Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/6944587246B311F090CDB927C4F9AE02.roa
File:                     6944587246B311F090CDB927C4F9AE02.roa (raw, json)
Hash identifier:          VJ0PaimdIk1enlfYWOaptRsWi7j1kdYlaW2W2nKmkrI=
Subject key identifier:   EF:B4:9A:BD:74:67:BC:16:84:CB:A2:83:DF:24:43:02:47:4B:19:13
Certificate issuer:       /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Certificate serial:       08B8
Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/6944587246B311F090CDB927C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 20:41:07 +0000
ROA not before:           Thu 06 Aug 2026 20:41:07 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     21859
IP address blocks:        103.152.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl
                          rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2232 (0x8b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91323E4, serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
        Validity
            Not Before: Aug  6 20:41:07 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a74f163-d16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:57:c0:5b:1d:4e:8f:49:da:88:48:88:6e:
                    9b:e2:bf:36:1e:c0:d5:87:4e:da:78:c0:a6:85:d2:
                    fe:a1:85:ed:ba:8b:e8:a0:44:62:40:44:65:e5:1a:
                    dc:b0:a3:bf:9c:eb:55:27:49:42:32:11:2f:9b:20:
                    7f:d8:e9:22:22:3e:00:b3:68:da:4d:82:55:7c:52:
                    fa:b4:4d:cf:9f:7d:23:b8:b9:f1:d5:19:5a:e6:cc:
                    ee:e0:7f:3c:98:25:17:9c:55:81:40:41:74:18:03:
                    81:bc:94:77:ad:7e:65:04:49:03:10:8b:04:88:e6:
                    b3:13:33:03:9f:66:1e:a1:81:5c:53:6f:a4:ba:fd:
                    26:3d:f1:28:08:08:a4:89:59:c7:d1:bc:bd:39:dc:
                    d3:bf:e0:e5:f4:4d:c5:c8:50:f1:18:46:66:f8:5f:
                    3c:cd:ad:63:58:ac:2e:a9:bc:cc:c6:29:c8:4b:6b:
                    96:68:7c:f6:e6:64:81:b3:c0:c0:41:45:6d:cb:a1:
                    0a:a6:76:39:d5:b5:2b:84:20:19:b4:78:ad:c4:2c:
                    bc:04:7d:1b:dd:24:22:8a:8e:58:79:cb:2a:cf:2d:
                    5c:c8:f5:b8:ae:82:66:de:39:76:82:a7:38:a5:e0:
                    37:b8:d3:05:e8:f9:f8:f9:62:d6:07:90:f1:cd:f0:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B4:9A:BD:74:67:BC:16:84:CB:A2:83:DF:24:43:02:47:4B:19:13
            X509v3 Authority Key Identifier:
                keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/6944587246B311F090CDB927C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:63:7c:41:77:25:9e:50:62:fd:8f:a3:bf:f5:02:d2:75:95:
         45:f2:92:75:58:a0:0f:ed:df:35:66:1b:d8:3e:bb:40:3b:51:
         2e:7c:d7:dd:4b:a2:f7:05:fe:21:57:fe:a3:2d:ff:d4:3a:e0:
         b6:47:86:be:68:43:90:96:d7:e2:03:4e:73:ba:aa:91:12:66:
         90:33:47:f8:07:22:7c:aa:87:14:30:23:f6:61:0c:7b:eb:8b:
         63:3e:9f:0d:f6:24:14:c1:e1:30:a9:a4:03:88:54:b3:21:52:
         bc:c4:e9:f6:15:e2:ec:36:7a:79:01:31:be:fc:bd:14:7c:20:
         a2:5b:fb:3f:b8:af:61:25:ab:11:66:65:01:00:bf:16:c5:b9:
         0f:00:82:2b:55:fa:16:9f:09:dd:f2:09:79:95:7f:8c:c8:3e:
         b9:1c:f3:22:4a:5f:53:3d:5c:14:d9:da:b9:fa:9d:c4:f1:bd:
         fd:ae:1a:91:c7:ae:57:18:f9:b8:56:ee:e9:6e:68:a9:71:45:
         e7:b9:b4:19:f1:f6:a9:3c:05:f3:39:72:7a:0c:8f:65:cd:56:
         4f:70:8c:f7:31:30:8b:29:e9:f6:18:e7:fe:3e:48:6e:ca:57:
         85:08:17:17:97:69:7c:48:ba:b4:1b:84:5f:a9:c8:76:c7:c1:
         ec:2f:b7:11
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzIzRTQxMTAvBgNVBAUTKDQwMTRCQ0I0QUY5QjE4MTk2NEQ3QjdBNDBEMUJGOUQ2
Rjg5RTA4RkYwHhcNMjYwODA2MjA0MTA3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc0ZjE2My1kMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2apXwFsdTo9J2ohIiG6b4r82HsDVh07aeMCmhdL+oYXtuovooERiQERl5Rrc
sKO/nOtVJ0lCMhEvmyB/2OkiIj4As2jaTYJVfFL6tE3Pn30juLnx1Rla5szu4H88
mCUXnFWBQEF0GAOBvJR3rX5lBEkDEIsEiOazEzMDn2YeoYFcU2+kuv0mPfEoCAik
iVnH0by9OdzTv+Dl9E3FyFDxGEZm+F88za1jWKwuqbzMxinIS2uWaHz25mSBs8DA
QUVty6EKpnY51bUrhCAZtHitxCy8BH0b3SQiio5Yecsqzy1cyPW4roJm3jl2gqc4
peA3uNMF6Pn4+WLWB5DxzfAivwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO+0mr10
Z7wWhMuig98kQwJHSxkTMB8GA1UdIwQYMBaAFEAUvLSvmxgZZNe3pA0b+db4ngj/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjNFNC8xOTBCMEQwNkYy
NjIxMUVBQTUyMjM0NUFDNEY5QUUwMi9RQlM4dEstYkdCbGsxN2VrRFJ2NTF2aWVD
UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FCUzh0Sy1iR0JsazE3ZWtEUnY1MXZpZUNQOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzIzRTQvMTkwQjBEMDZGMjYyMTFFQUE1MjIzNDVBQzRGOUFFMDIvNjk0NDU4NzI0
NkIzMTFGMDkwQ0RCOTI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5hSMA0GCSqGSIb3DQEBCwUAA4IBAQAHY3xBdyWeUGL9j6O/9QLS
dZVF8pJ1WKAP7d81ZhvYPrtAO1EufNfdS6L3Bf4hV/6jLf/UOuC2R4a+aEOQltfi
A05zuqqREmaQM0f4ByJ8qocUMCP2YQx764tjPp8N9iQUweEwqaQDiFSzIVK8xOn2
FeLsNnp5ATG+/L0UfCCiW/s/uK9hJasRZmUBAL8WxbkPAIIrVfoWnwnd8gl5lX+M
yD65HPMiSl9TPVwU2dq5+p3E8b39rhqRx65XGPm4Vu7pbmipcUXnubQZ8fapPAXz
OXJ6DI9lzVZPcIz3MTCLKen2GOf+PkhuyleFCBcXl2l8SLq0G4Rfqch2x8HsL7cR
-----END CERTIFICATE-----
Generated at Sat Aug 22 23:22:02 2026 by rpki-client