Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/E985185E773D11F0B023A932C4F9AE02.roa
File:                     E985185E773D11F0B023A932C4F9AE02.roa (raw, json)
Hash identifier:          cKsWDyjFPx2klIzShbX3cif8qcZohuUF2aGywpw3pTY=
Subject key identifier:   90:7F:FC:1D:87:8D:57:4A:EC:05:15:0E:8A:C1:A7:61:4B:D2:2A:06
Certificate issuer:       /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
Certificate serial:       04F1
Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/E985185E773D11F0B023A932C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:48:16 +0000
ROA not before:           Sun 28 Dec 2025 23:19:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141398
IP address blocks:        103.177.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl
                          rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
        Validity
            Not Before: Dec 28 23:19:34 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a45fc0-b01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:17:1e:b1:8c:4f:7b:81:00:33:bc:8e:99:
                    7d:83:a4:7a:14:84:cc:1d:d9:8c:f1:96:00:be:71:
                    ca:49:d7:b8:df:af:78:cb:5b:1e:65:20:b1:a0:9f:
                    4f:1e:22:86:fb:90:c9:65:f1:f2:1b:8e:54:ce:10:
                    86:03:a8:86:de:ff:62:6d:04:44:c7:c6:e3:c7:31:
                    40:71:d3:e9:42:84:53:b9:d2:7d:12:b2:03:bf:d9:
                    d9:d1:7e:5b:79:52:a0:77:68:72:2a:39:a0:bb:d6:
                    af:1e:56:b1:6d:1b:f3:53:f9:27:47:13:07:fa:42:
                    b5:8e:84:77:32:d2:d9:7b:8d:07:92:9b:0d:fc:18:
                    0d:58:bd:db:19:d9:08:2a:5f:5b:9c:7a:0e:9e:c5:
                    81:b1:d4:e4:e0:90:5c:3c:2d:dd:74:55:fd:78:02:
                    55:82:20:22:80:d1:0d:90:64:26:54:a4:04:1b:4f:
                    28:48:86:ca:67:0e:3d:f4:f4:d9:4f:6b:6c:ae:04:
                    fb:f0:f7:4c:97:a7:32:ea:01:7e:7e:41:6e:66:fe:
                    54:ce:2d:e3:d3:05:4f:da:b1:04:40:47:dc:fc:b5:
                    e1:21:6a:b0:25:79:48:ae:1c:28:ad:ba:28:ca:08:
                    bf:1f:9b:c8:88:2f:fd:23:ef:ed:f0:4a:ed:fc:40:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7F:FC:1D:87:8D:57:4A:EC:05:15:0E:8A:C1:A7:61:4B:D2:2A:06
            X509v3 Authority Key Identifier:
                keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/E985185E773D11F0B023A932C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:a9:de:be:fb:dd:28:c2:38:57:b8:03:a3:d8:ca:3b:b3:d8:
         08:2d:4e:73:e2:4b:f6:6f:58:ac:6f:e9:11:56:93:3f:8f:db:
         ee:6d:89:15:73:1d:f3:42:a3:f1:55:4a:9f:5f:b1:3e:69:05:
         30:91:c8:81:54:71:27:5b:97:f2:98:bb:ac:67:69:d0:ca:82:
         c9:d0:7a:8a:86:e5:da:2a:50:15:dc:0b:e6:1b:96:de:ca:24:
         3e:bd:6d:71:b9:56:79:8d:e9:b3:8b:4e:9d:c0:75:3a:f2:c9:
         77:87:9f:79:b9:94:ea:41:62:68:34:83:ed:d2:13:38:51:d7:
         79:7e:4e:43:df:4d:3d:bc:51:6b:8c:73:95:88:a3:af:1b:62:
         db:b4:e2:e0:13:59:2a:d4:81:ce:16:86:fa:1a:c4:f1:ef:09:
         8f:c6:15:b2:09:fa:1f:bc:73:8e:c7:25:ab:60:2e:47:51:7e:
         bf:f5:80:66:98:00:0b:81:de:a2:1a:0d:78:ec:bc:d3:a3:5a:
         0f:3f:b1:cf:ea:61:80:73:b9:48:f2:24:cd:b0:0d:23:b4:28:
         8f:ea:64:d3:65:7d:03:f4:eb:2d:8f:d3:e8:8e:c2:1c:36:96:
         3e:8c:de:f3:58:29:dc:23:c6:59:10:f8:9d:d5:28:81:c7:6c:
         22:30:e5:5d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkzMTAxMTAvBgNVBAUTKEI5NzgwNDMzNTAzMDU5M0Q2RDk2NTdCQzQ1REJEMTE0
QjEyOTFEMjgwHhcNMjUxMjI4MjMxOTM0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWZjMC1iMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCcXHrGMT3uBADO8jpl9g6R6FITMHdmM8ZYAvnHKSde43694y1seZSCxoJ9P
HiKG+5DJZfHyG45UzhCGA6iG3v9ibQREx8bjxzFAcdPpQoRTudJ9ErIDv9nZ0X5b
eVKgd2hyKjmgu9avHlaxbRvzU/knRxMH+kK1joR3MtLZe40HkpsN/BgNWL3bGdkI
Kl9bnHoOnsWBsdTk4JBcPC3ddFX9eAJVgiAigNENkGQmVKQEG08oSIbKZw499PTZ
T2tsrgT78PdMl6cy6gF+fkFuZv5Uzi3j0wVP2rEEQEfc/LXhIWqwJXlIrhworboo
ygi/H5vIiC/9I+/t8Ert/EAEuQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJB//B2H
jVdK7AUVDorBp2FL0ioGMB8GA1UdIwQYMBaAFLl4BDNQMFk9bZZXvEXb0RSxKR0o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTMxMC9EMUIxRDM0NDU0
NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dUMXRsbGU4UmR2UkZMRXBI
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VYZ0VNMUF3V1QxdGxsZThSZHZSRkxFcEhTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTkzMTAvRDFCMUQzNDQ1NDYzMTFFQ0E4RkE0OTZBQzRGOUFFMDIvRTk4NTE4NUU3
NzNEMTFGMEIwMjNBOTMyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7F7MA0GCSqGSIb3DQEBCwUAA4IBAQDcqd6++90owjhXuAOj2Mo7
s9gILU5z4kv2b1isb+kRVpM/j9vubYkVcx3zQqPxVUqfX7E+aQUwkciBVHEnW5fy
mLusZ2nQyoLJ0HqKhuXaKlAV3AvmG5beyiQ+vW1xuVZ5jemzi06dwHU68sl3h595
uZTqQWJoNIPt0hM4Udd5fk5D3009vFFrjHOViKOvG2LbtOLgE1kq1IHOFob6GsTx
7wmPxhWyCfofvHOOxyWrYC5HUX6/9YBmmAALgd6iGg147LzTo1oPP7HP6mGAc7lI
8iTNsA0jtCiP6mTTZX0D9Ostj9PojsIcNpY+jN7zWCncI8ZZEPid1SiBx2wiMOVd
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:13 2026 by rpki-client