Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1BA16D001F8211EC8FC82E73C4F9AE02.roa
File:                     1BA16D001F8211EC8FC82E73C4F9AE02.roa (raw, json)
Hash identifier:          6Q7oCnYdIQMyYV7GSDRlqmiCxPyyamvaDbgj1LeE6hE=
Subject key identifier:   58:96:17:A4:AF:DB:0C:F4:C1:D6:F5:62:54:C3:73:30:DD:68:E5:A5
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       36F1
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1BA16D001F8211EC8FC82E73C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:10:50 +0000
ROA not before:           Thu 30 Jul 2026 15:10:50 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     142599
IP address blocks:        203.107.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14065 (0x36f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:10:50 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b697a-0a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:7f:bc:df:c7:69:d4:b8:46:8d:59:89:41:
                    72:16:e9:09:9e:18:aa:b9:a6:0c:bb:05:64:44:f6:
                    ac:dd:86:1d:d5:22:5f:5b:e1:2e:43:86:53:6e:54:
                    9c:a8:3c:13:0d:b5:b3:b7:39:0c:eb:e0:d1:87:0a:
                    74:24:ff:9d:13:12:41:98:a4:36:bb:b9:82:a7:9c:
                    47:60:02:ab:11:25:b9:71:78:93:1e:30:1d:ee:ca:
                    ed:c5:fe:9c:de:7c:56:6a:db:28:5e:4f:18:1d:10:
                    a6:66:a6:97:77:f1:72:1c:67:b0:1e:b8:64:4e:11:
                    5c:84:07:b8:2d:86:02:d6:6f:d0:4c:4f:f7:a6:e3:
                    99:8a:ae:46:63:ff:f0:95:eb:94:5b:a7:01:e8:25:
                    32:a1:d6:89:c3:a6:97:77:aa:0c:a7:68:4b:88:25:
                    ee:39:c3:84:09:f1:a6:3f:8a:b2:a5:13:e7:e0:5d:
                    33:38:83:6a:8d:6a:7f:e6:ce:81:9c:d3:ac:35:1c:
                    f6:44:41:59:47:f5:5a:68:34:e9:22:6d:07:a7:e0:
                    72:14:f7:ea:1e:bd:2a:f9:6d:b1:cb:00:a1:63:08:
                    b5:3a:1b:6b:ff:11:75:57:11:79:bf:58:1b:a2:32:
                    d3:5d:12:22:14:59:74:c7:85:05:21:e7:4c:c9:ba:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:17:A4:AF:DB:0C:F4:C1:D6:F5:62:54:C3:73:30:DD:68:E5:A5
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1BA16D001F8211EC8FC82E73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.107.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:15:3e:c1:a1:02:55:0f:71:43:ad:a1:93:c1:f4:05:4c:22:
         24:e9:01:03:89:89:84:c2:29:71:d7:b2:4f:4a:56:90:95:62:
         17:04:24:3b:77:67:55:dd:97:2b:fd:ca:93:88:68:55:e9:5b:
         d4:ae:e7:05:7c:4c:e7:2b:8c:7e:76:70:54:1b:95:6f:24:da:
         89:00:2a:db:18:b3:d2:55:4d:e3:8a:b8:b6:ad:a8:8a:e8:77:
         61:db:d3:e5:7f:fe:dc:36:8d:94:5c:04:3b:21:93:31:d2:d2:
         83:ec:07:36:a5:15:70:c0:ec:27:56:40:d4:68:fa:bb:01:c0:
         9e:b9:35:cb:b6:3a:dc:1f:52:60:3e:3f:8e:f0:d5:bc:bb:94:
         0a:04:58:12:da:08:1b:94:05:54:db:33:75:e7:47:52:7d:72:
         4d:8f:6d:45:e2:cd:90:16:19:f0:67:79:53:7c:3e:38:5a:dc:
         8c:63:98:15:71:d4:77:31:bb:5c:8f:3a:4e:c0:11:d5:a0:30:
         fc:7f:b9:37:41:69:12:7e:31:b6:fe:51:a2:dd:65:03:78:f1:
         23:f5:9c:ea:b8:99:55:fc:ce:f1:86:49:c7:f6:26:5d:0b:0a:
         80:4e:6f:bf:89:16:f8:76:e5:e6:f7:de:c7:00:df:ad:ed:55:
         92:48:22:00
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw
OTU2QTk4MkEwHhcNMjYwNzMwMTUxMDUwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiNjk3YS0wYTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt0F/vN/HadS4Ro1ZiUFyFukJnhiquaYMuwVkRPas3YYd1SJfW+EuQ4ZTblSc
qDwTDbWztzkM6+DRhwp0JP+dExJBmKQ2u7mCp5xHYAKrESW5cXiTHjAd7srtxf6c
3nxWatsoXk8YHRCmZqaXd/FyHGewHrhkThFchAe4LYYC1m/QTE/3puOZiq5GY//w
leuUW6cB6CUyodaJw6aXd6oMp2hLiCXuOcOECfGmP4qypRPn4F0zOINqjWp/5s6B
nNOsNRz2REFZR/VaaDTpIm0Hp+ByFPfqHr0q+W2xywChYwi1Ohtr/xF1VxF5v1gb
ojLTXRIiFFl0x4UFIedMybphpQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFiWF6Sv
2wz0wdb1YlTDczDdaOWlMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvMUJBMTZEMDAx
RjgyMTFFQzhGQzgyRTczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy2ukMA0GCSqGSIb3DQEBCwUAA4IBAQB3FT7BoQJVD3FDraGTwfQF
TCIk6QEDiYmEwilx17JPSlaQlWIXBCQ7d2dV3Zcr/cqTiGhV6VvUrucFfEznK4x+
dnBUG5VvJNqJACrbGLPSVU3jiri2raiK6Hdh29Plf/7cNo2UXAQ7IZMx0tKD7Ac2
pRVwwOwnVkDUaPq7AcCeuTXLtjrcH1JgPj+O8NW8u5QKBFgS2ggblAVU2zN150dS
fXJNj21F4s2QFhnwZ3lTfD44WtyMY5gVcdR3MbtcjzpOwBHVoDD8f7k3QWkSfjG2
/lGi3WUDePEj9ZzquJlV/M7xhknH9iZdCwqATm+/iRb4duXm997HAN+t7VWSSCIA
-----END CERTIFICATE-----
Generated at Tue Aug 4 19:50:56 2026 by rpki-client