Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/993EAAD4522911EFA600C035C4F9AE02.roa
File:                     993EAAD4522911EFA600C035C4F9AE02.roa (raw, json)
Hash identifier:          RHnBGV6zzAX096qelds19ug+GhjfXzLG9IQAG1LM73U=
Subject key identifier:   51:E1:D6:E4:6E:42:81:0F:2D:93:0E:9F:D4:3E:C8:26:E1:4A:CE:3B
Certificate issuer:       /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial:       082C
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/993EAAD4522911EFA600C035C4F9AE02.roa
Signing time:             Tue 16 Jun 2026 22:26:41 +0000
ROA not before:           Tue 16 Jun 2026 22:26:41 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     58717
IP address blocks:        103.165.159.0/24 maxlen: 24
                          202.94.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
                          rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 22:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092 (0x82c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
        Validity
            Not Before: Jun 16 22:26:41 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a31cda1-c76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ae:67:c7:53:59:6d:0a:89:eb:98:b2:41:13:
                    8e:39:2b:57:ad:04:3a:c2:6e:e8:14:5e:6c:22:f5:
                    1e:ea:61:59:62:b8:c0:2c:df:b0:37:92:e6:50:59:
                    e3:5e:84:10:dd:2a:07:35:3d:e1:40:5c:ac:36:ef:
                    ff:ba:8b:5b:d7:ba:3b:74:95:dc:83:5d:d7:a1:1e:
                    6b:9d:1f:6f:be:f3:36:cf:7a:5c:b9:b8:90:0d:73:
                    c4:ce:83:08:e3:61:2b:97:9b:2c:b3:d1:c9:62:86:
                    42:80:df:c4:b6:bc:e2:b8:4a:39:ba:b4:2c:81:1e:
                    c8:2e:64:ac:6c:89:1c:7d:e7:2e:63:1b:be:13:89:
                    2c:77:f4:de:b4:6f:27:b3:67:d1:77:28:f2:65:b8:
                    8f:3d:ad:da:6c:1b:8f:70:c0:11:be:11:92:03:30:
                    a8:12:77:84:e4:42:0e:fe:de:d0:42:b0:52:f4:e2:
                    af:d1:54:e7:97:6b:35:9a:f6:ac:d2:5c:74:1f:47:
                    1b:45:77:25:5c:9c:db:b7:8b:d5:a1:bc:85:2b:05:
                    ef:c0:10:ca:d4:17:46:86:1f:88:3a:aa:f0:15:86:
                    e8:e8:0e:5b:d2:f9:80:ba:6e:bf:a0:9a:f2:4c:42:
                    e7:ad:5d:a1:04:55:d0:9e:d8:9d:f1:bf:46:89:ef:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E1:D6:E4:6E:42:81:0F:2D:93:0E:9F:D4:3E:C8:26:E1:4A:CE:3B
            X509v3 Authority Key Identifier:
                keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/993EAAD4522911EFA600C035C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.159.0/24
                  202.94.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:e3:1d:06:d6:81:45:6f:12:b1:48:a6:43:71:a4:65:9b:a1:
         75:ad:05:dd:3a:c3:ba:ce:52:c7:f7:03:8a:46:7e:6e:b5:9d:
         e6:2e:65:f6:fb:92:6d:c3:65:c5:3d:dc:fc:ec:30:11:e3:83:
         83:03:4e:ba:59:06:cd:53:ba:1f:58:20:21:b6:07:b2:1b:a1:
         0f:8c:fb:da:1f:f5:59:c1:74:26:fa:0d:02:08:8d:85:e0:72:
         a5:64:e5:50:b4:4c:a5:86:9a:61:67:96:e2:36:3e:88:c9:41:
         8e:a5:82:38:f9:6c:b5:c3:b7:44:f3:6f:15:f9:f3:d5:05:84:
         48:ca:3d:5b:94:ee:64:c2:e4:6d:1d:3d:2f:ec:b1:03:e0:60:
         e9:8b:db:30:f8:11:14:ec:26:76:13:58:08:4d:ea:e0:4c:54:
         95:e5:d7:79:a4:58:e8:41:5b:d8:b9:1c:c9:8b:95:98:f5:65:
         6b:2a:40:23:50:76:42:aa:52:03:f6:e3:44:34:40:92:91:73:
         92:45:43:07:f5:40:b8:d7:6f:12:7a:f9:6c:8a:49:b5:fd:53:
         d6:da:fd:dc:32:82:61:43:b6:7c:df:c3:f1:5a:e3:95:31:2d:
         35:91:d5:bb:6f:fb:f4:9e:d5:b3:91:83:42:d5:5f:96:7f:2f:
         57:a7:6f:aa
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE
QzdFNjA2MUUwHhcNMjYwNjE2MjIyNjQxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTMxY2RhMS1jNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAja5nx1NZbQqJ65iyQROOOStXrQQ6wm7oFF5sIvUe6mFZYrjALN+wN5LmUFnj
XoQQ3SoHNT3hQFysNu//uotb17o7dJXcg13XoR5rnR9vvvM2z3pcubiQDXPEzoMI
42Erl5sss9HJYoZCgN/EtrziuEo5urQsgR7ILmSsbIkcfecuYxu+E4ksd/TetG8n
s2fRdyjyZbiPPa3abBuPcMARvhGSAzCoEneE5EIO/t7QQrBS9OKv0VTnl2s1mvas
0lx0H0cbRXclXJzbt4vVobyFKwXvwBDK1BdGhh+IOqrwFYbo6A5b0vmAum6/oJry
TELnrV2hBFXQntid8b9Gie8T4wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFHh1uRu
QoEPLZMOn9Q+yCbhSs47MB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2
N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU2QjcvOTVFRjdEQkE5NjdEMTFFQkFERDUwRDJDQzRGOUFFMDIvOTkzRUFBRDQ1
MjI5MTFFRkE2MDBDMDM1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ6WfAwQAyl6kMA0GCSqGSIb3DQEBCwUAA4IBAQCM4x0G1oFFbxKx
SKZDcaRlm6F1rQXdOsO6zlLH9wOKRn5utZ3mLmX2+5Jtw2XFPdz87DAR44ODA066
WQbNU7ofWCAhtgeyG6EPjPvaH/VZwXQm+g0CCI2F4HKlZOVQtEylhpphZ5biNj6I
yUGOpYI4+Wy1w7dE828V+fPVBYRIyj1blO5kwuRtHT0v7LED4GDpi9sw+BEU7CZ2
E1gITergTFSV5dd5pFjoQVvYuRzJi5WY9WVrKkAjUHZCqlID9uNENECSkXOSRUMH
9UC4128Sevlsikm1/VPW2v3cMoJhQ7Z838PxWuOVMS01kdW7b/v0ntWzkYNC1V+W
fy9Xp2+q
-----END CERTIFICATE-----
Generated at Sat Jul 18 10:25:25 2026 by rpki-client