Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/4868355806A611F08F878981C4F9AE02.roa
File:                     4868355806A611F08F878981C4F9AE02.roa (raw, json)
Hash identifier:          rZxH8hzgLP6W2TnSgdM9azj0YzaVr8iZ1oDp3fnXY2Q=
Subject key identifier:   F7:57:00:13:25:0F:77:21:1B:12:D4:4A:65:F4:23:27:D4:FC:6F:79
Certificate issuer:       /CN=A91EA723/serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
Certificate serial:       0269
Authority key identifier: B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/4868355806A611F08F878981C4F9AE02.roa
Signing time:             Sun 05 Apr 2026 02:35:50 +0000
ROA not before:           Sun 05 Apr 2026 02:35:50 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     134785
IP address blocks:        103.93.32.0/24 maxlen: 24
                          103.93.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA723, serialNumber=B90422559B58C4DAA89F224D49C71FF44F9BCA34
        Validity
            Not Before: Apr  5 02:35:50 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d1ca86-4170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:09:20:02:59:1f:7c:66:3e:9f:17:19:2c:
                    85:c8:6c:54:c2:56:3c:b8:66:01:7f:a5:80:a4:fc:
                    a4:5d:fb:b3:19:8b:af:52:cb:56:a7:49:b0:db:9a:
                    59:8e:41:67:34:e6:44:32:4e:bd:cc:6d:da:d5:f1:
                    57:9f:3b:0c:94:fa:e3:06:9c:55:c0:c6:90:c3:ba:
                    01:b4:6e:56:39:a9:73:d8:a0:f4:fb:10:6b:62:2c:
                    36:ca:76:88:97:31:da:d4:31:8d:7c:0b:4b:0b:4b:
                    b2:4e:00:ac:77:6a:29:25:17:85:e3:bc:f6:77:04:
                    d6:74:2d:b4:0e:a5:3c:a2:e2:96:00:3a:4d:11:24:
                    45:e7:3b:fb:d6:71:35:27:d0:64:1b:0c:9d:a6:93:
                    0c:36:4d:1b:9c:eb:e1:6d:6c:5e:d5:f4:a6:cf:b3:
                    8b:97:1e:d1:2b:af:70:54:ff:f6:05:57:89:19:1d:
                    e9:02:08:25:c4:c2:cc:0a:f2:24:17:08:14:d3:67:
                    88:79:a8:23:88:fb:df:93:0e:b7:eb:bb:5f:a2:ca:
                    4c:30:0c:d5:ef:9e:54:fc:c6:84:46:d6:72:d9:04:
                    19:37:75:82:66:86:f3:10:63:77:c9:f4:6d:02:68:
                    9b:47:95:c4:7b:bd:d9:aa:0f:b8:42:df:28:8d:83:
                    d6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:57:00:13:25:0F:77:21:1B:12:D4:4A:65:F4:23:27:D4:FC:6F:79
            X509v3 Authority Key Identifier:
                keyid:B9:04:22:55:9B:58:C4:DA:A8:9F:22:4D:49:C7:1F:F4:4F:9B:CA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/uQQiVZtYxNqonyJNSccf9E-byjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uQQiVZtYxNqonyJNSccf9E-byjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA723/2CD7F5C8B27D11ED8856FA81C4F9AE02/4868355806A611F08F878981C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:b6:00:07:9e:73:77:ed:ee:52:64:a8:26:e7:e5:08:c2:97:
         a9:52:09:0b:77:91:58:7d:57:3f:6f:6a:b6:89:15:e2:44:d8:
         b7:ff:f4:8e:bc:cf:70:c9:5c:8d:8c:85:65:e8:2e:b5:62:61:
         ff:7f:25:0e:71:4e:b6:60:4e:18:b2:59:2c:40:e9:42:d3:42:
         da:98:87:ba:6c:b6:4b:7f:f9:18:fb:6f:4b:89:92:67:8b:aa:
         fd:ce:34:09:ee:f2:69:9f:99:a2:46:ba:5c:7d:dc:83:ed:70:
         49:9c:e8:d5:7e:4a:bc:c3:07:01:50:7f:3d:0d:55:61:bf:fa:
         9d:ce:41:03:41:78:06:58:ae:40:45:ed:c3:4c:e6:61:d0:d3:
         fb:c4:be:ca:9a:24:86:9d:fc:59:98:03:1c:6c:cc:00:76:66:
         7d:47:99:a4:6c:46:e2:e7:b8:d2:12:1b:b0:4c:df:af:dc:8e:
         3f:af:98:7b:11:89:f4:da:46:b5:f8:7b:57:45:c1:28:38:e6:
         9a:57:ea:ec:b8:00:0d:17:17:b5:a6:04:6a:99:f1:8f:e7:1a:
         44:da:18:34:3a:a9:e2:a0:99:79:7b:7e:9f:2a:8b:fc:f4:1b:
         32:f9:27:e2:5d:77:e0:cf:2b:c4:27:e7:0e:5d:48:a7:f8:17:
         6d:d8:df:41
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE3MjMxMTAvBgNVBAUTKEI5MDQyMjU1OUI1OEM0REFBODlGMjI0RDQ5QzcxRkY0
NEY5QkNBMzQwHhcNMjYwNDA1MDIzNTUwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQxY2E4Ni00MTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoEwJIAJZH3xmPp8XGSyFyGxUwlY8uGYBf6WApPykXfuzGYuvUstWp0mw25pZ
jkFnNOZEMk69zG3a1fFXnzsMlPrjBpxVwMaQw7oBtG5WOalz2KD0+xBrYiw2ynaI
lzHa1DGNfAtLC0uyTgCsd2opJReF47z2dwTWdC20DqU8ouKWADpNESRF5zv71nE1
J9BkGwydppMMNk0bnOvhbWxe1fSmz7OLlx7RK69wVP/2BVeJGR3pAgglxMLMCvIk
FwgU02eIeagjiPvfkw6367tfospMMAzV755U/MaERtZy2QQZN3WCZobzEGN3yfRt
AmibR5XEe73Zqg+4Qt8ojYPWpQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPdXABMl
D3chGxLUSmX0IyfU/G95MB8GA1UdIwQYMBaAFLkEIlWbWMTaqJ8iTUnHH/RPm8o0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTcyMy8yQ0Q3RjVDOEIy
N0QxMUVEODg1NkZBODFDNEY5QUUwMi91UVFpVlp0WXhOcW9ueUpOU2NjZjlFLWJ5
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VRUWlWWnRZeE5xb255Sk5TY2NmOUUtYnlqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUE3MjMvMkNEN0Y1QzhCMjdEMTFFRDg4NTZGQTgxQzRGOUFFMDIvNDg2ODM1NTgw
NkE2MTFGMDhGODc4OTgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ10gMA0GCSqGSIb3DQEBCwUAA4IBAQA6tgAHnnN37e5SZKgm5+UI
wpepUgkLd5FYfVc/b2q2iRXiRNi3//SOvM9wyVyNjIVl6C61YmH/fyUOcU62YE4Y
slksQOlC00LamIe6bLZLf/kY+29LiZJni6r9zjQJ7vJpn5miRrpcfdyD7XBJnOjV
fkq8wwcBUH89DVVhv/qdzkEDQXgGWK5ARe3DTOZh0NP7xL7KmiSGnfxZmAMcbMwA
dmZ9R5mkbEbi57jSEhuwTN+v3I4/r5h7EYn02ka1+HtXRcEoOOaaV+rsuAANFxe1
pgRqmfGP5xpE2hg0OqnioJl5e36fKov89Bsy+SfiXXfgzyvEJ+cOXUin+Bdt2N9B
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:24 2026 by rpki-client