Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/571B65E63DB411EEAA68F342C4F9AE02.roa
File:                     571B65E63DB411EEAA68F342C4F9AE02.roa (raw, json)
Hash identifier:          OesppDhUnoiJ2S/fvZH2VYA9rOlCiKhEiOUHt/iQgs4=
Subject key identifier:   86:4D:C3:18:CB:E5:91:B5:85:2C:38:B2:12:C9:03:79:C9:16:52:B7
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0EC3
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/571B65E63DB411EEAA68F342C4F9AE02.roa
Signing time:             Tue 31 Mar 2026 18:23:02 +0000
ROA not before:           Tue 31 Mar 2026 18:23:02 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     5065
IP address blocks:        103.83.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3779 (0xec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741, serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Mar 31 18:23:02 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69cc1106-8beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:79:49:31:63:32:f2:d7:6c:7a:0e:43:dc:
                    7d:63:7b:a4:de:99:6c:eb:97:47:03:ba:88:c7:91:
                    52:1f:3d:25:04:6e:08:27:bd:08:78:51:fc:6e:64:
                    98:a4:37:ce:6b:7b:27:61:15:f1:d4:7b:42:c9:df:
                    7d:93:57:c4:48:a3:f6:54:7a:d7:21:25:dc:32:0e:
                    37:00:40:fe:c4:03:80:38:20:c8:97:1a:48:e1:8f:
                    b6:1d:61:da:40:26:15:a6:ae:ef:46:c1:4b:90:24:
                    76:92:28:ec:be:bd:16:3e:ff:98:82:b1:30:0c:51:
                    32:8a:8b:5f:57:fd:08:02:c1:30:1b:57:fc:fd:7c:
                    3a:37:51:db:dd:11:ed:ef:4e:38:02:54:09:69:68:
                    c2:60:89:71:f4:55:2b:00:e8:ed:b5:4c:03:04:79:
                    fc:4a:ff:b2:24:f7:eb:23:e8:df:89:9c:bf:53:2a:
                    fd:e7:3a:37:0b:73:fe:a9:94:f2:7a:ea:c6:85:39:
                    ef:8a:a2:49:7a:8f:4b:ee:20:f0:14:21:ea:7d:47:
                    98:8f:bc:02:fc:62:d4:a1:79:b5:6c:35:5a:ff:9c:
                    fe:d6:6d:7f:aa:93:23:fc:97:d9:26:35:0f:ee:78:
                    3d:a2:6a:86:e2:55:8d:6e:55:d8:ea:11:82:e9:42:
                    5b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4D:C3:18:CB:E5:91:B5:85:2C:38:B2:12:C9:03:79:C9:16:52:B7
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/571B65E63DB411EEAA68F342C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:0e:43:36:5e:de:96:bb:44:8b:3c:00:b5:c6:ea:9b:19:95:
         c1:ef:e1:60:0d:9f:a5:25:1d:77:cc:e1:bf:e1:90:51:20:b8:
         34:b4:93:7a:8e:b7:ef:a3:90:68:a8:78:56:9b:77:35:d1:57:
         9e:06:ad:02:59:2d:0b:1c:fa:e0:da:ad:28:0d:27:fb:46:ef:
         31:d3:aa:54:63:84:b9:a5:10:69:91:7c:c2:8f:21:94:ad:db:
         15:43:95:b1:e7:22:f3:14:a9:d2:47:b2:89:d7:4f:a4:13:61:
         09:d8:38:b2:31:18:b6:0b:cd:1c:3e:f2:ab:de:d4:63:aa:fd:
         68:4f:47:9b:03:d0:63:09:2d:c4:83:2e:aa:0f:6b:ec:55:05:
         7b:6f:53:1e:1c:42:27:79:55:76:f9:c0:39:05:f5:e6:8b:3d:
         90:3b:7c:69:de:b7:d2:31:dc:b7:ec:47:0b:11:45:11:df:69:
         73:66:89:3a:b5:80:84:9c:5f:6d:be:48:04:4a:80:9e:fd:9b:
         4a:16:38:ee:e0:03:d8:80:c4:19:15:e6:42:f7:02:77:18:a8:
         83:78:8c:5a:d5:e8:17:d4:d5:8b:82:61:10:58:52:09:db:56:
         34:de:3d:ab:83:b0:d7:26:b2:25:1c:ee:8a:86:08:a9:e3:1b:
         f5:4e:d5:3c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA3NDExMTAvBgNVBAUTKDM3RUFFREE0MjQyRDUwOTYyQjg3QjRBMjA3QUM0QzM0
NEIzMzA2MEMwHhcNMjYwMzMxMTgyMzAyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNjMTEwNi04YmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoeh5STFjMvLXbHoOQ9x9Y3uk3pls65dHA7qIx5FSHz0lBG4IJ70IeFH8bmSY
pDfOa3snYRXx1HtCyd99k1fESKP2VHrXISXcMg43AED+xAOAOCDIlxpI4Y+2HWHa
QCYVpq7vRsFLkCR2kijsvr0WPv+YgrEwDFEyiotfV/0IAsEwG1f8/Xw6N1Hb3RHt
7044AlQJaWjCYIlx9FUrAOjttUwDBHn8Sv+yJPfrI+jfiZy/Uyr95zo3C3P+qZTy
eurGhTnviqJJeo9L7iDwFCHqfUeYj7wC/GLUoXm1bDVa/5z+1m1/qpMj/JfZJjUP
7ng9omqG4lWNblXY6hGC6UJbwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIZNwxjL
5ZG1hSw4shLJA3nJFlK3MB8GA1UdIwQYMBaAFDfq7aQkLVCWK4e0ogesTDRLMwYM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDc0MS83N0M5MTY4RUJE
MTIxMUU5OTBGNEJGMkNDNEY5QUUwMi9OLXJ0cENRdFVKWXJoN1NpQjZ4TU5Fc3pC
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04tcnRwQ1F0VUpZcmg3U2lCNnhNTkVzekJndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzA3NDEvNzdDOTE2OEVCRDEyMTFFOTkwRjRCRjJDQzRGOUFFMDIvNTcxQjY1RTYz
REI0MTFFRUFBNjhGMzQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1PDMA0GCSqGSIb3DQEBCwUAA4IBAQB3DkM2Xt6Wu0SLPAC1xuqb
GZXB7+FgDZ+lJR13zOG/4ZBRILg0tJN6jrfvo5BoqHhWm3c10VeeBq0CWS0LHPrg
2q0oDSf7Ru8x06pUY4S5pRBpkXzCjyGUrdsVQ5Wx5yLzFKnSR7KJ10+kE2EJ2Diy
MRi2C80cPvKr3tRjqv1oT0ebA9BjCS3Egy6qD2vsVQV7b1MeHEIneVV2+cA5BfXm
iz2QO3xp3rfSMdy37EcLEUUR32lzZok6tYCEnF9tvkgESoCe/ZtKFjju4APYgMQZ
FeZC9wJ3GKiDeIxa1egX1NWLgmEQWFIJ21Y03j2rg7DXJrIlHO6Khgip4xv1TtU8
-----END CERTIFICATE-----
Generated at Sun Apr 5 21:13:49 2026 by rpki-client