Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/917D3A184BED11F0A2F7CC21C4F9AE02.roa
File:                     917D3A184BED11F0A2F7CC21C4F9AE02.roa (raw, json)
Hash identifier:          APYBzbciz7l8SWgHU+00bf2NNknyoQ64kXNxQ6wKS1I=
Subject key identifier:   DE:DF:D0:41:FE:A5:A5:16:D6:E1:BF:8C:28:F7:DA:4C:0C:D1:86:39
Certificate issuer:       /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
Certificate serial:       010D
Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/917D3A184BED11F0A2F7CC21C4F9AE02.roa
Signing time:             Wed 27 May 2026 07:38:56 +0000
ROA not before:           Wed 27 May 2026 07:38:56 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     203843
IP address blocks:        103.244.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl
                          rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
        Validity
            Not Before: May 27 07:38:56 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a169f90-22c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ce:b3:72:5c:e5:65:06:78:18:9f:b5:15:81:
                    03:d9:35:79:fd:61:3b:df:c8:cc:c3:53:ad:6e:cd:
                    5a:4e:f3:be:08:a2:31:56:07:0f:f9:e1:ff:63:54:
                    e6:5e:30:75:b0:8e:98:da:e0:24:82:50:c3:b9:fc:
                    11:ea:b3:ef:bc:b8:2e:26:c7:46:57:4b:d3:d9:be:
                    3c:a9:4a:11:fe:d5:90:db:6a:77:1a:db:9d:15:1b:
                    3f:23:20:9a:cd:e3:48:8a:b0:87:22:1f:ee:72:9c:
                    85:0f:12:f4:30:99:b1:0a:37:da:e6:7b:8f:cb:ed:
                    1b:21:61:da:3e:eb:63:e9:2f:1b:54:c7:ab:28:e1:
                    33:7a:e6:36:bc:f3:64:a4:58:00:59:bf:d7:fe:35:
                    27:eb:c0:03:bd:0c:12:29:11:99:7f:65:5a:a6:54:
                    61:f3:4a:ab:31:0e:6e:aa:ea:19:22:1e:94:e2:28:
                    09:bd:e6:cd:07:35:d7:b1:5e:1c:d1:20:66:b8:c0:
                    97:8e:af:cf:b1:29:a1:29:41:b2:5d:5f:95:19:a9:
                    20:24:67:fe:5b:b6:ca:08:43:ed:07:2f:2e:46:b0:
                    86:bb:eb:bd:96:b7:90:b1:84:e4:f4:64:27:0b:0a:
                    31:b9:a3:90:19:a2:1a:6d:29:28:f1:f5:e9:99:d3:
                    f3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DF:D0:41:FE:A5:A5:16:D6:E1:BF:8C:28:F7:DA:4C:0C:D1:86:39
            X509v3 Authority Key Identifier:
                keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/917D3A184BED11F0A2F7CC21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:71:b8:c0:8a:9e:69:fc:73:aa:97:1a:a3:2a:c5:ef:c6:39:
         6a:c1:82:a4:89:48:57:09:a9:06:c1:33:22:b9:27:f0:82:e9:
         80:a1:4d:84:9c:a9:72:33:7a:7f:e6:b4:b3:dc:7a:f7:18:95:
         1c:11:16:f0:9d:f8:d2:7a:64:6f:28:05:63:af:98:86:31:45:
         85:3c:d8:1f:93:b9:60:5b:8d:fd:a8:7e:14:3b:50:85:93:b3:
         0c:57:6f:56:a8:1e:30:ef:1c:d7:8e:9c:fa:c9:d2:5b:ed:98:
         54:ff:21:91:35:6e:d7:e6:76:7c:48:a4:d7:2f:ef:e0:a2:e3:
         ba:53:fb:f4:14:67:0a:50:1d:6f:35:c6:84:26:1a:20:7b:21:
         bf:83:4f:35:69:b1:d2:12:f1:f1:8b:35:03:f8:97:f9:61:fe:
         6c:4a:84:3a:af:67:25:31:9e:17:c0:7d:47:1f:1d:a1:d8:85:
         54:20:8d:85:b4:80:00:d2:ee:06:98:d3:cc:cd:84:c8:3c:5e:
         c5:06:ee:79:c9:97:6c:14:b5:67:7b:02:30:63:77:9e:00:4f:
         e7:e4:99:b5:90:88:bb:99:e4:c5:25:8f:5b:da:fd:25:e7:28:
         36:60:97:0a:12:2a:36:39:74:40:6c:9d:c0:29:48:93:b5:77:
         2a:3d:e4:71
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThERjUxMTAvBgNVBAUTKEM2Rjc1OEVDRERDNEM5QjBGNzJGMDY1QzM1QUQ1NDY5
NzQzMjcxMUIwHhcNMjYwNTI3MDczODU2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE2OWY5MC0yMmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjc6zclzlZQZ4GJ+1FYED2TV5/WE738jMw1Otbs1aTvO+CKIxVgcP+eH/Y1Tm
XjB1sI6Y2uAkglDDufwR6rPvvLguJsdGV0vT2b48qUoR/tWQ22p3GtudFRs/IyCa
zeNIirCHIh/ucpyFDxL0MJmxCjfa5nuPy+0bIWHaPutj6S8bVMerKOEzeuY2vPNk
pFgAWb/X/jUn68ADvQwSKRGZf2VaplRh80qrMQ5uquoZIh6U4igJvebNBzXXsV4c
0SBmuMCXjq/PsSmhKUGyXV+VGakgJGf+W7bKCEPtBy8uRrCGu+u9lreQsYTk9GQn
CwoxuaOQGaIabSko8fXpmdPzAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN7f0EH+
paUW1uG/jCj32kwM0YY5MB8GA1UdIwQYMBaAFMb3WOzdxMmw9y8GXDWtVGl0MnEb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOERGNS8zMUUwRjE2QUY5
NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi94dmRZN04zRXliRDNMd1pjTmExVWFYUXlj
UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNScy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThERjUvMzFFMEYxNkFGOTYwMTFFRjlENjc5QzdBQzRGOUFFMDIvOTE3RDNBMTg0
QkVEMTFGMEEyRjdDQzIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ/SjMA0GCSqGSIb3DQEBCwUAA4IBAQBMcbjAip5p/HOqlxqjKsXv
xjlqwYKkiUhXCakGwTMiuSfwgumAoU2EnKlyM3p/5rSz3Hr3GJUcERbwnfjSemRv
KAVjr5iGMUWFPNgfk7lgW439qH4UO1CFk7MMV29WqB4w7xzXjpz6ydJb7ZhU/yGR
NW7X5nZ8SKTXL+/gouO6U/v0FGcKUB1vNcaEJhogeyG/g081abHSEvHxizUD+Jf5
Yf5sSoQ6r2clMZ4XwH1HHx2h2IVUII2FtIAA0u4GmNPMzYTIPF7FBu55yZdsFLVn
ewIwY3eeAE/n5Jm1kIi7meTFJY9b2v0l5yg2YJcKEio2OXRAbJ3AKUiTtXcqPeRx
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:16 2026 by rpki-client