Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/D1A6B6D0738E11ED8283FF53C4F9AE02.roa
File:                     D1A6B6D0738E11ED8283FF53C4F9AE02.roa (raw, json)
Hash identifier:          3vRa9WFK+kf+bN7ecrhdwpGVGQO7HuyflbnaeE8DX3Q=
Subject key identifier:   F8:44:D4:E4:01:48:2C:49:48:83:F8:F9:62:38:56:3A:BB:60:92:86
Certificate issuer:       /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Certificate serial:       0AD1
Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/D1A6B6D0738E11ED8283FF53C4F9AE02.roa
Signing time:             Tue 10 Nov 2026 19:36:59 +0000
ROA not before:           Tue 10 Nov 2026 19:36:59 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     139922
IP address blocks:        103.156.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
                          rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 19:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
        Validity
            Not Before: Nov 10 19:36:59 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6af3725b-0753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:fb:81:59:96:a4:bd:01:7e:12:ef:30:40:
                    f8:71:91:20:fb:80:c3:9a:dc:4a:53:eb:b3:3f:f6:
                    7e:a8:dc:9b:ff:d6:49:c2:d4:b9:46:23:a5:8f:ca:
                    70:3f:69:68:ca:6e:66:22:6c:ad:48:d7:8a:31:a1:
                    0a:56:54:56:ac:c5:1c:cb:77:9e:0a:56:fc:50:ac:
                    93:bd:ce:35:0d:80:de:52:5c:47:8b:14:ba:70:1f:
                    8f:61:4e:06:45:1b:9d:4e:f8:24:46:2f:43:6c:4c:
                    ae:9f:d0:dd:35:ac:70:cd:a8:92:0a:30:31:85:9b:
                    0b:66:83:e7:2f:4d:60:e9:a8:45:57:1b:ec:0f:91:
                    39:69:3d:e6:54:e6:9f:d1:bd:18:64:db:88:0f:80:
                    ad:c2:48:a8:55:9b:6a:e6:4f:a0:f3:09:c7:72:f8:
                    20:2f:a1:6a:ae:6b:c2:1d:7f:ef:f3:2f:4d:b4:5a:
                    55:f2:b6:ac:b4:f8:74:63:5e:37:cc:ff:d4:2b:bb:
                    3a:4c:4f:71:cd:91:22:c7:9c:32:09:92:72:e5:b1:
                    cb:f0:ec:db:87:d5:5a:25:4f:d5:ad:73:e1:16:87:
                    fd:8b:ff:36:f4:95:6c:43:3a:6a:39:1f:6e:a8:39:
                    2c:00:49:57:0e:43:fa:b8:92:53:9f:a4:d3:f0:c8:
                    0c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:44:D4:E4:01:48:2C:49:48:83:F8:F9:62:38:56:3A:BB:60:92:86
            X509v3 Authority Key Identifier:
                keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/D1A6B6D0738E11ED8283FF53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:53:77:89:7f:94:ed:35:b5:fa:d0:c8:dd:f9:63:4b:8e:e9:
         73:a8:ce:32:cb:69:bd:9b:34:3c:0f:5e:b9:53:24:5c:41:f1:
         e1:f2:5c:d5:ba:f1:39:85:0f:e6:94:6e:9e:d5:d4:6d:cb:98:
         8a:b2:4a:27:93:ef:a6:9d:68:14:e3:71:72:bb:ba:16:bd:83:
         28:5a:99:cb:ef:d5:e8:59:98:fa:8e:4f:a0:4f:cf:bf:f2:01:
         ab:6e:59:52:7b:3c:97:f8:c4:da:0b:13:ac:39:66:02:24:83:
         aa:c1:58:02:4e:a1:af:8e:07:21:09:7a:3d:b2:72:df:1a:7d:
         27:04:57:50:13:66:b9:4c:58:0e:a9:67:6d:88:9b:ec:99:ca:
         64:ee:7e:67:80:33:f7:ca:3f:88:dc:35:67:cc:ae:d9:6d:05:
         ba:87:4f:1c:15:ad:6e:dc:19:bc:a6:dd:de:bc:21:9a:33:06:
         61:71:ea:14:14:d1:09:29:ca:cf:62:e9:8c:82:18:79:48:d8:
         fe:24:54:ac:1d:ad:e0:1c:e0:95:f9:4a:7b:3f:8f:9b:07:b2:
         26:6b:bf:f6:7f:a3:81:44:20:82:9e:36:f2:c1:27:bf:db:41:
         99:81:dc:96:73:0d:cc:8a:fd:43:29:8c:46:53:ab:25:e7:bf:
         ec:72:35:7e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0
RjdBQzQ2MzkwHhcNMjYxMTEwMTkzNjU5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWYzNzI1Yi0wNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYH7gVmWpL0BfhLvMED4cZEg+4DDmtxKU+uzP/Z+qNyb/9ZJwtS5RiOlj8pw
P2loym5mImytSNeKMaEKVlRWrMUcy3eeClb8UKyTvc41DYDeUlxHixS6cB+PYU4G
RRudTvgkRi9DbEyun9DdNaxwzaiSCjAxhZsLZoPnL01g6ahFVxvsD5E5aT3mVOaf
0b0YZNuID4CtwkioVZtq5k+g8wnHcvggL6FqrmvCHX/v8y9NtFpV8rastPh0Y143
zP/UK7s6TE9xzZEix5wyCZJy5bHL8Ozbh9VaJU/VrXPhFof9i/829JVsQzpqOR9u
qDksAElXDkP6uJJTn6TT8MgM5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPhE1OQB
SCxJSIP4+WI4Vjq7YJKGMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5
MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjIxRUYvNkYyRkVCRDY4OTFGMTFFQTg5QjYyNzdDQzRGOUFFMDIvRDFBNkI2RDA3
MzhFMTFFRDgyODNGRjUzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5xhMA0GCSqGSIb3DQEBCwUAA4IBAQB/U3eJf5TtNbX60Mjd+WNL
julzqM4yy2m9mzQ8D165UyRcQfHh8lzVuvE5hQ/mlG6e1dRty5iKskonk++mnWgU
43Fyu7oWvYMoWpnL79XoWZj6jk+gT8+/8gGrbllSezyX+MTaCxOsOWYCJIOqwVgC
TqGvjgchCXo9snLfGn0nBFdQE2a5TFgOqWdtiJvsmcpk7n5ngDP3yj+I3DVnzK7Z
bQW6h08cFa1u3Bm8pt3evCGaMwZhceoUFNEJKcrPYumMghh5SNj+JFSsHa3gHOCV
+Up7P4+bB7Ima7/2f6OBRCCCnjbywSe/20GZgdyWcw3Miv1DKYxGU6sl57/scjV+
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:13:10 2026 by rpki-client