Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/71A1BB74759711EFA89BA96BC4F9AE02.roa
File:                     71A1BB74759711EFA89BA96BC4F9AE02.roa (raw, json)
Hash identifier:          W6yRkHf1Qxa/yaTHX2SnjkZf4KzTj4oR8ge60uOkiTg=
Subject key identifier:   2B:17:0E:09:3E:8A:E6:F4:77:6F:29:F5:77:F5:94:C2:8D:A2:6F:F8
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       0523
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/71A1BB74759711EFA89BA96BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:07:41 +0000
ROA not before:           Sun 05 Oct 2025 00:26:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     150371
IP address blocks:        103.152.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Oct  5 00:26:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4806d-9b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:77:f6:4a:1d:62:7c:df:cc:5f:d2:3b:f9:
                    83:09:98:b3:6a:29:59:35:2a:30:89:c4:cd:5a:93:
                    a9:8d:91:aa:0f:ab:63:1d:cc:bd:18:d1:44:3c:2f:
                    81:a0:d0:96:3f:6e:73:38:bb:76:73:61:e8:43:50:
                    44:7c:1b:66:ed:1a:eb:9c:30:ae:7c:b9:a9:26:21:
                    71:a1:cd:04:2a:84:86:9b:f4:72:e1:e1:b7:69:4b:
                    d5:e5:90:e0:fd:e1:23:d4:be:eb:e8:da:97:4e:e3:
                    f1:ab:c7:70:8f:ff:4c:cb:4a:6b:1f:c0:b4:08:74:
                    6f:49:2d:ce:ad:27:33:4e:f4:1c:d6:9e:25:29:76:
                    7c:86:5f:f1:ca:52:e9:f8:f9:a9:3b:cd:99:7e:34:
                    1c:f6:6c:ea:2c:61:3d:9d:2a:25:1c:44:90:d7:c2:
                    9c:ff:aa:e4:69:d1:78:8d:87:3d:f0:c3:79:66:5d:
                    66:f3:5d:80:e7:ad:54:42:c1:b9:98:f6:5c:26:fe:
                    08:e5:c7:31:24:a9:5a:34:c8:87:23:01:b2:c9:29:
                    bd:e2:63:04:47:64:1d:35:87:39:9c:9c:24:2b:01:
                    9c:9f:32:01:58:d1:8e:04:a7:ca:c3:a7:03:b4:e8:
                    6c:72:ec:59:5e:12:a7:0b:19:db:dd:19:0e:35:7b:
                    a0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:17:0E:09:3E:8A:E6:F4:77:6F:29:F5:77:F5:94:C2:8D:A2:6F:F8
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/71A1BB74759711EFA89BA96BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:0f:72:36:08:9d:bd:86:ee:31:4c:1e:5e:31:21:fc:96:42:
         fc:51:f6:71:dc:93:28:a2:d3:56:85:e8:0a:24:b1:29:ba:93:
         ad:b3:30:d1:61:3e:1b:b5:09:e1:69:bb:50:49:a8:28:94:02:
         0c:cb:e7:39:ec:9e:80:a7:e9:31:51:cd:0f:32:44:b3:eb:bf:
         18:10:a9:ed:b2:6e:7d:3d:f6:06:ba:8d:77:71:42:33:5e:76:
         af:7e:8e:35:34:99:e9:18:83:5d:a1:7a:82:6a:96:63:38:04:
         3a:b5:17:77:4a:8b:40:1f:14:54:8f:a3:88:b5:a3:28:05:71:
         51:50:72:d9:9e:56:a5:9c:ee:8a:2d:33:fc:77:27:3a:ca:fb:
         07:0f:4a:da:ac:ba:2f:8e:fd:4c:9b:69:8f:e8:f7:97:60:62:
         3e:59:3a:75:56:8b:ff:f5:82:43:d7:4d:03:db:e4:bc:d4:e1:
         29:3d:54:1e:a2:01:bb:60:68:b0:8b:5a:a6:64:6e:0c:70:17:
         fb:f4:49:7c:07:10:6c:6e:e4:b4:ba:4e:dd:6f:cd:fa:2e:07:
         a5:24:a9:e7:42:2d:ff:d3:4e:21:e0:9e:7a:20:a6:41:7f:6b:
         14:5e:0e:43:dc:37:4d:fd:e3:18:ef:6f:35:0d:92:fe:f8:ab:
         0e:87:64:8a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVFMDYxMTAvBgNVBAUTKDUwNzM5NTFFNUMxNTgyNjkzQTg3MDcyRUU1NDhDNjU0
ODVCMDVBMkMwHhcNMjUxMDA1MDAyNjQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODA2ZC05YjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1h139kodYnzfzF/SO/mDCZizailZNSowicTNWpOpjZGqD6tjHcy9GNFEPC+B
oNCWP25zOLt2c2HoQ1BEfBtm7RrrnDCufLmpJiFxoc0EKoSGm/Ry4eG3aUvV5ZDg
/eEj1L7r6NqXTuPxq8dwj/9My0prH8C0CHRvSS3OrSczTvQc1p4lKXZ8hl/xylLp
+PmpO82ZfjQc9mzqLGE9nSolHESQ18Kc/6rkadF4jYc98MN5Zl1m812A561UQsG5
mPZcJv4I5ccxJKlaNMiHIwGyySm94mMER2QdNYc5nJwkKwGcnzIBWNGOBKfKw6cD
tOhscuxZXhKnCxnb3RkONXug7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCsXDgk+
iub0d28p9Xf1lMKNom/4MB8GA1UdIwQYMBaAFFBzlR5cFYJpOocHLuVIxlSFsFos
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUwNi8wNTU5RUVBRTVD
QkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3VmdtazZod2N1NVVqR1ZJV3dX
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VIT1ZIbHdWZ21rNmh3Y3U1VWpHVklXd1dpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUVFMDYvMDU1OUVFQUU1Q0JFMTFFQ0IyNzNEQzdDQzRGOUFFMDIvNzFBMUJCNzQ3
NTk3MTFFRkE4OUJBOTZCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5h1MA0GCSqGSIb3DQEBCwUAA4IBAQA5D3I2CJ29hu4xTB5eMSH8
lkL8UfZx3JMootNWhegKJLEpupOtszDRYT4btQnhabtQSagolAIMy+c57J6Ap+kx
Uc0PMkSz678YEKntsm59PfYGuo13cUIzXnavfo41NJnpGINdoXqCapZjOAQ6tRd3
SotAHxRUj6OItaMoBXFRUHLZnlalnO6KLTP8dyc6yvsHD0rarLovjv1Mm2mP6PeX
YGI+WTp1Vov/9YJD100D2+S81OEpPVQeogG7YGiwi1qmZG4McBf79El8BxBsbuS0
uk7db836LgelJKnnQi3/004h4J56IKZBf2sUXg5D3DdN/eMY7281DZL++KsOh2SK
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:24 2026 by rpki-client