Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/441E60E88DB811E98ACC9F7EC4F9AE02.roa
File:                     441E60E88DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          B0KcYf7auAbwm/XE4KlVLxzjH/gLCl42YJ4hG9Eg+jc=
Subject key identifier:   03:F9:83:54:7F:33:37:57:D1:25:CA:9C:7F:6C:6E:6F:84:78:95:FA
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       36FA
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/441E60E88DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:11:07 +0000
ROA not before:           Thu 30 Jul 2026 15:11:07 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     24083
IP address blocks:        203.155.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14074 (0x36fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:11:07 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b698b-76e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:1b:73:90:a1:a4:47:f5:9b:f5:20:52:73:
                    63:5f:4c:e1:6e:f5:3d:d2:31:28:ba:6f:72:03:a4:
                    20:be:df:c1:d5:b9:8f:fa:61:b5:3d:c8:69:97:f7:
                    e9:d1:23:6e:2a:bf:1e:56:e1:4b:6e:16:a5:56:c3:
                    27:c4:fb:53:58:5d:00:ba:a0:9b:05:b0:ae:04:4a:
                    32:bc:59:16:fa:09:55:e8:28:77:f5:70:37:96:c8:
                    03:3b:a4:38:ed:40:9c:95:8f:98:a8:97:ab:2c:d3:
                    40:18:bb:38:11:48:0f:5e:e2:cc:4a:50:6b:6b:f2:
                    7b:fd:ba:2f:0f:85:58:13:bc:76:8e:20:92:29:0e:
                    1d:24:67:cb:9e:c3:4f:e9:53:d7:b4:65:f6:d2:42:
                    92:6c:fc:f6:69:45:1e:6e:e3:c4:79:8f:a3:21:c9:
                    34:2b:ef:3c:a0:19:56:a6:e8:27:d7:cd:34:06:83:
                    b2:ba:d2:26:24:4a:85:15:62:34:c0:e5:94:cf:b6:
                    66:bc:19:f5:f0:2f:27:40:01:bd:0f:69:42:a9:f3:
                    6e:89:a4:c2:bf:5b:76:c1:1b:9a:90:a2:d9:81:61:
                    54:e3:29:2f:65:60:5f:19:a5:17:30:4b:e3:a5:37:
                    3d:a2:79:bc:f4:fd:d9:88:37:7e:d1:95:06:44:3f:
                    ac:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F9:83:54:7F:33:37:57:D1:25:CA:9C:7F:6C:6E:6F:84:78:95:FA
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/441E60E88DB811E98ACC9F7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.155.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:1e:d2:7d:4a:f4:00:44:b8:5b:12:8e:e5:29:c8:e7:6e:
         e2:ff:c0:3f:aa:f9:3f:95:7f:e2:b0:43:5f:70:3f:43:dc:69:
         0e:77:a5:41:6e:50:5b:39:a7:6f:c5:3b:c2:f4:d0:30:9c:4c:
         97:64:75:4b:2a:bb:c6:b0:57:90:9b:45:12:7d:e9:b1:fc:34:
         df:bd:ed:f8:f5:d9:de:c6:76:17:82:56:6f:12:03:cd:f4:40:
         30:0b:52:3e:ea:f5:29:1e:95:46:67:80:c4:80:b3:d1:d8:e8:
         06:51:d8:e0:4a:fb:0d:f5:bd:60:0c:ce:43:1c:06:88:fe:e6:
         57:5a:02:86:c9:56:8e:ab:ee:d5:22:38:2b:8b:60:ba:11:9b:
         71:d2:64:49:c7:4f:1d:be:42:b0:9e:ad:71:40:97:a7:52:24:
         f7:d5:c2:ed:eb:46:44:a9:0e:f6:6a:55:52:04:63:b1:3f:9d:
         f7:71:28:60:7d:80:e4:c0:4d:8d:7b:6b:5a:d1:2c:24:a1:22:
         2b:4c:00:03:d5:19:df:61:fb:fa:c3:f4:00:ae:19:d3:a2:aa:
         25:51:70:4c:b8:88:42:50:8e:4b:65:51:6d:f8:ed:26:c5:c5:
         11:7c:7c:ef:38:e3:0b:b3:6f:55:e3:4c:72:95:56:13:24:25:
         1c:83:04:be
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw
OTU2QTk4MkEwHhcNMjYwNzMwMTUxMTA3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiNjk4Yi03NmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUEbc5ChpEf1m/UgUnNjX0zhbvU90jEoum9yA6Qgvt/B1bmP+mG1Pchpl/fp
0SNuKr8eVuFLbhalVsMnxPtTWF0AuqCbBbCuBEoyvFkW+glV6Ch39XA3lsgDO6Q4
7UCclY+YqJerLNNAGLs4EUgPXuLMSlBra/J7/bovD4VYE7x2jiCSKQ4dJGfLnsNP
6VPXtGX20kKSbPz2aUUebuPEeY+jIck0K+88oBlWpugn1800BoOyutImJEqFFWI0
wOWUz7ZmvBn18C8nQAG9D2lCqfNuiaTCv1t2wRuakKLZgWFU4ykvZWBfGaUXMEvj
pTc9onm89P3ZiDd+0ZUGRD+swwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAP5g1R/
MzdX0SXKnH9sbm+EeJX6MB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDQxRTYwRTg4
REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy5tsMA0GCSqGSIb3DQEBCwUAA4IBAQB36x7SfUr0AES4WxKO5SnI
527i/8A/qvk/lX/isENfcD9D3GkOd6VBblBbOadvxTvC9NAwnEyXZHVLKrvGsFeQ
m0USfemx/DTfve349dnexnYXglZvEgPN9EAwC1I+6vUpHpVGZ4DEgLPR2OgGUdjg
SvsN9b1gDM5DHAaI/uZXWgKGyVaOq+7VIjgri2C6EZtx0mRJx08dvkKwnq1xQJen
UiT31cLt60ZEqQ72alVSBGOxP533cShgfYDkwE2Ne2ta0SwkoSIrTAAD1RnfYfv6
w/QArhnToqolUXBMuIhCUI5LZVFt+O0mxcURfHzvOOMLs29V40xylVYTJCUcgwS+
-----END CERTIFICATE-----
Generated at Tue Aug 4 17:33:55 2026 by rpki-client