Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa
File:                     55C580C2108411EDB5AE6333C4F9AE02.roa (raw, json)
Hash identifier:          vslJ1kocoWetdyBiIdXiE0Fd+CgpEX2kc3GNbUnf16M=
Subject key identifier:   3B:9F:59:0F:7B:09:5A:13:F8:FF:33:1D:FF:C0:CB:49:FB:E0:71:80
Certificate issuer:       /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial:       0352
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa
Signing time:             Sat 25 Jul 2026 02:51:10 +0000
ROA not before:           Sat 25 Jul 2026 02:51:10 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     133929
IP address blocks:        103.169.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
                          rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
        Validity
            Not Before: Jul 25 02:51:10 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a64249e-be03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:ff:4c:d1:8e:d4:74:e8:f2:7f:df:98:f4:
                    0a:07:9f:e2:71:dd:11:97:fe:d6:56:1e:3f:05:62:
                    92:0e:a9:22:ed:48:01:26:15:01:a1:08:0a:fd:13:
                    ed:17:25:f3:e1:ec:7d:24:90:c9:17:e6:81:7e:2d:
                    bf:3c:e6:67:2c:0c:44:b4:47:2a:84:4b:61:1c:c3:
                    be:5e:76:12:ee:11:98:8a:69:88:f6:e4:1c:9a:44:
                    f6:2e:8e:d9:b0:9a:db:50:5f:af:a3:f7:00:5e:e5:
                    34:6a:fe:5e:e4:8e:a9:d9:2d:48:be:56:6e:95:70:
                    00:9a:39:bf:3f:64:e4:05:87:2e:96:63:ab:f5:22:
                    75:ee:ab:a0:2d:83:48:47:a1:49:c8:10:51:dc:30:
                    b6:35:25:6b:1e:83:0e:49:c9:81:ec:79:c2:fb:b7:
                    08:6b:09:94:29:f1:7f:5f:29:80:94:0b:56:77:c1:
                    3f:d4:a4:af:be:b7:e9:39:26:5d:ab:56:91:36:f2:
                    0b:b9:14:29:37:70:f0:df:5d:38:6f:b2:81:16:1e:
                    34:29:9f:a2:ec:5f:f3:cc:6b:be:82:ae:fd:50:e5:
                    8c:48:a8:dd:d3:35:9d:8e:07:85:b3:a4:67:3e:92:
                    b0:63:86:77:fa:e9:26:06:77:0e:42:fe:34:fa:fd:
                    93:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9F:59:0F:7B:09:5A:13:F8:FF:33:1D:FF:C0:CB:49:FB:E0:71:80
            X509v3 Authority Key Identifier:
                keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:20:18:2f:de:c4:43:5d:8c:66:29:17:cd:bb:c2:00:3e:b4:
         2e:04:4f:16:36:9f:ee:10:30:b6:c0:71:5a:6a:40:53:6e:81:
         cd:a2:00:29:cf:b4:b1:29:ee:8d:4f:94:e9:a6:52:54:d4:d2:
         b1:b4:9b:01:c3:7d:47:a2:0e:1d:31:c7:0a:69:fb:49:b6:18:
         e5:5c:e1:c9:5f:97:82:fa:c2:90:58:72:19:75:5c:7f:7b:0e:
         40:d1:7b:75:02:d9:87:0a:05:2c:12:f6:c3:0a:72:72:38:13:
         64:59:d5:b2:51:46:9f:58:ff:20:f9:33:44:c3:a5:2b:83:18:
         70:8a:7a:29:7f:62:91:a9:db:81:22:1b:4e:95:80:0c:f5:e9:
         e1:7e:9b:61:33:4c:19:fd:ed:09:d0:74:68:6d:cb:1c:06:bc:
         fa:67:60:07:b5:76:e4:43:6d:80:10:41:e2:f2:e0:fe:69:4d:
         d8:64:ce:31:94:99:d2:92:74:77:bc:94:b6:dc:5a:8a:88:1e:
         0e:d8:7e:5b:68:5a:de:62:64:d7:65:9f:d6:20:a0:9b:d9:dd:
         bd:c6:b5:6c:af:2c:42:04:10:35:92:a1:5a:ea:eb:43:9d:4c:
         23:77:e8:dd:fc:be:a1:48:0c:23:c1:4d:46:40:11:55:80:ce:
         d8:fa:21:d1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG
NkNENjQ1M0UwHhcNMjYwNzI1MDI1MTEwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY0MjQ5ZS1iZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyK3/TNGO1HTo8n/fmPQKB5/icd0Rl/7WVh4/BWKSDqki7UgBJhUBoQgK/RPt
FyXz4ex9JJDJF+aBfi2/POZnLAxEtEcqhEthHMO+XnYS7hGYimmI9uQcmkT2Lo7Z
sJrbUF+vo/cAXuU0av5e5I6p2S1IvlZulXAAmjm/P2TkBYculmOr9SJ17qugLYNI
R6FJyBBR3DC2NSVrHoMOScmB7HnC+7cIawmUKfF/XymAlAtWd8E/1KSvvrfpOSZd
q1aRNvILuRQpN3Dw3104b7KBFh40KZ+i7F/zzGu+gq79UOWMSKjd0zWdjgeFs6Rn
PpKwY4Z3+ukmBncOQv40+v2TDQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDufWQ97
CVoT+P8zHf/Ay0n74HGAMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG
RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS
VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTQzMEEvN0VCRjdDQzIwRkYyMTFFRDlGRTc5Njg2QzRGOUFFMDIvNTVDNTgwQzIx
MDg0MTFFREI1QUU2MzMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6lgMA0GCSqGSIb3DQEBCwUAA4IBAQC9IBgv3sRDXYxmKRfNu8IA
PrQuBE8WNp/uEDC2wHFaakBTboHNogApz7SxKe6NT5TpplJU1NKxtJsBw31Hog4d
MccKaftJthjlXOHJX5eC+sKQWHIZdVx/ew5A0Xt1AtmHCgUsEvbDCnJyOBNkWdWy
UUafWP8g+TNEw6Urgxhwinopf2KRqduBIhtOlYAM9enhfpthM0wZ/e0J0HRobcsc
Brz6Z2AHtXbkQ22AEEHi8uD+aU3YZM4xlJnSknR3vJS23FqKiB4O2H5baFreYmTX
ZZ/WIKCb2d29xrVsryxCBBA1kqFa6utDnUwjd+jd/L6hSAwjwU1GQBFVgM7Y+iHR
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:23:24 2026 by rpki-client