Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/88B3F0026E9F11EEB03D9582C4F9AE02.roa
File:                     88B3F0026E9F11EEB03D9582C4F9AE02.roa (raw, json)
Hash identifier:          O0V0vlEtgJw0+v4YneII/jwXUKrih5E+dHib5a1J4w0=
Subject key identifier:   3F:BB:5D:15:5C:50:78:8C:63:03:49:8D:F0:EC:70:37:22:B8:49:6B
Certificate issuer:       /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
Certificate serial:       0489
Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/88B3F0026E9F11EEB03D9582C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:59:51 +0000
ROA not before:           Mon 17 Mar 2025 00:16:17 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     151791
IP address blocks:        103.180.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl
                          rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1
        Validity
            Not Before: Mar 17 00:16:17 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a40e17-867a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:9a:25:0b:f7:ad:83:8a:9d:53:d0:eb:21:
                    23:e2:64:58:5b:56:23:58:4c:14:9b:f0:1f:23:9b:
                    48:f3:d8:d8:97:44:01:de:e3:66:0d:3a:72:ca:ab:
                    94:6c:07:7e:e6:1a:08:f2:f9:56:12:71:47:2d:7f:
                    3e:ad:a0:a3:f7:e0:8d:32:03:b6:e7:2b:0e:fb:ad:
                    79:6c:8f:97:b7:f1:32:ae:86:40:b6:4a:35:8a:48:
                    f1:90:7c:29:ee:d8:5d:af:eb:14:75:43:aa:ac:1f:
                    e4:bb:80:04:c5:c9:e5:89:66:a1:ec:b2:b9:57:1c:
                    27:b7:69:85:e1:f7:72:08:66:eb:0e:1c:55:65:a8:
                    04:87:6e:2f:7d:c5:15:4e:58:16:06:38:dd:d7:5e:
                    50:4d:aa:07:06:5a:90:05:d4:8d:31:32:ba:fe:04:
                    1e:ff:b4:8a:90:80:37:f0:22:e7:54:93:ba:ec:c1:
                    a0:d8:43:6c:e2:ad:bb:a3:80:7f:95:72:92:8d:6e:
                    4c:5b:fe:3c:0c:fc:59:58:79:55:b9:46:bf:1d:7e:
                    d2:cf:a8:90:91:72:bd:5a:07:56:9a:0c:9b:12:fb:
                    c6:f6:55:8c:c8:96:b7:8e:32:c8:dc:51:12:38:43:
                    2d:f9:4f:5f:30:c5:99:f2:aa:29:4d:f0:3b:2c:ed:
                    33:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BB:5D:15:5C:50:78:8C:63:03:49:8D:F0:EC:70:37:22:B8:49:6B
            X509v3 Authority Key Identifier:
                keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/88B3F0026E9F11EEB03D9582C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:23:61:56:aa:12:62:50:b8:fe:a7:26:53:44:0f:82:ae:a3:
         7a:43:22:f1:06:a2:a6:5e:fb:48:0b:d9:14:1e:69:f3:c1:a2:
         6f:f9:63:f0:a9:96:ca:dc:a5:21:40:8d:a1:7a:96:14:22:ef:
         2f:a7:42:aa:31:af:a7:d8:f6:bc:70:2f:12:d4:91:be:ea:eb:
         4b:8b:d2:f6:2c:0d:3b:7e:a2:95:da:7f:b2:fd:08:40:d8:ef:
         25:b3:e2:d0:4c:73:8c:1d:e9:7f:5b:31:e8:9b:50:7a:47:1e:
         1b:10:e8:53:ef:e5:af:21:99:48:f9:4d:57:41:fd:d0:38:a0:
         b7:4b:fa:c6:6a:11:22:25:24:54:8f:a4:b9:ca:63:c3:03:95:
         c2:a8:80:66:03:cc:b7:95:b0:e2:e6:19:ff:b0:9d:a6:c2:dc:
         fa:4f:f0:d1:4d:d6:ca:e3:a4:54:3b:20:46:cf:03:ff:74:08:
         83:be:27:1d:8a:bc:4f:56:c8:0b:da:79:20:39:17:ef:26:0b:
         10:7f:08:bc:60:b6:fd:52:6b:a7:33:01:c7:ec:13:b6:04:17:
         1c:29:60:91:68:36:71:55:84:ae:f7:78:60:ce:fd:6f:87:a1:
         a1:4e:70:a2:14:62:7e:04:b0:1d:59:3c:42:8f:24:87:1b:69:
         dd:d9:5f:98
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz
MUM1QUZEQTEwHhcNMjUwMzE3MDAxNjE3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGUxNy04NjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4oeaJQv3rYOKnVPQ6yEj4mRYW1YjWEwUm/AfI5tI89jYl0QB3uNmDTpyyquU
bAd+5hoI8vlWEnFHLX8+raCj9+CNMgO25ysO+615bI+Xt/EyroZAtko1ikjxkHwp
7thdr+sUdUOqrB/ku4AExcnliWah7LK5Vxwnt2mF4fdyCGbrDhxVZagEh24vfcUV
TlgWBjjd115QTaoHBlqQBdSNMTK6/gQe/7SKkIA38CLnVJO67MGg2ENs4q27o4B/
lXKSjW5MW/48DPxZWHlVuUa/HX7Sz6iQkXK9WgdWmgybEvvG9lWMyJa3jjLI3FES
OEMt+U9fMMWZ8qopTfA7LO0zbwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD+7XRVc
UHiMYwNJjfDscDciuElrMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE
RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg3QkIvOURGMERGQkU3REU5MTFFQ0JFQTA4RTBGQzRGOUFFMDIvODhCM0YwMDI2
RTlGMTFFRUIwM0Q5NTgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7Q3MA0GCSqGSIb3DQEBCwUAA4IBAQAQI2FWqhJiULj+pyZTRA+C
rqN6QyLxBqKmXvtIC9kUHmnzwaJv+WPwqZbK3KUhQI2hepYUIu8vp0KqMa+n2Pa8
cC8S1JG+6utLi9L2LA07fqKV2n+y/QhA2O8ls+LQTHOMHel/WzHom1B6Rx4bEOhT
7+WvIZlI+U1XQf3QOKC3S/rGahEiJSRUj6S5ymPDA5XCqIBmA8y3lbDi5hn/sJ2m
wtz6T/DRTdbK46RUOyBGzwP/dAiDvicdirxPVsgL2nkgORfvJgsQfwi8YLb9Umun
MwHH7BO2BBccKWCRaDZxVYSu93hgzv1vh6GhTnCiFGJ+BLAdWTxCjySHG2nd2V+Y
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:13 2026 by rpki-client