Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa
File:                     0ECA16060C5911EFA8601E42C4F9AE02.roa (raw, json)
Hash identifier:          sbKErGrZ9wQReaxBfcKt6qzgDt44TVFgH+e5ifioSzo=
Subject key identifier:   73:B1:FC:6A:CC:97:60:94:06:34:A6:AB:2F:12:D9:0A:4F:65:CB:CE
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       046F
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa
Signing time:             Tue 07 Apr 2026 00:33:08 +0000
ROA not before:           Tue 07 Apr 2026 00:33:08 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137453
IP address blocks:        103.181.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: Apr  7 00:33:08 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69d450c4-b103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:01:f2:2d:bf:c9:1f:e0:d0:ef:01:fd:c7:
                    14:40:b0:ae:e7:39:38:41:33:b8:42:c2:52:7d:e6:
                    3a:a1:99:11:ae:33:58:7c:03:1f:26:3d:22:d4:69:
                    21:1d:ad:8d:8d:19:93:80:76:8e:4f:ac:bb:3a:1d:
                    49:80:03:c5:c4:9c:13:8c:9a:fb:ea:97:8c:09:ba:
                    4e:99:8f:9b:e2:be:a0:fe:db:b4:8d:87:3c:d0:96:
                    08:bc:5f:63:9c:80:8b:0f:bc:c7:28:72:d3:65:de:
                    e2:17:08:80:56:8d:34:e3:16:0f:2d:17:e5:b6:26:
                    e3:4e:59:9b:c8:2f:58:55:b9:70:4c:fa:af:5e:b1:
                    57:80:96:1c:e0:18:e1:ab:1a:1e:ec:3f:b9:76:35:
                    ee:98:04:38:c7:7c:bd:de:eb:93:49:27:8b:6c:71:
                    4c:13:f9:98:d0:d1:bd:62:59:42:b4:b5:dd:b8:01:
                    da:34:74:48:de:0f:06:2d:7b:ef:d7:9d:53:0e:cc:
                    20:d2:75:84:08:51:6c:97:9c:33:0d:87:2c:bd:54:
                    5d:70:2e:b5:4d:51:e1:cc:0d:44:53:f2:02:7e:eb:
                    6b:22:2d:12:4b:bc:e3:10:3e:91:b0:06:91:22:80:
                    b4:a2:76:35:05:6c:39:56:24:0b:0c:c3:6c:39:ff:
                    53:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B1:FC:6A:CC:97:60:94:06:34:A6:AB:2F:12:D9:0A:4F:65:CB:CE
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:f1:71:73:43:87:6b:ca:c2:78:58:50:16:32:b4:2a:91:3b:
         45:a5:be:1a:81:5c:4d:23:fe:e3:12:a0:53:46:b8:b6:05:e2:
         25:39:d0:ff:ee:c6:0b:37:5e:35:36:0d:c1:7a:e9:0d:0b:49:
         1f:c0:8c:a3:4f:c7:2f:e1:85:8b:7d:7d:e4:54:72:f8:a4:ae:
         28:02:b2:21:2f:98:ea:ec:e2:3b:f7:25:9a:43:ba:15:89:dc:
         9d:64:a7:76:9b:1d:19:4f:2d:d5:b1:c2:44:3a:2d:1a:8f:fe:
         be:31:dc:12:cb:e1:f6:a5:07:c0:4e:b1:67:fa:c1:0c:e1:c3:
         00:37:d3:b3:75:d4:7d:ac:9d:c6:a2:71:25:c6:3f:a7:47:77:
         43:eb:e9:05:fe:2d:1c:57:c8:52:34:e7:30:cf:e8:da:37:b2:
         84:ae:40:96:a4:bb:66:f6:e8:65:27:54:15:46:17:ae:e5:b1:
         1c:c3:63:7a:f5:91:8b:0a:43:73:11:76:e3:24:cf:d6:6a:39:
         27:7d:34:75:b9:96:75:a9:fe:dc:47:f7:20:fb:8f:e6:2d:53:
         ee:4d:61:bc:31:a4:04:06:ad:f1:79:b8:82:46:7d:61:e4:71:
         8c:bb:1b:33:a6:63:c8:cb:ba:14:3a:c7:17:75:59:f8:37:44:
         81:39:61:47
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz
QkUyNUM2QTAwHhcNMjYwNDA3MDAzMzA4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ0NTBjNC1iMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAloMB8i2/yR/g0O8B/ccUQLCu5zk4QTO4QsJSfeY6oZkRrjNYfAMfJj0i1Gkh
Ha2NjRmTgHaOT6y7Oh1JgAPFxJwTjJr76peMCbpOmY+b4r6g/tu0jYc80JYIvF9j
nICLD7zHKHLTZd7iFwiAVo004xYPLRfltibjTlmbyC9YVblwTPqvXrFXgJYc4Bjh
qxoe7D+5djXumAQ4x3y93uuTSSeLbHFME/mY0NG9YllCtLXduAHaNHRI3g8GLXvv
151TDswg0nWECFFsl5wzDYcsvVRdcC61TVHhzA1EU/ICfutrIi0SS7zjED6RsAaR
IoC0onY1BWw5ViQLDMNsOf9TWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHOx/GrM
l2CUBjSmqy8S2QpPZcvOMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF
M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjk2REIvQTg2NEQwRUE4RTNEMTFFQ0E4N0FCRjE2QzRGOUFFMDIvMEVDQTE2MDYw
QzU5MTFFRkE4NjAxRTQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7W1MA0GCSqGSIb3DQEBCwUAA4IBAQAv8XFzQ4drysJ4WFAWMrQq
kTtFpb4agVxNI/7jEqBTRri2BeIlOdD/7sYLN141Ng3BeukNC0kfwIyjT8cv4YWL
fX3kVHL4pK4oArIhL5jq7OI79yWaQ7oVidydZKd2mx0ZTy3VscJEOi0aj/6+MdwS
y+H2pQfATrFn+sEM4cMAN9OzddR9rJ3GonElxj+nR3dD6+kF/i0cV8hSNOcwz+ja
N7KErkCWpLtm9uhlJ1QVRheu5bEcw2N69ZGLCkNzEXbjJM/WajknfTR1uZZ1qf7c
R/cg+4/mLVPuTWG8MaQEBq3xebiCRn1h5HGMuxszpmPIy7oUOscXdVn4N0SBOWFH
-----END CERTIFICATE-----
Generated at Sat Apr 18 11:25:47 2026 by rpki-client