Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa
File:                     CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (raw, json)
Hash identifier:          G0wfXD8YdWR0Wc2toljzpi576bi3k/pJ5bJYPQ4s76s=
Subject key identifier:   BA:25:D8:E8:2F:F3:FE:C6:25:12:AF:84:85:69:18:DB:92:DA:0C:0B
Certificate issuer:       /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial:       01CF
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa
Signing time:             Tue 07 Jul 2026 05:31:21 +0000
ROA not before:           Tue 07 Jul 2026 05:31:20 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     401276
IP address blocks:        103.230.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 05:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
        Validity
            Not Before: Jul  7 05:31:20 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4c8f28-9ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:cf:5f:7b:b3:42:bf:54:4f:5b:30:fb:db:
                    1e:f8:2c:c0:cf:3f:5e:be:e3:31:df:59:62:db:12:
                    26:a2:33:dc:1b:9a:e0:2e:46:28:85:93:1d:3d:62:
                    fa:1c:41:57:a7:05:f4:18:3e:fa:67:f1:07:ac:ea:
                    f6:5c:55:21:6d:27:c1:c5:a5:9e:b5:7c:ff:55:9c:
                    5d:42:f2:4e:ba:0d:2f:18:95:f0:c7:71:72:21:65:
                    4c:7e:cf:40:1f:4f:df:0f:6a:b3:a9:19:27:7a:25:
                    67:a9:4a:49:b1:de:85:a2:53:a0:bd:ba:44:45:f2:
                    f7:57:0c:7e:fa:16:f0:4d:bb:01:16:d8:36:48:fe:
                    a0:9f:fc:e8:9c:48:fa:13:d5:f9:b1:6c:32:c4:5a:
                    16:6c:2b:85:db:31:83:25:24:9a:95:49:cc:6d:46:
                    a0:0e:da:09:d9:b0:1d:69:9e:cf:cb:8a:b3:be:de:
                    85:4b:17:78:b6:8c:df:84:32:eb:f4:ca:47:3b:19:
                    f0:21:44:78:a7:8f:58:7f:f2:fe:84:e6:bb:e4:41:
                    fe:14:78:9f:af:a5:e6:ac:3e:78:84:34:23:68:69:
                    7d:e4:b8:e7:cf:e6:8a:34:d5:5c:bb:b3:1d:71:cb:
                    4f:df:88:7e:0a:1f:a3:41:c5:b2:e9:be:70:fc:d9:
                    0b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:25:D8:E8:2F:F3:FE:C6:25:12:AF:84:85:69:18:DB:92:DA:0C:0B
            X509v3 Authority Key Identifier:
                keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:3d:c0:41:be:13:75:66:b0:5c:54:37:c3:d3:f2:7f:2b:2f:
         11:ae:e6:51:0c:8e:37:d9:22:ca:6c:b7:68:52:b8:2a:e9:63:
         50:6e:fa:b7:79:7b:87:8c:85:16:b7:be:a2:64:37:8f:e7:80:
         58:05:c1:cf:98:a4:f8:2f:1b:7c:6e:67:95:d1:43:07:dc:e8:
         df:ad:b8:44:8e:d3:a9:cd:2d:46:1c:c3:a8:7e:7b:eb:c4:30:
         89:5d:7a:bc:f5:7f:58:d6:13:cf:d3:74:87:78:ae:96:5f:fc:
         4a:c8:d0:6d:5c:1a:35:97:b5:4a:1d:99:02:01:cf:4d:d0:cb:
         a7:f0:4d:4e:69:ee:72:49:2c:7d:ab:24:ae:71:7b:10:f4:ee:
         70:52:9e:06:cd:f2:65:d4:4e:91:14:3e:0d:23:b5:8d:5d:37:
         e0:0d:6e:78:3a:41:7b:f9:d0:7d:d0:67:16:e7:6f:c5:23:0f:
         b6:b6:c7:95:04:e2:fb:f4:23:a2:71:5d:63:c3:e1:79:35:4b:
         b7:ba:44:b3:5d:2c:c7:8d:47:e8:2f:f7:1a:a0:19:fe:f2:a1:
         25:42:fb:f3:b3:86:6c:f7:d0:5b:06:0b:43:2a:02:04:83:c7:
         ef:b2:34:75:8e:ed:e5:89:c2:c5:90:f6:d8:c1:4f:44:e5:0d:
         57:f7:d4:2d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC
NzgzODA0OTYwHhcNMjYwNzA3MDUzMTIwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjOGYyOC05Y2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApAHPX3uzQr9UT1sw+9se+CzAzz9evuMx31li2xImojPcG5rgLkYohZMdPWL6
HEFXpwX0GD76Z/EHrOr2XFUhbSfBxaWetXz/VZxdQvJOug0vGJXwx3FyIWVMfs9A
H0/fD2qzqRkneiVnqUpJsd6FolOgvbpERfL3Vwx++hbwTbsBFtg2SP6gn/zonEj6
E9X5sWwyxFoWbCuF2zGDJSSalUnMbUagDtoJ2bAdaZ7Py4qzvt6FSxd4tozfhDLr
9MpHOxnwIUR4p49Yf/L+hOa75EH+FHifr6XmrD54hDQjaGl95Ljnz+aKNNVcu7Md
cctP34h+Ch+jQcWy6b5w/NkLJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLol2Ogv
8/7GJRKvhIVpGNuS2gwLMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG
RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU5REMvNkVFQzFGNUNFRkZEMTFFRTkwMjg4QTcyQzRGOUFFMDIvQ0FGNUUwRUE2
QkRBMTFFRjk0MkFCMDZCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ+ZdMA0GCSqGSIb3DQEBCwUAA4IBAQCiPcBBvhN1ZrBcVDfD0/J/
Ky8RruZRDI432SLKbLdoUrgq6WNQbvq3eXuHjIUWt76iZDeP54BYBcHPmKT4Lxt8
bmeV0UMH3OjfrbhEjtOpzS1GHMOofnvrxDCJXXq89X9Y1hPP03SHeK6WX/xKyNBt
XBo1l7VKHZkCAc9N0Mun8E1Oae5ySSx9qySucXsQ9O5wUp4GzfJl1E6RFD4NI7WN
XTfgDW54OkF7+dB90GcW52/FIw+2tseVBOL79COicV1jw+F5NUu3ukSzXSzHjUfo
L/caoBn+8qElQvvzs4Zs99BbBgtDKgIEg8fvsjR1ju3licLFkPbYwU9E5Q1X99Qt
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:22:07 2026 by rpki-client