Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/1E347CDCE74A11EE8602742BC4F9AE02.roa
File:                     1E347CDCE74A11EE8602742BC4F9AE02.roa (raw, json)
Hash identifier:          zA/NBC6jQ8J63f3FCq7PReWhIkxsn1JwE0rqgo7emJw=
Subject key identifier:   00:79:8B:EE:18:3C:1A:18:83:9D:F5:2C:43:0E:22:60:63:1A:3E:44
Certificate issuer:       /CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Certificate serial:       01C7
Authority key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/1E347CDCE74A11EE8602742BC4F9AE02.roa
Signing time:             Fri 31 Jul 2026 05:52:31 +0000
ROA not before:           Fri 31 Jul 2026 05:52:31 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     131282
IP address blocks:        103.68.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl
                          rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629AA, serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
        Validity
            Not Before: Jul 31 05:52:31 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c381f-53c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:0e:7e:da:b6:70:1b:8a:7d:ac:1c:2e:dc:
                    c7:d9:40:1e:4c:29:fe:16:7a:cd:69:69:86:f7:d4:
                    5a:5d:48:ea:1d:1f:2a:4f:8e:29:22:ad:27:70:4f:
                    7b:d9:68:c6:93:f9:77:7c:dc:5b:01:2a:bf:66:12:
                    36:6f:f8:8c:9d:c3:39:4a:45:58:d1:e1:c5:b0:d6:
                    1c:9d:1a:e6:4b:e5:d9:ed:27:7e:97:fe:8e:34:6f:
                    d1:d4:3a:0b:8b:49:2a:e8:3c:df:5a:9e:48:bb:69:
                    1f:d1:dd:ff:47:84:d7:af:47:d7:ff:dd:6a:94:d0:
                    9f:10:12:42:03:67:07:c6:f0:c9:0f:55:e1:67:b0:
                    bc:06:7f:55:8b:8e:dd:b2:a8:62:fe:23:12:1c:c9:
                    e2:3f:8e:55:8c:2c:82:26:5d:29:d3:a4:6c:1b:94:
                    be:5a:27:34:84:de:71:ba:78:b5:7d:44:57:7e:32:
                    7e:f9:83:7a:93:5f:6a:70:34:97:27:a3:01:d5:4c:
                    c7:a3:ed:6a:fe:74:96:0a:e5:3d:ad:7f:e2:80:dc:
                    0d:d0:95:73:26:7f:df:86:7b:a8:85:0e:d7:da:6a:
                    a7:2b:97:94:37:21:cf:11:e6:09:99:c9:7b:88:54:
                    fa:df:1d:49:de:8b:0a:cd:1e:65:6d:6d:f3:a4:79:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:79:8B:EE:18:3C:1A:18:83:9D:F5:2C:43:0E:22:60:63:1A:3E:44
            X509v3 Authority Key Identifier:
                keyid:05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/1E347CDCE74A11EE8602742BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:cb:43:52:bd:cc:25:72:eb:53:97:a9:24:37:a2:2d:e1:
         8c:f0:05:21:3b:72:22:d3:a1:49:07:24:3f:a9:23:c2:8f:ca:
         80:bc:33:04:40:1d:ad:20:a8:83:92:c8:88:de:18:9a:51:60:
         6a:da:3b:77:b7:9e:e6:58:db:e1:c0:44:f9:51:6f:79:c8:74:
         46:1a:93:09:25:43:51:54:11:5a:d8:ee:cd:e6:f8:7d:c2:5c:
         43:00:e3:85:47:37:d8:5b:ae:61:06:2f:a7:fd:14:12:b3:13:
         32:dc:c7:46:93:ea:d0:2e:37:a9:1b:4b:a8:cd:e0:a1:92:99:
         67:a6:f9:e0:e9:63:3d:ea:5f:b5:3c:ff:e5:8d:3b:7a:a9:39:
         b8:af:90:a9:bc:ff:b1:f7:97:7b:23:34:b7:14:dc:9c:b1:04:
         8b:29:10:7a:c5:f2:e5:8c:9f:22:33:16:d0:03:b5:73:b7:c7:
         a8:49:0a:9b:98:cf:6d:a0:82:57:7f:97:df:19:b6:45:ee:01:
         03:ba:9f:b7:84:45:11:55:31:fb:f4:48:7f:fe:9c:3d:51:e3:
         c9:6a:f0:cf:0f:70:0f:49:6b:a2:af:80:17:04:15:b7:89:b2:
         6d:3d:a7:4c:0f:36:76:fa:49:df:31:53:ee:11:71:6c:cf:de:
         e3:70:ff:01
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI5QUExMTAvBgNVBAUTKDA1MDE0N0I5NERDOUQ2Q0JFOEMwQjBGMUFEMEMwMTgz
QTYwNzdDMzQwHhcNMjYwNzMxMDU1MjMxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZjMzgxZi01M2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnMYOftq2cBuKfawcLtzH2UAeTCn+FnrNaWmG99RaXUjqHR8qT44pIq0ncE97
2WjGk/l3fNxbASq/ZhI2b/iMncM5SkVY0eHFsNYcnRrmS+XZ7Sd+l/6ONG/R1DoL
i0kq6DzfWp5Iu2kf0d3/R4TXr0fX/91qlNCfEBJCA2cHxvDJD1XhZ7C8Bn9Vi47d
sqhi/iMSHMniP45VjCyCJl0p06RsG5S+Wic0hN5xuni1fURXfjJ++YN6k19qcDSX
J6MB1UzHo+1q/nSWCuU9rX/igNwN0JVzJn/fhnuohQ7X2mqnK5eUNyHPEeYJmcl7
iFT63x1J3osKzR5lbW3zpHnvbQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAB5i+4Y
PBoYg531LEMOImBjGj5EMB8GA1UdIwQYMBaAFAUBR7lNydbL6MCw8a0MAYOmB3w0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjlBQS81RjA2OTNGNEU3
NDkxMUVFQkM1MjZGMjlDNEY5QUUwMi9CUUZIdVUzSjFzdm93TER4clF3Qmc2WUhm
RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JRRkh1VTNKMXN2b3dMRHhyUXdCZzZZSGZEUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjI5QUEvNUYwNjkzRjRFNzQ5MTFFRUJDNTI2RjI5QzRGOUFFMDIvMUUzNDdDRENF
NzRBMTFFRTg2MDI3NDJCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0SyMA0GCSqGSIb3DQEBCwUAA4IBAQBqXctDUr3MJXLrU5epJDei
LeGM8AUhO3Ii06FJByQ/qSPCj8qAvDMEQB2tIKiDksiI3hiaUWBq2jt3t57mWNvh
wET5UW95yHRGGpMJJUNRVBFa2O7N5vh9wlxDAOOFRzfYW65hBi+n/RQSsxMy3MdG
k+rQLjepG0uozeChkplnpvng6WM96l+1PP/ljTt6qTm4r5CpvP+x95d7IzS3FNyc
sQSLKRB6xfLljJ8iMxbQA7Vzt8eoSQqbmM9toIJXf5ffGbZF7gEDup+3hEURVTH7
9Eh//pw9UePJavDPD3APSWuir4AXBBW3ibJtPadMDzZ2+knfMVPuEXFsz97jcP8B
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:11 2026 by rpki-client