Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/300D92DA802811F19145777464A30FBC.roa
File:                     300D92DA802811F19145777464A30FBC.roa (raw, json)
Hash identifier:          D6zmGA6eygjoBFl8Qr1kZfq7BJzeCTU0+FvtkXhk3dg=
Subject key identifier:   AF:45:E0:35:B8:D9:9D:26:B3:F0:0D:21:66:65:D2:B8:CB:78:A7:35
Certificate issuer:       /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02
Certificate serial:       03FF
Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/300D92DA802811F19145777464A30FBC.roa
Signing time:             Mon 31 Aug 2026 00:53:03 +0000
ROA not before:           Mon 31 Aug 2026 00:53:03 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     17976
IP address blocks:        103.193.204.0/22 maxlen: 24
                          203.144.64.0/19 maxlen: 24
                          2401:4d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl
                          rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 00:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02
        Validity
            Not Before: Aug 31 00:53:03 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a94d06f-2c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:91:ac:be:af:4e:6d:1a:0d:b4:15:4e:db:
                    c4:71:ac:5c:1e:ca:2b:63:ef:cc:9e:c5:bb:65:71:
                    ef:e3:cb:1f:43:c3:c3:76:e1:37:27:ed:d3:c0:14:
                    27:f6:b8:b3:30:6a:19:ce:73:66:06:d8:58:11:f5:
                    ea:25:f8:9e:53:e8:e5:8b:00:79:2a:fb:7e:c4:3f:
                    1c:fb:b9:e5:33:15:19:da:64:8e:bd:4d:0f:e1:b1:
                    e4:03:87:3f:cd:db:a9:94:d7:ef:b3:b4:fc:72:7c:
                    c3:bd:1d:af:75:c0:77:c7:5a:5c:6b:a6:69:19:db:
                    47:47:dd:bb:3f:c6:d2:72:17:61:3a:34:eb:a2:7d:
                    95:dd:d3:b9:aa:c9:30:21:3e:7a:02:47:0e:02:c9:
                    d6:67:18:e6:a0:f3:0d:99:b2:6f:49:b1:c4:40:0e:
                    a2:d5:ef:56:0b:69:32:12:28:57:46:51:18:e3:ba:
                    92:a7:a9:85:cf:5d:ed:a2:c9:ef:3c:a6:f7:e4:3b:
                    23:77:eb:73:98:af:10:f5:65:29:9c:2a:f7:1d:a8:
                    08:66:05:d8:11:26:df:0e:c8:81:6c:a2:73:a7:fd:
                    03:35:c3:24:e4:00:2b:4d:c8:24:f4:2d:aa:12:70:
                    82:25:12:ca:ab:b3:24:7e:6e:ed:86:75:c5:e0:ce:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:45:E0:35:B8:D9:9D:26:B3:F0:0D:21:66:65:D2:B8:CB:78:A7:35
            X509v3 Authority Key Identifier:
                keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/300D92DA802811F19145777464A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.204.0/22
                  203.144.64.0/19
                IPv6:
                  2401:4d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:90:20:1d:81:66:e5:9b:56:c2:71:37:35:9e:a1:a9:2b:74:
         8a:53:6c:17:d3:e9:5f:69:7e:87:78:27:95:43:91:92:75:a9:
         cf:79:06:b1:cb:e2:4a:79:1f:30:6d:b5:8c:72:0b:56:28:d5:
         0e:ce:e9:52:94:69:af:e3:a2:f3:5d:d8:34:ce:10:92:de:53:
         c7:2c:7c:c3:1e:1a:d3:82:4f:dc:58:62:cf:83:f5:a5:b5:cb:
         1b:c3:f4:90:75:4b:50:4a:6e:2b:3b:83:6f:f4:c0:52:0f:94:
         18:93:d4:0f:4d:3f:64:36:ab:0a:8b:a6:6a:3b:55:50:5c:e2:
         f3:ee:49:92:f2:7d:18:09:cf:2f:b4:89:be:46:ff:39:74:98:
         ce:f1:10:c4:a5:06:d2:c7:27:f4:12:f1:a8:08:88:5f:ce:27:
         68:bd:3f:71:d5:ee:7e:d2:a7:9b:cb:3d:34:38:6e:f5:02:47:
         d9:13:4c:95:ca:e9:ce:63:56:91:ef:bc:45:ae:9e:bb:b9:1b:
         a1:61:09:99:39:36:23:85:30:04:3b:c3:5b:39:d5:8e:08:d3:
         b5:6b:b4:c4:f1:4a:91:85:15:5d:59:4f:f0:e9:bb:bc:e2:4d:
         54:d1:c6:7d:29:b0:7e:a5:01:21:4f:f1:84:c0:cf:18:21:df:
         a6:f7:20:d9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0
MUY1NTlCMDIwHhcNMjYwODMxMDA1MzAzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0ZDA2Zi0yYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzUKRrL6vTm0aDbQVTtvEcaxcHsorY+/MnsW7ZXHv48sfQ8PDduE3J+3TwBQn
9rizMGoZznNmBthYEfXqJfieU+jliwB5Kvt+xD8c+7nlMxUZ2mSOvU0P4bHkA4c/
zduplNfvs7T8cnzDvR2vdcB3x1pca6ZpGdtHR927P8bSchdhOjTron2V3dO5qskw
IT56AkcOAsnWZxjmoPMNmbJvSbHEQA6i1e9WC2kyEihXRlEY47qSp6mFz13tosnv
PKb35Dsjd+tzmK8Q9WUpnCr3HagIZgXYESbfDsiBbKJzp/0DNcMk5AArTcgk9C2q
EnCCJRLKq7Mkfm7thnXF4M7pJwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFK9F4DW4
2Z0ms/ANIWZl0rjLeKc1MB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB
NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTA5QTQvREJBQjkzNkVEQTc2MTFFQ0E0OEZGQzZDQzRGOUFFMDIvMzAwRDkyREE4
MDI4MTFGMTkxNDU3Nzc0NjRBMzBGQkMucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCZ8HMAwQFy5BAMA0EAgACMAcDBQAkAU2AMA0GCSqGSIb3DQEBCwUA
A4IBAQAukCAdgWblm1bCcTc1nqGpK3SKU2wX0+lfaX6HeCeVQ5GSdanPeQaxy+JK
eR8wbbWMcgtWKNUOzulSlGmv46LzXdg0zhCS3lPHLHzDHhrTgk/cWGLPg/Wltcsb
w/SQdUtQSm4rO4Nv9MBSD5QYk9QPTT9kNqsKi6ZqO1VQXOLz7kmS8n0YCc8vtIm+
Rv85dJjO8RDEpQbSxyf0EvGoCIhfzidovT9x1e5+0qebyz00OG71AkfZE0yVyunO
Y1aR77xFrp67uRuhYQmZOTYjhTAEO8NbOdWOCNO1a7TE8UqRhRVdWU/w6bu84k1U
0cZ9KbB+pQEhT/GEwM8YId+m9yDZ
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:56:22 2026 by rpki-client