Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/631D6D82F2B711EDAA29717AC4F9AE02.roa
File:                     631D6D82F2B711EDAA29717AC4F9AE02.roa (raw, json)
Hash identifier:          uOBgq1wqwkIdJF6l8fQkWsM2YOmgJUVNC/DA3LL3Uc0=
Subject key identifier:   EC:26:80:36:7F:1B:87:77:7D:B8:BB:C5:56:0F:8A:5C:A9:60:4C:A8
Certificate issuer:       /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Certificate serial:       0255
Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/631D6D82F2B711EDAA29717AC4F9AE02.roa
Signing time:             Fri 03 Jul 2026 03:29:33 +0000
ROA not before:           Fri 03 Jul 2026 03:29:33 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     64095
IP address blocks:        103.133.88.0/23 maxlen: 24
                          2400:faa0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
                          rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
        Validity
            Not Before: Jul  3 03:29:33 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a472c9d-a5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:04:6f:d3:b2:02:52:32:56:26:ed:4e:0a:
                    c1:b9:67:de:5a:93:aa:cc:87:a5:e0:1f:5a:ec:aa:
                    52:25:dd:32:d9:69:75:e7:15:01:dd:8d:b6:7a:41:
                    71:7d:43:83:3c:54:f5:6d:41:cc:b2:04:f1:e8:6b:
                    53:f3:0c:6f:78:8c:dc:4d:51:a6:47:58:fd:70:86:
                    d3:c5:fa:4f:48:e6:62:50:46:36:6f:65:be:81:2d:
                    43:e6:90:62:db:79:85:cd:f3:72:c7:87:f5:82:ae:
                    34:6c:bb:32:c1:c1:b2:e4:f8:32:b9:36:ad:42:f4:
                    e1:36:f1:80:6a:68:00:40:4c:95:98:ce:92:bf:c9:
                    19:5b:b1:45:c3:65:3e:09:05:51:89:cd:2a:65:e6:
                    d9:60:d5:0e:58:56:e2:7a:1d:f7:b6:71:bf:5c:0d:
                    4b:4d:aa:d3:20:5f:0a:c2:5c:73:31:a0:c1:44:7c:
                    45:a9:6a:54:6e:ec:bc:4f:41:49:7c:1b:76:79:9a:
                    0e:b7:0c:1b:d5:ba:76:b1:45:44:cd:2d:7e:28:3f:
                    fa:37:61:2f:0b:c6:a0:e4:17:99:e0:7c:0d:ac:ae:
                    31:48:c2:68:8a:06:e4:fc:a5:75:01:48:6d:76:ff:
                    6a:7f:cc:af:f2:86:7b:9e:85:1f:09:8b:4c:a3:4e:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:26:80:36:7F:1B:87:77:7D:B8:BB:C5:56:0F:8A:5C:A9:60:4C:A8
            X509v3 Authority Key Identifier:
                keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/631D6D82F2B711EDAA29717AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.88.0/23
                IPv6:
                  2400:faa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:17:10:52:95:fd:53:34:a1:ad:3c:64:01:7c:ee:97:a8:a5:
         40:dc:c9:e0:ae:b5:64:f5:17:7c:3e:67:10:69:64:57:95:ec:
         81:77:b4:9d:03:2a:9b:e3:ed:7b:cd:c6:94:62:e2:cd:e5:cd:
         29:de:03:68:53:d8:f5:a5:c3:0a:62:69:14:e6:b8:17:40:26:
         32:bc:07:99:57:7a:c3:5c:8e:37:4a:79:f4:c0:db:26:b9:76:
         00:44:53:dc:c1:39:dc:22:28:e4:10:82:e2:d0:0f:c7:2e:61:
         5f:0b:ec:5e:a6:89:c8:e3:21:9c:d7:76:a1:68:e3:4b:3d:b7:
         88:17:50:98:de:8c:a9:ff:fb:85:9d:4a:da:1b:e6:c0:73:a0:
         97:d2:69:9a:d3:8d:94:a7:5c:5a:a9:1e:4c:b1:51:a7:e6:e1:
         86:95:ad:7a:6c:1e:cd:07:1f:72:c4:65:e2:54:42:7b:18:a7:
         9e:26:7e:4f:ba:9b:6a:ef:52:63:bc:c1:37:f1:0e:2b:43:dd:
         ae:dc:0b:93:ec:29:52:7c:d9:ce:1e:06:35:ff:5c:97:d8:28:
         32:c9:3f:5a:13:3a:bd:35:38:98:e6:fa:f7:49:27:c5:0e:c1:
         1d:b0:35:80:45:f7:13:a0:c9:8c:a8:83:ae:60:67:b9:82:85:
         f3:75:54:21
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc5RTIxMTAvBgNVBAUTKDNCNjI0MDdFMkU1NEY0MkY4MDkwRTJDMEQ4NkZEMkMz
QTYxMzMwQjMwHhcNMjYwNzAzMDMyOTMzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ3MmM5ZC1hNWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAozoEb9OyAlIyVibtTgrBuWfeWpOqzIel4B9a7KpSJd0y2Wl15xUB3Y22ekFx
fUODPFT1bUHMsgTx6GtT8wxveIzcTVGmR1j9cIbTxfpPSOZiUEY2b2W+gS1D5pBi
23mFzfNyx4f1gq40bLsywcGy5PgyuTatQvThNvGAamgAQEyVmM6Sv8kZW7FFw2U+
CQVRic0qZebZYNUOWFbieh33tnG/XA1LTarTIF8KwlxzMaDBRHxFqWpUbuy8T0FJ
fBt2eZoOtwwb1bp2sUVEzS1+KD/6N2EvC8ag5BeZ4HwNrK4xSMJoigbk/KV1AUht
dv9qf8yv8oZ7noUfCYtMo07YkQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFOwmgDZ/
G4d3fbi7xVYPilypYEyoMB8GA1UdIwQYMBaAFDtiQH4uVPQvgJDiwNhv0sOmEzCz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzlFMi83M0FGMkY3QUYy
QjAxMUVEQTQyQjQ0NzBDNEY5QUUwMi9PMkpBZmk1VTlDLUFrT0xBMkdfU3c2WVRN
TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL08ySkFmaTVVOUMtQWtPTEEyR19TdzZZVE1MTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTc5RTIvNzNBRjJGN0FGMkIwMTFFREE0MkI0NDcwQzRGOUFFMDIvNjMxRDZEODJG
MkI3MTFFREFBMjk3MTdBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ4VYMA0EAgACMAcDBQAkAPqgMA0GCSqGSIb3DQEBCwUAA4IBAQBV
FxBSlf1TNKGtPGQBfO6XqKVA3MngrrVk9Rd8PmcQaWRXleyBd7SdAyqb4+17zcaU
YuLN5c0p3gNoU9j1pcMKYmkU5rgXQCYyvAeZV3rDXI43Snn0wNsmuXYARFPcwTnc
IijkEILi0A/HLmFfC+xeponI4yGc13ahaONLPbeIF1CY3oyp//uFnUraG+bAc6CX
0mma042Up1xaqR5MsVGn5uGGla16bB7NBx9yxGXiVEJ7GKeeJn5Puptq71JjvME3
8Q4rQ92u3AuT7ClSfNnOHgY1/1yX2CgyyT9aEzq9NTiY5vr3SSfFDsEdsDWARfcT
oMmMqIOuYGe5goXzdVQh
-----END CERTIFICATE-----
Generated at Sat Jul 18 06:20:08 2026 by rpki-client