Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/88B3F0026E9F11EEB03D9582C4F9AE02.roa
File:                     88B3F0026E9F11EEB03D9582C4F9AE02.roa (raw, json)
Hash identifier:          pwbub50OdisHRHuS+ukx/m10TX4s6/bfnVtkvdfMQoE=
Subject key identifier:   90:88:0B:86:91:B8:8F:FC:E0:C4:CF:C9:B7:AE:61:1B:C8:51:94:E9
Certificate issuer:       /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Certificate serial:       04A0
Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/88B3F0026E9F11EEB03D9582C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:30:39 +0000
ROA not before:           Fri 03 Apr 2026 00:30:39 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     151791
IP address blocks:        103.180.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
                          rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
        Validity
            Not Before: Apr  3 00:30:39 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf0a2f-a42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:27:69:30:6f:2e:3c:6c:d4:09:d0:75:63:dd:
                    94:7c:c7:f5:3e:3e:29:0e:78:2f:62:2e:ae:50:b2:
                    b9:0d:96:f8:19:46:64:59:55:ae:2b:b3:8e:80:0c:
                    28:c4:4e:62:5d:16:d3:6e:2e:3d:c9:d6:04:69:de:
                    7e:c4:af:86:f1:f7:74:df:cb:ee:30:a3:bd:87:c2:
                    b0:71:6e:47:04:3d:b7:36:27:b2:63:23:70:69:71:
                    98:58:32:71:7c:6d:ff:ce:98:85:68:bd:6f:73:7c:
                    07:5c:eb:00:cc:28:b3:8a:8f:35:73:66:07:4f:31:
                    a4:f5:84:af:e2:69:85:94:75:29:f4:6d:f4:19:02:
                    ae:ce:da:0b:2c:8a:aa:2d:ea:86:98:e6:39:e8:0c:
                    c2:60:91:c0:29:26:73:10:a1:a1:0c:81:6f:8e:22:
                    f5:e9:ee:87:b9:f5:e0:20:93:a1:df:44:8b:f0:64:
                    a7:40:4b:92:66:c2:5f:e5:79:48:97:78:93:5c:66:
                    bf:7d:3f:04:a8:de:10:3f:61:46:f0:49:55:4b:94:
                    6a:ba:60:a5:5e:4f:dc:46:ae:8a:14:88:50:5b:85:
                    6e:ef:6f:f7:d5:0a:f1:8d:c7:7f:96:6e:3a:c0:e2:
                    d3:a9:62:c2:96:40:c1:38:06:ce:1b:73:d0:41:e4:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:88:0B:86:91:B8:8F:FC:E0:C4:CF:C9:B7:AE:61:1B:C8:51:94:E9
            X509v3 Authority Key Identifier:
                keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/88B3F0026E9F11EEB03D9582C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:12:92:7f:6b:89:d3:7b:26:17:e8:fb:5e:0c:af:d8:3d:b5:
         a6:3f:15:61:8c:9f:aa:07:97:c5:59:6e:f7:b7:6b:35:fb:aa:
         32:df:ec:8e:22:f4:19:a9:3d:6f:e0:db:6b:1d:6c:39:35:ea:
         f5:32:ed:ab:74:91:9f:d9:7f:87:4a:9b:26:94:c6:39:6a:b6:
         05:9c:0d:d9:dd:24:ca:50:82:e0:f1:d7:77:f8:5c:dc:23:68:
         81:e4:3e:84:67:46:a9:57:b5:76:4e:e7:ca:6d:42:7c:78:04:
         e3:05:26:1e:e0:9c:9c:41:7f:21:35:78:c1:bc:1d:23:fc:3f:
         05:21:25:0a:5d:47:45:4b:e8:84:af:0c:5d:f3:ea:12:b2:e9:
         2e:8f:b3:c1:af:02:9c:45:28:9a:85:d4:d2:9e:c9:2e:e1:24:
         b8:4e:2d:42:32:fa:2d:68:4a:06:68:8a:3e:4b:53:f0:bd:2a:
         d1:4f:a8:5f:8e:09:b4:e4:4a:ec:21:db:c0:a6:b0:41:56:06:
         56:0e:21:54:44:cb:6a:eb:b0:cf:ff:2b:79:56:52:d6:b6:52:
         80:98:6d:17:05:44:33:83:94:79:20:63:5f:d1:58:42:03:dd:
         73:dd:dc:0a:7f:fa:cd:53:aa:37:a9:93:ff:70:0c:f8:9a:38:
         6e:27:69:d7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz
MUM1QUZEQTEwHhcNMjYwNDAzMDAzMDM5WhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmMGEyZi1hNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7CdpMG8uPGzUCdB1Y92UfMf1Pj4pDngvYi6uULK5DZb4GUZkWVWuK7OOgAwo
xE5iXRbTbi49ydYEad5+xK+G8fd038vuMKO9h8KwcW5HBD23NieyYyNwaXGYWDJx
fG3/zpiFaL1vc3wHXOsAzCizio81c2YHTzGk9YSv4mmFlHUp9G30GQKuztoLLIqq
LeqGmOY56AzCYJHAKSZzEKGhDIFvjiL16e6HufXgIJOh30SL8GSnQEuSZsJf5XlI
l3iTXGa/fT8EqN4QP2FG8ElVS5RqumClXk/cRq6KFIhQW4Vu72/31Qrxjcd/lm46
wOLTqWLClkDBOAbOG3PQQeRLnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJCIC4aR
uI/84MTPybeuYRvIUZTpMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE
RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg3QkIvOURGMERGQkU3REU5MTFFQ0JFQTA4RTBGQzRGOUFFMDIvODhCM0YwMDI2
RTlGMTFFRUIwM0Q5NTgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7Q3MA0GCSqGSIb3DQEBCwUAA4IBAQCREpJ/a4nTeyYX6PteDK/Y
PbWmPxVhjJ+qB5fFWW73t2s1+6oy3+yOIvQZqT1v4NtrHWw5Ner1Mu2rdJGf2X+H
SpsmlMY5arYFnA3Z3STKUILg8dd3+FzcI2iB5D6EZ0apV7V2TufKbUJ8eATjBSYe
4JycQX8hNXjBvB0j/D8FISUKXUdFS+iErwxd8+oSsukuj7PBrwKcRSiahdTSnsku
4SS4Ti1CMvotaEoGaIo+S1PwvSrRT6hfjgm05ErsIdvAprBBVgZWDiFURMtq67DP
/yt5VlLWtlKAmG0XBUQzg5R5IGNf0VhCA91z3dwKf/rNU6o3qZP/cAz4mjhuJ2nX
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:04:54 2026 by rpki-client