e1:77:67:0c:aa:6d:21:75:d0:61:0a:
         23:ef:f0:bd:68:f8:f7:be:de:a0:d2:33:ce:95:d0:f7:7b:50:
         72:1f:60:92:1a:dd:70:27:c1:a5:18:32:c5:37:92:d4:74:5a:
         e9:28:41:f7:c5:35:45:71:cc:60:90:ff:ce:7c:8d:a5:1f:16:
         1d:2e:d5:17:52:1e:a4:a8:41:95:76:a0:d6:e5:51:e3:6e:e5:
         a6:c2:7a:a1:5c:1f:c6:a3:75:a6:a7:c7:39:62:d9:d4:ad:42:
         b5:be:af:4b:54:12:47:7e:e8:a1:ee:db:01:04:53:00:d7:f1:
         28:94:2a:d7:f1:35:d6:b5:95:d3:37:6b:9d:dd:d9:a5:fa:c2:
         4c:3b:24:96:bd:51:1d:f3:d3:e7:b5:c9:fe:4e:cd:64:73:2a:
         b3:77:68:a6:79:ac:2c:0c:1b:bf:ef:0a:4b:64:d4:aa:77:9a:
         1c:45:86:3a:ca:c8:03:b7:a0:75:7d:b2:87:c6:be:f5:65:4b:
         ff:e7:f8:f2:3d:8d:7e:a0:f6:6f:e0:fd:3b:67:b8:af:8d:05:
         6f:2d:6f:d2:73:27:e3:ed:50:60:82:14:ae:95:8a:bb:7e:f2:
         ba:26:bb:52:a8:cf:45:72:e9:05:df:fe:bc:ff:43:4f:28:9a:
         ac:f2:57:4c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICEgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0
RUVFMUI3NDIwHhcNMjYwNDAyMTcyMjA0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNlYTViYi00ZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Hg3arhQ94Qrx36Jtg44uTZiDB+SVt+hWmf6NAPfwhj1Td4NflTWQqGr5Q2Z
pqK+Owjqjr6fQANr1aal1G/StPUBJ+V4zs+ZnUIBaat+UdRfa1x6vkbBFpYoIiSc
c7qzmkzbcihKZnWQRtUTTQm6nrkbeBhM2x1lzGxHK/3vxNUNoqAX1XlYsRUMaJ++
LxwBlWeBxWvbyhOzEI+CDqI4hCVO8KnbQlFhwHUS7oTo+cCKq7XG5PY0QcLKp8yp
uH4qkt/eU4kHP0Ty1X4yl0q3Cmf3VS4/IHeNVUSmCOHvkhlEIC/9n+Y1glUS2JG0
lBbz/JZTElZVhC7YL5qfkOacPwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFA5P/Rep
8/0QOxJwdyVsY8yLZfx1MB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG
MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvQTkyMDRGOTY5
MTdGMTFFREE1QjI2MzU3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ1bAAwQA3JhzMA0GCSqGSIb3DQEBCwUAA4IBAQCKHVwU31dA4Xdn
DKptIXXQYQoj7/C9aPj3vt6g0jPOldD3e1ByH2CSGt1wJ8GlGDLFN5LUdFrpKEH3
xTVFccxgkP/OfI2lHxYdLtUXUh6kqEGVdqDW5VHjbuWmwnqhXB/Go3Wmp8c5YtnU
rUK1vq9LVBJHfuih7tsBBFMA1/EolCrX8TXWtZXTN2ud3dml+sJMOySWvVEd89Pn
tcn+Ts1kcyqzd2imeawsDBu/7wpLZNSqd5ocRYY6ysgDt6B1fbKHxr71ZUv/5/jy
PY1+oPZv4P07Z7ivjQVvLW/Scyfj7VBgghSulYq7fvK6JrtSqM9FcukF3/68/0NP
KJqs8ldM
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:32:46 2026 by rpki-client