Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4B058994B18D11EC886B063CC4F9AE02.roa
File:                     4B058994B18D11EC886B063CC4F9AE02.roa (raw, json)
Hash identifier:          Fqueet+ndFYhrCwbTP27Ycb9WerbdnToSLajJOuPvMA=
Subject key identifier:   3A:8A:5C:A2:EA:1D:C7:A7:B7:5D:95:22:31:09:7B:F9:90:4A:08:06
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0EC1
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4B058994B18D11EC886B063CC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 18:22:57 +0000
ROA not before:           Tue 31 Mar 2026 18:22:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     271917
IP address blocks:        103.83.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3777 (0xec1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741, serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Mar 31 18:22:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69cc1101-a6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:0e:58:8a:29:06:26:a7:9f:39:05:9c:6d:
                    eb:c4:9a:be:5e:3b:f6:e2:30:5b:7d:8c:f3:49:92:
                    4f:03:ce:86:d5:26:b4:49:db:3a:54:a5:95:46:15:
                    6f:5d:bb:c6:e2:bc:e7:08:1d:4d:2c:2a:e8:d8:3b:
                    bd:a1:77:5b:77:b4:be:80:55:32:24:47:53:22:f0:
                    87:af:17:e2:dd:c4:b4:d6:4a:10:27:ca:55:83:7b:
                    b4:d5:bc:36:4f:e2:cb:5e:25:42:c8:1a:42:95:2d:
                    15:24:78:6f:cd:6c:13:ac:b4:ad:b4:f7:87:f0:8a:
                    c6:0f:c7:07:f9:1c:7d:60:5f:c3:1f:4d:98:fc:11:
                    68:b3:b0:88:e4:0b:95:0f:9e:2e:39:03:cd:af:9d:
                    71:66:ed:8b:53:0f:f5:5c:37:db:42:f4:d8:43:62:
                    89:40:de:16:61:f7:86:6e:c0:da:71:cd:13:9e:32:
                    77:40:ee:42:3f:a3:60:58:d7:4a:a0:68:ec:2c:c8:
                    95:05:a5:4e:1b:3f:b7:89:ed:0f:fc:3e:0e:b6:3d:
                    82:21:74:ce:e6:49:b8:65:b6:08:0a:c0:75:ee:8a:
                    a4:dc:5a:54:6a:cf:9a:5c:43:d2:84:88:0b:23:fb:
                    ad:4f:01:07:45:50:2a:58:e9:43:08:72:03:06:fa:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8A:5C:A2:EA:1D:C7:A7:B7:5D:95:22:31:09:7B:F9:90:4A:08:06
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4B058994B18D11EC886B063CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:87:2b:92:8b:ea:ff:b4:6c:60:01:ad:06:40:df:70:ef:7f:
         d9:ee:75:59:37:d0:30:80:7c:82:02:f3:77:69:11:67:c8:54:
         82:0a:b0:de:9d:eb:9c:6a:c1:15:7a:71:07:7e:b8:30:67:c4:
         48:97:c2:23:85:38:91:22:1e:b6:19:cd:43:32:66:4f:3a:d8:
         bd:6d:67:e6:7d:5e:5b:5d:44:cf:a9:ff:a7:17:d1:e5:2c:15:
         fa:67:5f:9e:34:0f:94:bb:43:64:4f:9b:54:de:00:e1:95:e2:
         92:0c:65:7f:5d:45:52:8d:27:8d:10:11:53:59:d1:d5:85:28:
         67:41:24:fa:a9:c0:d4:5c:b8:cb:b6:e2:72:13:51:5b:27:9e:
         4d:49:44:6f:dc:63:a6:8c:60:79:5d:8d:7f:e5:7b:bd:d5:c4:
         66:c3:2b:f8:a7:eb:c6:fd:3c:56:49:f0:ab:b0:b5:9a:1e:7c:
         57:bc:bd:aa:9a:e7:1c:8b:3c:a6:bc:cb:de:45:02:1d:dd:a7:
         96:4e:af:57:7a:e2:4d:11:68:c3:f9:a6:84:af:3a:e9:8c:00:
         7a:41:71:61:d3:ce:77:dc:d6:7e:28:e8:f5:40:c5:25:7f:e3:
         89:ef:b7:53:73:28:65:6d:52:6a:67:33:ca:6e:02:9b:a7:81:
         35:41:ba:2d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA3NDExMTAvBgNVBAUTKDM3RUFFREE0MjQyRDUwOTYyQjg3QjRBMjA3QUM0QzM0
NEIzMzA2MEMwHhcNMjYwMzMxMTgyMjU3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNjMTEwMS1hNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArLsOWIopBiannzkFnG3rxJq+Xjv24jBbfYzzSZJPA86G1Sa0Sds6VKWVRhVv
XbvG4rznCB1NLCro2Du9oXdbd7S+gFUyJEdTIvCHrxfi3cS01koQJ8pVg3u01bw2
T+LLXiVCyBpClS0VJHhvzWwTrLSttPeH8IrGD8cH+Rx9YF/DH02Y/BFos7CI5AuV
D54uOQPNr51xZu2LUw/1XDfbQvTYQ2KJQN4WYfeGbsDacc0TnjJ3QO5CP6NgWNdK
oGjsLMiVBaVOGz+3ie0P/D4Otj2CIXTO5km4ZbYICsB17oqk3FpUas+aXEPShIgL
I/utTwEHRVAqWOlDCHIDBvoQUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDqKXKLq
Hcent12VIjEJe/mQSggGMB8GA1UdIwQYMBaAFDfq7aQkLVCWK4e0ogesTDRLMwYM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDc0MS83N0M5MTY4RUJE
MTIxMUU5OTBGNEJGMkNDNEY5QUUwMi9OLXJ0cENRdFVKWXJoN1NpQjZ4TU5Fc3pC
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04tcnRwQ1F0VUpZcmg3U2lCNnhNTkVzekJndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzA3NDEvNzdDOTE2OEVCRDEyMTFFOTkwRjRCRjJDQzRGOUFFMDIvNEIwNTg5OTRC
MThEMTFFQzg4NkIwNjNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1PBMA0GCSqGSIb3DQEBCwUAA4IBAQB0hyuSi+r/tGxgAa0GQN9w
73/Z7nVZN9AwgHyCAvN3aRFnyFSCCrDeneucasEVenEHfrgwZ8RIl8IjhTiRIh62
Gc1DMmZPOti9bWfmfV5bXUTPqf+nF9HlLBX6Z1+eNA+Uu0NkT5tU3gDhleKSDGV/
XUVSjSeNEBFTWdHVhShnQST6qcDUXLjLtuJyE1FbJ55NSURv3GOmjGB5XY1/5Xu9
1cRmwyv4p+vG/TxWSfCrsLWaHnxXvL2qmuccizymvMveRQId3aeWTq9XeuJNEWjD
+aaErzrpjAB6QXFh08533NZ+KOj1QMUlf+OJ77dTcyhlbVJqZzPKbgKbp4E1Qbot
-----END CERTIFICATE-----
Generated at Sun Apr 5 21:13:55 2026 by rpki-client