Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/1C7AC7FE4B0711EFBB12B717C4F9AE02.roa
File:                     1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (raw, json)
Hash identifier:          nnwYsXqpriKdgHZ6F2Bjskh6Ji1AomhewkLa8SUVYYs=
Subject key identifier:   41:8D:16:DE:E8:D8:82:61:A6:FA:D1:A3:21:DF:C6:ED:53:71:EC:46
Certificate issuer:       /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial:       0358
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/1C7AC7FE4B0711EFBB12B717C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:39:44 +0000
ROA not before:           Sun 27 Jul 2025 02:06:49 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132335
IP address blocks:        103.67.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
                          rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
        Validity
            Not Before: Jul 27 02:06:49 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46bd0-eddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:5d:8a:bb:8f:ee:05:96:ff:8d:98:a6:01:
                    d1:dd:6f:d9:75:ec:60:d6:10:36:f5:2b:89:2b:2b:
                    96:04:c2:b9:14:f6:ee:20:7b:a1:9e:76:3d:0e:31:
                    7c:1f:9f:6e:1c:d4:04:5e:8a:69:24:75:11:f6:b7:
                    80:0a:e6:ac:5a:cf:2f:27:35:f5:28:f1:81:59:83:
                    32:25:f2:d4:28:48:bc:9c:da:64:81:92:22:25:e7:
                    a0:45:d3:6f:62:11:43:5a:59:2f:fb:ac:d0:2a:eb:
                    ee:56:3f:f1:88:3f:38:a6:1b:f9:9d:ca:ed:db:a3:
                    d5:5e:62:41:a4:b1:e9:4e:68:a2:21:18:e7:8d:89:
                    86:7f:8d:db:45:07:e2:65:12:19:08:01:ff:4f:cb:
                    e5:26:8a:10:b4:cf:38:7f:3d:7e:50:fb:d9:30:07:
                    c7:28:f9:ae:f9:e0:c4:3f:ee:1b:c2:a8:01:0d:a8:
                    43:6d:a7:82:83:7d:5e:b4:5d:e2:fc:52:3f:66:16:
                    f8:94:31:cf:62:53:eb:59:77:5e:7b:f7:1a:e1:50:
                    3e:e2:55:78:2e:f6:12:c2:0d:3a:ff:77:5d:55:eb:
                    1f:80:16:03:81:59:6d:d4:06:85:59:0d:90:87:b8:
                    bb:33:9c:ce:be:51:c0:5b:ad:88:a2:9c:a7:86:42:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8D:16:DE:E8:D8:82:61:A6:FA:D1:A3:21:DF:C6:ED:53:71:EC:46
            X509v3 Authority Key Identifier:
                keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/1C7AC7FE4B0711EFBB12B717C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:43:31:a3:db:2a:90:c8:77:00:f9:fb:9e:1c:93:69:a1:31:
         50:4e:b4:32:df:9f:6d:4a:d1:64:4e:84:76:5f:80:f4:89:b5:
         be:f9:ca:cb:7a:f0:37:2b:68:77:41:11:0a:80:67:c1:e6:1d:
         fb:1c:c7:5a:00:1b:21:8c:b7:09:f2:f5:7f:34:11:5f:bc:89:
         6f:a9:ab:91:ce:14:5e:cd:2e:99:fb:7a:92:ec:2e:72:ae:00:
         a1:26:73:49:b8:f1:a0:d6:2f:21:9b:02:e0:d4:83:fd:62:02:
         81:6c:82:ca:c1:6d:f3:e0:a5:7f:78:48:39:2c:70:5b:42:88:
         7f:48:f9:c9:5a:d6:66:55:4d:1c:43:f2:45:b7:ba:ff:84:59:
         75:3f:8c:03:8f:e1:fb:33:49:cd:d1:11:2e:80:33:4c:83:84:
         95:1e:78:e7:99:ec:60:57:80:b4:a8:71:1e:55:d7:74:66:aa:
         dc:2a:24:04:71:37:7d:e9:85:64:00:50:84:63:1f:d5:06:57:
         b9:64:72:b6:5d:ac:2a:f0:2a:f8:ba:c3:18:a8:a5:8c:9f:10:
         c2:79:3f:94:77:93:20:e4:bb:e1:10:4d:45:a2:24:e6:e6:04:
         72:3c:97:c7:09:d0:8a:34:e5:05:db:01:e9:d0:8b:24:0c:4b:
         b9:f0:ee:58
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey
RkJGRDI2ODYwHhcNMjUwNzI3MDIwNjQ5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmJkMC1lZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMVdiruP7gWW/42YpgHR3W/Zdexg1hA29SuJKyuWBMK5FPbuIHuhnnY9DjF8
H59uHNQEXoppJHUR9reACuasWs8vJzX1KPGBWYMyJfLUKEi8nNpkgZIiJeegRdNv
YhFDWlkv+6zQKuvuVj/xiD84phv5ncrt26PVXmJBpLHpTmiiIRjnjYmGf43bRQfi
ZRIZCAH/T8vlJooQtM84fz1+UPvZMAfHKPmu+eDEP+4bwqgBDahDbaeCg31etF3i
/FI/Zhb4lDHPYlPrWXdee/ca4VA+4lV4LvYSwg06/3ddVesfgBYDgVlt1AaFWQ2Q
h7i7M5zOvlHAW62IopynhkJPZQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEGNFt7o
2IJhpvrRoyHfxu1TcexGMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx
RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE0N0MvN0UwRjU4NzIwMUU5MTFFREFGOEJERTMwQzRGOUFFMDIvMUM3QUM3RkU0
QjA3MTFFRkJCMTJCNzE3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0P2MA0GCSqGSIb3DQEBCwUAA4IBAQC2QzGj2yqQyHcA+fueHJNp
oTFQTrQy359tStFkToR2X4D0ibW++crLevA3K2h3QREKgGfB5h37HMdaABshjLcJ
8vV/NBFfvIlvqauRzhRezS6Z+3qS7C5yrgChJnNJuPGg1i8hmwLg1IP9YgKBbILK
wW3z4KV/eEg5LHBbQoh/SPnJWtZmVU0cQ/JFt7r/hFl1P4wDj+H7M0nN0REugDNM
g4SVHnjnmexgV4C0qHEeVdd0ZqrcKiQEcTd96YVkAFCEYx/VBle5ZHK2Xawq8Cr4
usMYqKWMnxDCeT+Ud5Mg5LvhEE1FoiTm5gRyPJfHCdCKNOUF2wHp0IskDEu58O5Y
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:05 2026 by rpki-client