Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1DB0529C7CA711F0A52C5966C4F9AE02.roa
File:                     1DB0529C7CA711F0A52C5966C4F9AE02.roa (raw, json)
Hash identifier:          XORpgEyOYfUEZi+2A6HDf5ckHX5XpV/zis8tXsUnxDo=
Subject key identifier:   B9:0E:57:CC:D6:F8:30:00:1D:1D:42:63:F6:8E:B2:83:B4:A2:F6:F3
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       08D1
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1DB0529C7CA711F0A52C5966C4F9AE02.roa
Signing time:             Sun 02 Aug 2026 21:40:43 +0000
ROA not before:           Sun 02 Aug 2026 21:40:43 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     15412
IP address blocks:        103.154.20.0/23 maxlen: 23
                          103.233.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257 (0x8d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Aug  2 21:40:43 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6fb95b-b303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:c3:04:95:c9:a1:14:d2:67:81:6b:7e:e6:
                    f1:3c:6e:de:f7:94:40:c9:20:85:c7:66:97:1b:74:
                    37:2f:e9:ff:e3:20:66:af:98:68:0e:4a:c2:90:0a:
                    e3:18:fc:0b:4e:32:b2:df:da:48:f7:02:ef:22:3a:
                    ec:00:d7:b9:88:2d:e6:54:29:b4:1d:63:96:b3:d6:
                    ff:b2:1d:9b:70:07:1a:30:e3:1b:28:51:80:27:51:
                    00:ff:b6:c3:87:4c:d9:64:f3:70:d1:0c:02:b1:74:
                    a7:fa:2a:ca:4b:2e:29:08:c0:ed:a2:4a:c5:01:3c:
                    85:b0:a1:2e:47:8c:90:e3:c1:6b:1c:d8:a3:d7:5f:
                    40:a1:2a:41:82:c7:30:54:df:d7:0c:c5:c6:74:3c:
                    37:51:f0:30:03:f3:9d:2e:b3:02:f5:33:d2:65:52:
                    e4:1f:b1:ed:e9:c8:6d:6e:97:4e:0b:9d:c9:6b:3f:
                    cc:46:e0:94:ed:d6:8d:89:c8:9e:c9:7e:77:5f:63:
                    6f:3b:68:47:ef:85:70:77:3e:a1:47:45:72:51:d7:
                    ba:bf:dc:84:c5:d5:0b:50:6b:20:c5:80:7c:d1:51:
                    10:31:46:3c:2c:7b:2c:31:f6:0d:8f:38:28:ae:39:
                    9d:d1:31:ec:49:df:8b:86:7f:9f:16:f0:90:59:82:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0E:57:CC:D6:F8:30:00:1D:1D:42:63:F6:8E:B2:83:B4:A2:F6:F3
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1DB0529C7CA711F0A52C5966C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.20.0/23
                  103.233.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:82:74:dc:44:e2:ff:1d:ee:10:10:be:f5:c2:8f:d2:90:43:
         e8:c9:bf:16:f0:71:74:f1:d1:da:bf:27:c5:0d:55:ed:cb:9e:
         9d:f6:ca:2d:59:73:b3:90:84:dc:b1:d3:c0:90:56:10:86:aa:
         a5:d9:c8:34:89:aa:30:8c:dc:b2:29:e0:ec:13:16:c3:72:89:
         e8:00:2d:0a:1b:50:12:06:ce:97:27:4d:e1:7f:8d:0b:a0:9b:
         96:86:5b:dc:ea:4f:1b:4c:04:0f:98:c0:fb:26:02:6d:4a:6d:
         90:30:62:84:65:70:97:a2:e5:d7:22:5a:1e:8a:56:f7:eb:72:
         a8:4a:a0:da:d4:f6:4c:17:82:72:22:1f:f7:ba:31:b2:c3:59:
         8c:c5:91:0e:bc:2a:07:85:11:42:9d:0c:8a:e6:11:f9:57:90:
         4e:a9:95:f3:d9:a7:4b:aa:89:b8:be:c9:85:92:9e:cf:8c:a6:
         68:0b:ca:c3:a0:d5:7f:55:7b:a7:9c:fe:f2:9e:fc:01:b0:29:
         65:b1:c5:ee:71:57:62:d9:c5:79:03:a8:8d:e6:da:ce:5a:d0:
         c8:09:4c:09:31:81:21:43:bc:a1:54:b2:15:12:71:d7:90:e8:
         bb:5d:94:34:30:b0:49:85:b9:56:0a:8a:34:7a:c8:04:59:d6:
         4f:82:4f:88
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD
RDI2QkQ2QkMwHhcNMjYwODAyMjE0MDQzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZmYjk1Yi1iMzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlaTDBJXJoRTSZ4FrfubxPG7e95RAySCFx2aXG3Q3L+n/4yBmr5hoDkrCkArj
GPwLTjKy39pI9wLvIjrsANe5iC3mVCm0HWOWs9b/sh2bcAcaMOMbKFGAJ1EA/7bD
h0zZZPNw0QwCsXSn+irKSy4pCMDtokrFATyFsKEuR4yQ48FrHNij119AoSpBgscw
VN/XDMXGdDw3UfAwA/OdLrMC9TPSZVLkH7Ht6chtbpdOC53Jaz/MRuCU7daNicie
yX53X2NvO2hH74Vwdz6hR0VyUde6v9yExdULUGsgxYB80VEQMUY8LHssMfYNjzgo
rjmd0THsSd+Lhn+fFvCQWYLLGQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLkOV8zW
+DAAHR1CY/aOsoO0ovbzMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3
OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTQxRTkvREFEOEZCODAwNzkwMTFFQkJCOThDMDc2QzRGOUFFMDIvMURCMDUyOUM3
Q0E3MTFGMEE1MkM1OTY2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZ5oUAwQCZ+nUMA0GCSqGSIb3DQEBCwUAA4IBAQBQgnTcROL/He4Q
EL71wo/SkEPoyb8W8HF08dHavyfFDVXty56d9sotWXOzkITcsdPAkFYQhqql2cg0
iaowjNyyKeDsExbDconoAC0KG1ASBs6XJ03hf40LoJuWhlvc6k8bTAQPmMD7JgJt
Sm2QMGKEZXCXouXXIloeilb363KoSqDa1PZMF4JyIh/3ujGyw1mMxZEOvCoHhRFC
nQyK5hH5V5BOqZXz2adLqom4vsmFkp7PjKZoC8rDoNV/VXunnP7ynvwBsCllscXu
cVdi2cV5A6iN5trOWtDICUwJMYEhQ7yhVLIVEnHXkOi7XZQ0MLBJhblWCoo0esgE
WdZPgk+I
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:24 2026 by rpki-client