Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa
File:                     BD84664CB0F011E5A08A224DC4F9AE02.roa (raw, json)
Hash identifier:          Gyt9cN9nsxb60dLcwbjKsF6bTMWMBoLo3xgo2Mxq9V8=
Subject key identifier:   CD:85:36:C2:AD:75:89:83:2C:D3:CC:A9:C0:CA:7A:CF:07:8B:0F:44
Certificate issuer:       /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial:       2823
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:45:35 +0000
ROA not before:           Tue 08 Jul 2025 15:52:47 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     58430
IP address blocks:        103.11.12.0/24 maxlen: 24
                          2405:6d00:c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10275 (0x2823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
        Validity
            Not Before: Jul  8 15:52:47 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47b3f-75fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:17:b3:73:81:f6:05:a2:31:ae:70:12:27:
                    4f:6e:bf:ea:82:5c:ed:d1:08:dd:ae:27:7f:5c:46:
                    3d:ee:6e:8d:02:a4:cd:78:20:25:bf:25:45:4b:ad:
                    84:41:a6:c2:ca:84:d6:94:1b:69:54:de:4d:d9:9a:
                    86:62:40:e2:eb:71:b2:2c:9a:60:4a:4e:01:30:5d:
                    28:ee:73:3b:72:c8:99:44:e4:f5:73:14:18:d3:51:
                    13:7a:d3:8a:85:28:7d:f9:2c:40:01:01:83:97:6b:
                    97:99:fd:c5:58:d5:bd:fb:67:58:3b:63:24:3d:b7:
                    4f:b1:69:51:d8:b7:e6:49:be:a3:12:51:b3:e2:c0:
                    2e:52:4a:67:4f:33:f6:19:e0:70:46:d7:4d:88:1f:
                    8e:92:9e:57:ff:73:79:4c:99:6c:89:9f:da:44:f7:
                    69:01:eb:e0:90:ee:b7:90:49:9e:a3:5b:f2:b0:a0:
                    41:6b:ee:c6:34:92:dd:e9:1b:ad:cd:c3:d6:74:c7:
                    b1:f0:a3:7e:86:14:b3:ae:80:97:68:0f:71:3b:0b:
                    1a:f4:be:34:c2:c0:e4:ac:5d:c0:f8:5c:cf:24:ff:
                    fb:a5:e4:58:cc:03:e8:e8:12:4d:2a:21:81:b1:64:
                    b1:fe:f1:60:52:9f:e6:37:3e:50:99:8e:3b:50:ea:
                    19:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:85:36:C2:AD:75:89:83:2C:D3:CC:A9:C0:CA:7A:CF:07:8B:0F:44
            X509v3 Authority Key Identifier:
                keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.12.0/24
                IPv6:
                  2405:6d00:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:8c:9a:9b:95:de:e4:bf:0f:a4:cc:57:03:1f:7a:c5:ba:39:
         d6:93:b8:3c:96:92:d9:13:c6:7c:49:1c:24:27:85:d6:1f:cd:
         1a:b6:e3:d4:81:28:6f:56:d4:19:c3:d8:67:d2:69:b9:ef:e0:
         ac:7a:9e:4a:4d:0f:2c:24:36:a2:9f:6f:24:c7:83:a9:90:93:
         9c:1e:71:b4:f3:b4:b7:04:5a:82:ac:39:41:a1:73:50:b8:22:
         a5:2d:78:98:2e:01:e2:c3:be:1c:76:2b:93:a9:7d:27:75:ae:
         dd:e3:67:dc:4b:09:49:73:03:b6:12:3a:12:4b:0c:5a:ec:86:
         3c:d6:76:a0:a9:06:66:3e:50:5a:04:c3:65:8f:f8:77:79:bf:
         71:53:fb:e7:a9:ee:b6:22:dd:14:35:12:ae:e4:51:89:0b:5e:
         c7:d8:a3:57:e6:9c:f4:84:9a:36:87:24:f5:4d:9d:6d:1a:7e:
         27:3e:f7:6b:e0:ad:2f:8e:b4:52:ac:a0:0f:5b:54:1e:eb:a2:
         a6:04:e0:4f:ad:49:75:04:d5:0b:db:8e:01:21:9c:76:95:cf:
         29:13:87:3c:01:9f:a3:b4:7c:80:79:07:fe:1a:92:7d:de:a8:
         75:04:4b:98:34:e5:27:b4:46:bc:b2:0f:3f:b2:42:fa:70:e4:
         ff:0c:8f:0b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICKCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE
RjgwN0NEODEwHhcNMjUwNzA4MTU1MjQ3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2IzZi03NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApWQXs3OB9gWiMa5wEidPbr/qglzt0Qjdrid/XEY97m6NAqTNeCAlvyVFS62E
QabCyoTWlBtpVN5N2ZqGYkDi63GyLJpgSk4BMF0o7nM7csiZROT1cxQY01ETetOK
hSh9+SxAAQGDl2uXmf3FWNW9+2dYO2MkPbdPsWlR2LfmSb6jElGz4sAuUkpnTzP2
GeBwRtdNiB+Okp5X/3N5TJlsiZ/aRPdpAevgkO63kEmeo1vysKBBa+7GNJLd6Rut
zcPWdMex8KN+hhSzroCXaA9xOwsa9L40wsDkrF3A+FzPJP/7peRYzAPo6BJNKiGB
sWSx/vFgUp/mNz5QmY47UOoZhwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFM2FNsKt
dYmDLNPMqcDKes8Hiw9EMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3
Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6
WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFFNjAvRjE5OTY3MTJDN0NGMTFFNEIxM0JFMTIxQzRGOUFFMDIvQkQ4NDY2NENC
MEYwMTFFNUEwOEEyMjREQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZwsMMA8EAgACMAkDBwAkBW0ADAAwDQYJKoZIhvcNAQELBQADggEB
ALeMmpuV3uS/D6TMVwMfesW6OdaTuDyWktkTxnxJHCQnhdYfzRq249SBKG9W1BnD
2GfSabnv4Kx6nkpNDywkNqKfbyTHg6mQk5wecbTztLcEWoKsOUGhc1C4IqUteJgu
AeLDvhx2K5OpfSd1rt3jZ9xLCUlzA7YSOhJLDFrshjzWdqCpBmY+UFoEw2WP+Hd5
v3FT++ep7rYi3RQ1Eq7kUYkLXsfYo1fmnPSEmjaHJPVNnW0afic+92vgrS+OtFKs
oA9bVB7roqYE4E+tSXUE1QvbjgEhnHaVzykThzwBn6O0fIB5B/4akn3eqHUES5g0
5Se0RryyDz+yQvpw5P8Mjws=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:21 2026 by rpki-client