Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa
File:                     45399802215111F0B94CA13FC4F9AE02.roa (raw, json)
Hash identifier:          4GMNfCTUHQ1rV2C9XWos7Hdj0ySssxUEkLEdwlySSs0=
Subject key identifier:   0A:72:9A:27:36:47:E5:1A:A8:8A:2E:5E:09:DF:29:F6:D0:FB:75:43
Certificate issuer:       /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial:       0266
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:35:04 +0000
ROA not before:           Fri 05 Jun 2026 02:35:04 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151197
IP address blocks:        103.140.194.0/24 maxlen: 24
                          103.140.194.0/25 maxlen: 25
                          103.140.194.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
                          rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
        Validity
            Not Before: Jun  5 02:35:04 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2235d8-5f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:cc:65:e4:57:51:c4:1d:09:70:8d:a5:11:
                    cd:17:81:b5:c3:d5:4e:5f:cb:71:10:ff:77:e3:ab:
                    0d:0d:d0:1f:24:bc:3f:34:26:bd:18:10:26:6d:d9:
                    96:cb:a3:ba:eb:05:a2:d2:d2:18:3c:16:17:98:28:
                    00:c2:b1:52:6a:69:ce:3c:5b:6a:40:a9:9a:2c:34:
                    28:05:22:29:85:8b:43:9b:1a:7b:01:d7:81:52:78:
                    06:36:e6:58:63:40:24:5e:f7:1e:e3:9b:74:d3:e1:
                    d9:df:23:d0:97:f5:f1:19:b2:ae:75:12:b4:0b:77:
                    be:6f:d3:79:81:05:60:de:c0:49:65:45:e5:a2:24:
                    0d:17:df:7d:86:89:8e:07:ae:c6:80:24:69:39:21:
                    01:6e:9e:97:80:81:7b:4c:9a:f9:8d:ad:5f:e2:0b:
                    62:d2:36:7e:13:8f:91:54:f5:7e:cf:13:ef:f0:d0:
                    c2:45:fb:38:36:b4:33:4d:be:4c:0c:05:8b:43:b7:
                    5a:3e:09:31:6d:c5:bb:ba:19:18:a7:70:59:de:ed:
                    57:cf:da:1a:3e:c6:9f:45:a3:72:32:5f:68:ab:79:
                    d7:24:45:b2:e5:7b:cd:35:f5:87:d0:ff:7d:3e:a0:
                    a3:c8:6a:9d:cc:64:f1:ab:7c:4b:87:59:87:99:f1:
                    b9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:72:9A:27:36:47:E5:1A:A8:8A:2E:5E:09:DF:29:F6:D0:FB:75:43
            X509v3 Authority Key Identifier:
                keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/45399802215111F0B94CA13FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a4:57:e2:49:fe:b1:45:a9:13:1f:fd:bf:35:d2:48:6c:9b:
         ff:46:96:b1:bd:d5:d5:eb:c2:55:08:48:e7:d7:11:91:cd:4f:
         ca:ed:b4:4e:f0:e0:17:69:22:a0:87:e3:35:00:5e:f9:05:19:
         4f:11:bd:ca:69:c5:54:c8:5d:a6:eb:54:8e:97:f9:54:d4:35:
         c7:37:9d:30:8e:66:db:45:b3:b2:91:08:e9:1d:a9:cb:92:e8:
         bf:ac:38:56:10:60:9d:ec:60:7d:6f:65:61:7a:aa:76:17:94:
         66:18:0d:54:e8:94:73:c4:e6:5c:7d:96:64:0e:4e:58:34:e6:
         3f:b8:af:c5:dc:2f:8f:32:3f:4d:17:c4:5e:cb:1d:ec:37:9e:
         3c:bc:af:5f:5b:44:2d:4d:e4:75:a8:c4:35:a0:80:c0:64:ec:
         d3:2c:57:e7:90:dc:5f:b9:9e:6b:9b:73:fe:0f:79:a2:68:8e:
         59:24:a0:56:41:bb:d4:bd:fa:75:90:4d:1e:80:37:73:96:3a:
         5e:ae:80:79:36:e1:f1:fb:1d:b1:9c:a3:bc:25:83:17:3d:64:
         71:83:d9:69:f8:5b:29:81:59:21:79:d3:74:eb:f3:53:71:90:
         f6:6c:97:00:1a:4c:af:fe:a3:83:63:de:a9:95:8a:52:9a:5a:
         83:b3:90:f1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5
MERGMzI0OEEwHhcNMjYwNjA1MDIzNTA0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyMzVkOC01ZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqILMZeRXUcQdCXCNpRHNF4G1w9VOX8txEP9346sNDdAfJLw/NCa9GBAmbdmW
y6O66wWi0tIYPBYXmCgAwrFSamnOPFtqQKmaLDQoBSIphYtDmxp7AdeBUngGNuZY
Y0AkXvce45t00+HZ3yPQl/XxGbKudRK0C3e+b9N5gQVg3sBJZUXloiQNF999homO
B67GgCRpOSEBbp6XgIF7TJr5ja1f4gti0jZ+E4+RVPV+zxPv8NDCRfs4NrQzTb5M
DAWLQ7daPgkxbcW7uhkYp3BZ3u1Xz9oaPsafRaNyMl9oq3nXJEWy5XvNNfWH0P99
PqCjyGqdzGTxq3xLh1mHmfG5FQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFApymic2
R+UaqIouXgnfKfbQ+3VDMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB
RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjcyRTMvQzZCNTAxM0NFQUU5MTFFRDg3NUEyRDUxQzRGOUFFMDIvNDUzOTk4MDIy
MTUxMTFGMEI5NENBMTNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4zCMA0GCSqGSIb3DQEBCwUAA4IBAQCNpFfiSf6xRakTH/2/NdJI
bJv/RpaxvdXV68JVCEjn1xGRzU/K7bRO8OAXaSKgh+M1AF75BRlPEb3KacVUyF2m
61SOl/lU1DXHN50wjmbbRbOykQjpHanLkui/rDhWEGCd7GB9b2Vheqp2F5RmGA1U
6JRzxOZcfZZkDk5YNOY/uK/F3C+PMj9NF8Reyx3sN548vK9fW0QtTeR1qMQ1oIDA
ZOzTLFfnkNxfuZ5rm3P+D3miaI5ZJKBWQbvUvfp1kE0egDdzljperoB5NuHx+x2x
nKO8JYMXPWRxg9lp+FspgVkhedN06/NTcZD2bJcAGkyv/qODY96plYpSmlqDs5Dx
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:43 2026 by rpki-client