Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/C6F0AAC8968711F1A5E984E23F11F970.roa
File:                     C6F0AAC8968711F1A5E984E23F11F970.roa (raw, json)
Hash identifier:          M5vIHhqwDS4zffTIZZmt/64gLChdWTDNAVeMVVmOtCE=
Subject key identifier:   CD:E1:99:C6:0D:BE:A8:6E:5F:E1:04:A4:43:B8:85:4C:3A:57:D2:BD
Certificate issuer:       /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial:       02E5
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/C6F0AAC8968711F1A5E984E23F11F970.roa
Signing time:             Wed 12 Aug 2026 19:55:33 +0000
ROA not before:           Wed 12 Aug 2026 19:55:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     140045
IP address blocks:        103.23.252.0/24 maxlen: 24
                          103.23.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 01:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
        Validity
            Not Before: Aug 12 19:55:33 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a7ccfb5-3773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:24:88:3d:de:c3:21:72:25:da:29:d5:fc:
                    3b:f3:9d:a8:9b:de:a9:30:6f:ca:d7:f2:6d:ac:57:
                    c1:f5:9a:63:84:a8:31:e4:75:b2:f9:e0:97:6c:a2:
                    eb:c6:9d:d2:6c:95:c5:6b:11:23:84:c5:ff:82:fd:
                    cc:22:dc:dd:d8:12:68:af:d2:bd:49:de:6e:9c:34:
                    1c:76:31:7c:4c:98:4a:cc:37:b2:1a:16:f4:a1:41:
                    cb:8a:53:e6:2f:d9:84:97:be:31:38:ed:55:6c:35:
                    c9:cf:1b:93:b8:b4:dd:77:34:e7:a9:04:13:ea:9d:
                    79:96:61:2e:52:75:b0:9b:58:d6:ee:65:1c:30:22:
                    71:46:f2:ec:12:a6:a9:e2:2e:d5:6e:c4:95:51:73:
                    74:e6:36:bb:50:bc:b2:c4:ae:d4:29:07:e9:90:5a:
                    ae:eb:76:44:b3:49:26:95:04:aa:63:b1:81:c9:99:
                    56:cd:fb:4f:f9:3d:ba:5d:cb:1a:c8:cb:9c:61:d1:
                    89:e5:f5:db:85:dd:71:14:d0:54:ec:ea:0a:19:3a:
                    66:f3:de:77:20:c7:b8:34:21:c8:17:a3:6b:26:38:
                    3b:28:e8:cf:64:42:a8:2a:f3:28:fd:66:d8:8e:3a:
                    49:42:d5:75:23:65:8d:ef:10:06:38:02:ed:4b:2f:
                    09:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E1:99:C6:0D:BE:A8:6E:5F:E1:04:A4:43:B8:85:4C:3A:57:D2:BD
            X509v3 Authority Key Identifier:
                keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/C6F0AAC8968711F1A5E984E23F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:09:5c:7b:75:1b:0d:4a:1a:96:63:00:06:f5:19:80:e2:0c:
         a4:9a:df:12:72:69:f4:63:1c:05:f6:05:54:a2:6a:91:a4:3c:
         de:1c:70:32:75:53:da:cb:fa:24:4b:3f:e1:69:c6:7e:99:d4:
         96:ac:03:e8:c1:65:b3:65:56:16:4f:43:a7:79:ae:7d:2c:c7:
         b8:b4:a9:a7:af:a5:7f:ef:3b:e5:f0:2f:5a:9f:b2:8f:8b:a3:
         28:83:39:80:d2:7e:ca:4a:af:1d:0a:c6:bd:34:c0:71:ef:aa:
         7e:f7:d7:5e:d2:aa:b1:e2:8c:d9:47:97:55:ef:43:fe:12:9a:
         bc:0a:e1:8a:20:9b:9d:99:b0:a0:84:e0:d5:f5:05:9a:43:1e:
         a5:66:d2:14:d4:c3:07:8f:15:6e:6e:4e:c1:79:10:3f:0f:cc:
         51:85:c2:4c:2f:3d:4e:e2:66:a1:c9:f4:cf:1e:4a:26:4b:bf:
         3f:75:8e:ab:10:b6:b0:55:c2:3a:b1:d5:01:30:76:b3:46:9c:
         ec:48:04:37:c0:60:6e:88:d6:87:d4:9b:3a:fd:7c:f8:6c:f4:
         c1:0d:9b:d6:08:14:a3:81:6f:f3:71:37:d6:dc:5b:c3:c9:ef:
         12:16:4d:69:d1:f1:08:c1:e0:26:dd:83:c5:20:61:15:3a:16:
         78:30:75:b0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1
Rjg1MDNCMTQwHhcNMjYwODEyMTk1NTMzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdjY2ZiNS0zNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy8gkiD3ewyFyJdop1fw7852om96pMG/K1/JtrFfB9ZpjhKgx5HWy+eCXbKLr
xp3SbJXFaxEjhMX/gv3MItzd2BJor9K9Sd5unDQcdjF8TJhKzDeyGhb0oUHLilPm
L9mEl74xOO1VbDXJzxuTuLTddzTnqQQT6p15lmEuUnWwm1jW7mUcMCJxRvLsEqap
4i7VbsSVUXN05ja7ULyyxK7UKQfpkFqu63ZEs0kmlQSqY7GByZlWzftP+T26Xcsa
yMucYdGJ5fXbhd1xFNBU7OoKGTpm8953IMe4NCHIF6NrJjg7KOjPZEKoKvMo/WbY
jjpJQtV1I2WN7xAGOALtSy8JeQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM3hmcYN
vqhuX+EEpEO4hUw6V9K9MB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB
MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzE0QkMvN0ZEMDE2NkM1QTJGMTFFREExOUU1RTYxQzRGOUFFMDIvQzZGMEFBQzg5
Njg3MTFGMUE1RTk4NEUyM0YxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZxf8MA0GCSqGSIb3DQEBCwUAA4IBAQB/CVx7dRsNShqWYwAG9RmA
4gykmt8Scmn0YxwF9gVUomqRpDzeHHAydVPay/okSz/hacZ+mdSWrAPowWWzZVYW
T0Onea59LMe4tKmnr6V/7zvl8C9an7KPi6MogzmA0n7KSq8dCsa9NMBx76p+99de
0qqx4ozZR5dV70P+Epq8CuGKIJudmbCghODV9QWaQx6lZtIU1MMHjxVubk7BeRA/
D8xRhcJMLz1O4mahyfTPHkomS78/dY6rELawVcI6sdUBMHazRpzsSAQ3wGBuiNaH
1Js6/Xz4bPTBDZvWCBSjgW/zcTfW3FvDye8SFk1p0fEIweAm3YPFIGEVOhZ4MHWw
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:32:24 2026 by rpki-client