Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/ABDFBE34A75A11F1AF10EB3B3411F970.roa
File:                     ABDFBE34A75A11F1AF10EB3B3411F970.roa (raw, json)
Hash identifier:          lcUds1gRLf7ptoRIc8Q0v3/2oJ+IL+a0fqYf/i4R1v8=
Subject key identifier:   DA:4E:6A:A8:7D:D5:DC:69:7B:4F:CE:29:B8:3D:E4:21:57:A2:0E:CE
Certificate issuer:       /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial:       053E
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/ABDFBE34A75A11F1AF10EB3B3411F970.roa
Signing time:             Thu 03 Sep 2026 05:45:30 +0000
ROA not before:           Thu 03 Sep 2026 05:45:30 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     219263
IP address blocks:        103.80.132.0/22 maxlen: 22
                          103.80.132.0/24 maxlen: 24
                          103.80.133.0/24 maxlen: 24
                          103.80.134.0/24 maxlen: 24
                          103.80.135.0/24 maxlen: 24
                          182.161.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
                          rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
        Validity
            Not Before: Sep  3 05:45:30 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a99097a-3bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:9b:6c:a1:b7:24:f1:e9:a2:22:2e:a9:ef:
                    dd:d2:76:b9:10:b6:ef:ba:f2:3c:cc:2a:03:e9:4e:
                    a6:88:90:c1:74:a3:36:3b:91:db:d3:72:20:ff:d7:
                    42:29:3d:55:f8:be:e6:a0:40:88:73:1e:8d:1c:b3:
                    89:a4:27:55:56:3e:b6:bc:12:d8:1a:69:c6:f7:64:
                    66:7d:33:56:22:4e:eb:54:31:be:64:18:2c:4f:d7:
                    2d:6f:bb:9d:53:15:00:e1:fd:aa:b4:c2:25:50:49:
                    e8:af:38:0c:49:cb:13:02:5e:c3:1d:a8:6f:fb:d1:
                    91:90:94:34:6f:3b:e7:e1:07:75:2f:da:90:74:55:
                    97:81:67:94:9d:72:aa:69:63:44:4b:d5:17:10:dd:
                    ba:7b:ab:23:a9:59:00:4d:e5:71:16:e6:2e:bc:0a:
                    e7:29:60:99:f4:b1:bf:43:33:0a:38:5b:06:cd:8d:
                    ea:b2:6e:9b:60:f9:d1:89:0e:be:b1:99:61:56:48:
                    7e:df:80:ad:2a:24:0b:83:0b:0f:21:2b:09:ec:aa:
                    00:4c:16:da:c7:7b:ae:0a:33:bd:20:b3:62:dd:07:
                    92:9d:c3:75:f3:1d:52:34:e6:e0:d6:ca:f2:03:32:
                    48:36:7f:df:d7:03:3a:a5:e3:26:ef:5e:de:8e:ec:
                    62:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4E:6A:A8:7D:D5:DC:69:7B:4F:CE:29:B8:3D:E4:21:57:A2:0E:CE
            X509v3 Authority Key Identifier:
                keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/ABDFBE34A75A11F1AF10EB3B3411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.132.0/22
                  182.161.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:68:13:f9:f0:d5:68:24:11:0a:c0:f6:00:69:9a:c2:03:c4:
         b8:51:9e:76:27:1c:99:8a:18:70:a3:82:f6:36:9c:3a:c8:64:
         62:e7:7a:37:7b:47:86:66:90:6e:fe:0b:32:cb:08:53:46:ad:
         be:9d:e8:1f:e8:e1:4b:4e:3f:8a:6a:74:30:b7:b5:a0:3b:f2:
         ad:f1:55:6b:e3:13:c6:16:59:3c:33:36:bc:76:4b:e2:eb:27:
         42:3d:23:8e:06:de:c7:7e:b5:9d:9a:79:1e:71:b6:a1:28:7d:
         ec:7f:f9:73:57:71:e3:e6:13:d8:48:03:4a:6f:7e:37:03:0a:
         63:04:04:94:60:7d:6c:49:b8:ac:60:8f:e6:1b:9b:8a:42:b9:
         38:ab:30:b2:ea:3f:24:dd:2e:7d:32:90:44:e0:13:d2:66:5e:
         73:37:ba:f5:fb:54:73:52:ac:29:8b:53:ba:e8:fd:fd:f7:6a:
         ef:5a:5b:41:d8:3e:d1:3c:ec:c5:9f:0d:93:fb:37:68:b3:46:
         6d:c5:68:aa:5d:54:91:c1:45:2f:67:b0:d3:b4:fa:92:08:53:
         b7:8a:8a:d8:a2:79:55:07:79:5f:73:e3:24:72:09:42:d1:58:
         50:28:cc:ca:6c:a3:20:2d:21:51:51:00:19:e1:78:37:ec:05:
         c6:ab:1b:7b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2
NERBNTBCMkEwHhcNMjYwOTAzMDU0NTMwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk5MDk3YS0zYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtb+bbKG3JPHpoiIuqe/d0na5ELbvuvI8zCoD6U6miJDBdKM2O5Hb03Ig/9dC
KT1V+L7moECIcx6NHLOJpCdVVj62vBLYGmnG92RmfTNWIk7rVDG+ZBgsT9ctb7ud
UxUA4f2qtMIlUEnorzgMScsTAl7DHahv+9GRkJQ0bzvn4Qd1L9qQdFWXgWeUnXKq
aWNES9UXEN26e6sjqVkATeVxFuYuvArnKWCZ9LG/QzMKOFsGzY3qsm6bYPnRiQ6+
sZlhVkh+34CtKiQLgwsPISsJ7KoATBbax3uuCjO9ILNi3QeSncN18x1SNObg1sry
AzJINn/f1wM6peMm717ejuxiAwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNpOaqh9
1dxpe0/OKbg95CFXog7OMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx
MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mzk4QTMvRTIxOUI2MUM3MTEzMTFFQ0JDMzA4OTE5QzRGOUFFMDIvQUJERkJFMzRB
NzVBMTFGMUFGMTBFQjNCMzQxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ1CEAwQAtqFCMA0GCSqGSIb3DQEBCwUAA4IBAQB7aBP58NVoJBEK
wPYAaZrCA8S4UZ52JxyZihhwo4L2Npw6yGRi53o3e0eGZpBu/gsyywhTRq2+negf
6OFLTj+KanQwt7WgO/Kt8VVr4xPGFlk8Mza8dkvi6ydCPSOOBt7HfrWdmnkecbah
KH3sf/lzV3Hj5hPYSANKb343AwpjBASUYH1sSbisYI/mG5uKQrk4qzCy6j8k3S59
MpBE4BPSZl5zN7r1+1RzUqwpi1O66P3992rvWltB2D7RPOzFnw2T+zdos0ZtxWiq
XVSRwUUvZ7DTtPqSCFO3iorYonlVB3lfc+MkcglC0VhQKMzKbKMgLSFRUQAZ4Xg3
7AXGqxt7
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:19 2026 by rpki-client