Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/E944914AF0F111E999D61615C4F9AE02.roa
File:                     E944914AF0F111E999D61615C4F9AE02.roa (raw, json)
Hash identifier:          4BKBA20+uApy1AOlpBvDlLXxvUi+hdS9gzH7E00dkO8=
Subject key identifier:   91:39:A7:58:CB:38:7B:E0:28:CF:87:0D:C4:C5:8E:67:16:CD:FC:58
Certificate issuer:       /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial:       15FC
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/E944914AF0F111E999D61615C4F9AE02.roa
Signing time:             Tue 18 Aug 2026 17:30:06 +0000
ROA not before:           Tue 18 Aug 2026 17:30:06 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     8
IP address blocks:        103.115.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
                          rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5628 (0x15fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
        Validity
            Not Before: Aug 18 17:30:06 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a84969e-b7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:81:da:0c:7c:d5:31:fd:89:2a:b1:fc:a2:
                    b2:8c:96:4c:f2:e6:89:93:70:ac:6d:44:7e:ac:63:
                    30:4d:af:ed:4d:e2:47:24:f6:5b:f1:e0:b6:e3:6d:
                    8c:3d:1f:60:56:43:5c:a7:b1:28:e8:80:ee:8f:d5:
                    7b:6b:75:8a:c2:71:99:90:04:27:06:73:a7:41:49:
                    54:cd:3b:2d:b8:03:82:32:4d:8f:b2:c5:31:4e:6e:
                    e2:d1:b0:57:a3:11:7b:73:85:0d:f3:73:57:14:b7:
                    e7:5c:f5:77:c5:8c:3f:79:18:1a:18:8c:0e:82:09:
                    4d:82:72:2e:6e:b8:f4:e0:30:7a:33:ec:d6:23:53:
                    1f:8a:b1:5f:4d:83:31:38:5c:9b:01:7a:1d:55:9f:
                    b1:01:cd:e0:7b:4f:55:33:66:a1:83:96:a7:54:a4:
                    2c:49:2e:0c:2f:ee:d6:30:02:3c:b6:42:b2:f6:68:
                    10:b1:04:ae:6c:5e:cb:46:0b:fa:ee:16:1a:f2:c7:
                    06:10:76:1b:35:1a:71:fe:51:26:ae:d8:88:7b:1d:
                    7d:12:d9:93:0b:0b:3e:5d:a8:59:5d:92:2b:06:e9:
                    0e:1a:92:5c:75:08:cd:fc:83:2e:6f:4b:db:e4:4c:
                    57:d3:92:e3:18:75:66:d2:af:77:1f:d4:1d:39:e3:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:39:A7:58:CB:38:7B:E0:28:CF:87:0D:C4:C5:8E:67:16:CD:FC:58
            X509v3 Authority Key Identifier:
                keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/E944914AF0F111E999D61615C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:fd:6b:e4:c0:a0:7d:ab:ba:7e:bc:9a:cc:39:30:bc:7e:eb:
         41:91:e8:98:5a:fc:c3:3c:99:62:90:d6:48:fe:3c:c0:47:00:
         5a:98:d3:d2:97:74:35:d9:a2:8a:b4:96:90:da:7b:2c:08:84:
         b0:9e:68:22:40:0e:b5:80:a5:39:04:19:eb:2d:96:e6:d5:a9:
         f6:05:43:4b:c5:3a:e6:70:ba:19:59:25:9e:27:bd:fc:dc:f1:
         78:8d:0d:fb:f8:19:ad:c7:3c:71:d7:fa:11:62:e6:7e:0a:47:
         d0:a7:69:30:59:fc:81:b7:36:79:c4:4a:26:3c:9d:fb:e7:28:
         2a:3d:3f:fd:1b:dd:e9:82:c6:df:ca:84:91:70:8f:e2:bc:52:
         ee:27:22:a7:ee:c6:1b:56:37:a4:07:dc:38:b3:a3:44:3d:b6:
         c1:7a:96:4f:ff:1e:32:2b:ae:f2:b2:e8:b9:98:2a:e8:40:89:
         3c:f4:f1:ee:eb:8f:cc:e3:30:34:20:25:8c:93:60:d6:74:4f:
         fe:f1:3f:da:9d:50:c7:73:13:4e:e1:01:a0:c5:e0:88:ed:77:
         fd:52:ef:8f:bc:92:b1:b6:b6:aa:25:03:17:25:35:75:10:84:
         a0:5c:a5:23:48:be:3b:64:71:c4:d2:b7:3e:49:d7:20:43:71:
         10:0c:08:11
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICFfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ5RTAxMTAvBgNVBAUTKEI2QzI0M0M2MzlCMzExRTk4NzhFQzA2QkYyNDdGN0FE
RTU0QjA5M0UwHhcNMjYwODE4MTczMDA2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg0OTY5ZS1iN2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArsOB2gx81TH9iSqx/KKyjJZM8uaJk3CsbUR+rGMwTa/tTeJHJPZb8eC2422M
PR9gVkNcp7Eo6IDuj9V7a3WKwnGZkAQnBnOnQUlUzTstuAOCMk2PssUxTm7i0bBX
oxF7c4UN83NXFLfnXPV3xYw/eRgaGIwOgglNgnIubrj04DB6M+zWI1MfirFfTYMx
OFybAXodVZ+xAc3ge09VM2ahg5anVKQsSS4ML+7WMAI8tkKy9mgQsQSubF7LRgv6
7hYa8scGEHYbNRpx/lEmrtiIex19EtmTCws+XahZXZIrBukOGpJcdQjN/IMub0vb
5ExX05LjGHVm0q93H9QdOePujwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJE5p1jL
OHvgKM+HDcTFjmcWzfxYMB8GA1UdIwQYMBaAFLbCQ8Y5sxHph47Aa/JH963lSwk+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFMC81MTU0QTExMDVG
RkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVlbUhqc0JyOGtmM3JlVkxD
VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RzSkR4am16RWVtSGpzQnI4a2YzcmVWTENUNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTQ5RTAvNTE1NEExMTA1RkZBMTFFODg3QjU2OTQyQzRGOUFFMDIvRTk0NDkxNEFG
MEYxMTFFOTk5RDYxNjE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3P+MA0GCSqGSIb3DQEBCwUAA4IBAQCj/WvkwKB9q7p+vJrMOTC8
futBkeiYWvzDPJlikNZI/jzARwBamNPSl3Q12aKKtJaQ2nssCISwnmgiQA61gKU5
BBnrLZbm1an2BUNLxTrmcLoZWSWeJ7383PF4jQ37+Bmtxzxx1/oRYuZ+CkfQp2kw
WfyBtzZ5xEomPJ375ygqPT/9G93pgsbfyoSRcI/ivFLuJyKn7sYbVjekB9w4s6NE
PbbBepZP/x4yK67ysui5mCroQIk89PHu64/M4zA0ICWMk2DWdE/+8T/anVDHcxNO
4QGgxeCI7Xf9Uu+PvJKxtraqJQMXJTV1EISgXKUjSL47ZHHE0rc+SdcgQ3EQDAgR
-----END CERTIFICATE-----
Generated at Sat Sep 5 10:08:43 2026 by rpki-client