Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/91A7AB90D79F11EE8DB3B465C4F9AE02.roa
File:                     91A7AB90D79F11EE8DB3B465C4F9AE02.roa (raw, json)
Hash identifier:          PF5TOfQ7GtB8dLfp6H8cIcUZYf5Y0gHIqox0AMufg1Y=
Subject key identifier:   A9:F2:0A:DC:E5:0B:85:BB:62:26:84:81:12:0D:6D:13:16:C2:3C:EB
Certificate issuer:       /CN=A919BC76/serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
Certificate serial:       0261
Authority key identifier: 87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/91A7AB90D79F11EE8DB3B465C4F9AE02.roa
Signing time:             Tue 23 Jun 2026 02:31:37 +0000
ROA not before:           Tue 23 Jun 2026 02:31:37 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151200
IP address blocks:        103.69.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl
                          rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BC76, serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
        Validity
            Not Before: Jun 23 02:31:37 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a39f008-6634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:3f:85:c7:c5:d8:c1:ab:69:ad:f1:ea:2b:
                    44:f4:5a:15:77:13:a0:d2:28:d3:50:bc:18:39:19:
                    67:44:33:81:55:f6:10:7e:6b:34:14:b1:6e:5f:1b:
                    7c:0a:e4:db:e8:fb:2d:8a:c0:3c:3f:08:1d:1d:8e:
                    29:76:20:45:66:5c:98:42:50:ae:2e:c9:1a:db:7f:
                    8e:de:49:be:b7:f3:bb:d3:87:9e:9a:47:c3:0b:47:
                    bf:13:2c:6f:82:fc:6b:4e:92:ac:4c:d1:0f:f1:29:
                    b6:48:8b:52:ee:da:64:8f:a2:12:29:56:03:bf:0a:
                    95:b2:1f:fa:e5:f0:4c:40:70:c9:91:61:ce:d2:60:
                    01:0b:4e:84:12:2c:3c:17:30:3c:a1:72:4a:f3:22:
                    89:32:47:cc:27:e1:ed:53:70:05:f3:53:9b:1b:40:
                    2e:3b:01:85:82:0f:68:d9:4c:a0:d2:79:43:1e:1d:
                    c1:43:5b:00:a1:1e:fb:44:13:37:c8:ab:35:9e:79:
                    05:99:b9:67:41:aa:b3:b6:f1:2b:74:3e:23:ae:f1:
                    1b:39:6f:1f:77:1d:28:3c:e7:5a:88:a7:d8:5b:45:
                    db:22:21:24:f9:5d:21:f2:39:61:20:ef:83:d7:31:
                    f9:7a:e7:25:f8:9f:6a:e2:62:59:df:fa:86:0b:29:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F2:0A:DC:E5:0B:85:BB:62:26:84:81:12:0D:6D:13:16:C2:3C:EB
            X509v3 Authority Key Identifier:
                keyid:87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/91A7AB90D79F11EE8DB3B465C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:3c:67:2e:bf:51:8a:04:c7:72:e6:ed:90:dd:07:c3:c0:d8:
         51:5a:4b:84:ad:93:05:31:4e:ce:05:16:54:20:5a:5b:02:a0:
         4f:df:51:9a:39:90:a5:ae:b4:25:28:f1:6b:de:db:85:2e:36:
         2b:1e:13:9e:84:12:04:20:9a:6a:43:73:94:6d:bc:4e:25:36:
         b3:7f:8d:fe:f8:2d:2b:20:c0:b2:87:a9:f0:95:ff:45:c7:c4:
         f4:36:84:98:94:20:5a:6a:20:c1:7f:1f:42:c1:a8:cf:8c:62:
         ce:66:74:fd:c0:58:df:ac:fb:b6:08:31:9d:25:a8:d2:ba:9e:
         5d:3a:6e:a3:53:45:bf:ab:bc:fe:b7:e4:56:88:cc:74:9b:1d:
         80:a4:16:58:b7:f7:29:9d:a0:be:3b:e7:ae:40:0e:8b:22:ba:
         b4:81:36:9b:b0:17:f0:31:50:10:be:a6:bb:1d:99:6a:bb:48:
         8d:9c:1e:6a:25:19:3f:5b:38:ea:df:47:ed:ac:ec:99:1c:9e:
         93:5b:e6:b7:3b:87:d8:fc:a5:94:b7:77:12:c7:5b:e7:2e:19:
         48:b8:59:04:fe:1b:97:8a:ee:ca:6b:6e:bb:0b:94:94:d7:dd:
         3b:a0:c2:23:b1:53:2a:f1:3e:84:2d:11:92:84:5a:8a:3d:ea:
         1b:bc:1c:b8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUJDNzYxMTAvBgNVBAUTKDg3QTEyRTc1MTQ5QjNEOEE0RDI3MkExMzA5M0VGNkFD
OUIyNTJDRjMwHhcNMjYwNjIzMDIzMTM3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM5ZjAwOC02NjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKc/hcfF2MGraa3x6itE9FoVdxOg0ijTULwYORlnRDOBVfYQfms0FLFuXxt8
CuTb6PstisA8PwgdHY4pdiBFZlyYQlCuLska23+O3km+t/O704eemkfDC0e/Eyxv
gvxrTpKsTNEP8Sm2SItS7tpkj6ISKVYDvwqVsh/65fBMQHDJkWHO0mABC06EEiw8
FzA8oXJK8yKJMkfMJ+HtU3AF81ObG0AuOwGFgg9o2Uyg0nlDHh3BQ1sAoR77RBM3
yKs1nnkFmblnQaqztvErdD4jrvEbOW8fdx0oPOdaiKfYW0XbIiEk+V0h8jlhIO+D
1zH5eucl+J9q4mJZ3/qGCylomwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKnyCtzl
C4W7YiaEgRINbRMWwjzrMB8GA1UdIwQYMBaAFIehLnUUmz2KTScqEwk+9qybJSzz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkM3Ni9GMUFEM0UzRUU4
QkIxMUVEODUzOERBMUZDNEY5QUUwMi9oNkV1ZFJTYlBZcE5KeW9UQ1Q3MnJKc2xM
UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g2RXVkUlNiUFlwTkp5b1RDVDcyckpzbExQTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUJDNzYvRjFBRDNFM0VFOEJCMTFFRDg1MzhEQTFGQzRGOUFFMDIvOTFBN0FCOTBE
NzlGMTFFRThEQjNCNDY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0VMMA0GCSqGSIb3DQEBCwUAA4IBAQB9PGcuv1GKBMdy5u2Q3QfD
wNhRWkuErZMFMU7OBRZUIFpbAqBP31GaOZClrrQlKPFr3tuFLjYrHhOehBIEIJpq
Q3OUbbxOJTazf43++C0rIMCyh6nwlf9Fx8T0NoSYlCBaaiDBfx9CwajPjGLOZnT9
wFjfrPu2CDGdJajSup5dOm6jU0W/q7z+t+RWiMx0mx2ApBZYt/cpnaC+O+euQA6L
Irq0gTabsBfwMVAQvqa7HZlqu0iNnB5qJRk/Wzjq30ftrOyZHJ6TW+a3O4fY/KWU
t3cSx1vnLhlIuFkE/huXiu7Ka267C5SU1907oMIjsVMq8T6ELRGShFqKPeobvBy4
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:20:30 2026 by rpki-client