Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/23C2AF26267111F19CC61B4CAD833773.roa
File:                     23C2AF26267111F19CC61B4CAD833773.roa (raw, json)
Hash identifier:          GpB5vbunY3S8gJD0IhPMfwl7e07/lo5WTBermhhz/bE=
Subject key identifier:   EB:20:B2:7B:D2:84:EE:D5:4B:44:92:8C:0C:33:8E:8F:BA:A2:1E:A5
Certificate issuer:       /CN=A919E9A8/serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF
Certificate serial:       2B
Authority key identifier: 93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/23C2AF26267111F19CC61B4CAD833773.roa
Signing time:             Wed 13 May 2026 05:26:22 +0000
ROA not before:           Wed 13 May 2026 05:26:22 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152848
IP address blocks:        103.155.60.0/24 maxlen: 24
                          103.155.61.0/24 maxlen: 24
                          2001:df3:cdc0::/48 maxlen: 48
                          2402:5c20::/32 maxlen: 32
                          2402:5c20:1000::/48 maxlen: 48
                          2402:5c20:1001::/48 maxlen: 48
                          2402:5c20:1002::/48 maxlen: 48
                          2402:5c20:1003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A8, serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF
        Validity
            Not Before: May 13 05:26:22 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a040b7d-1727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:a2:ba:1f:27:0a:44:2d:81:d3:05:21:79:
                    3d:e3:ee:63:26:7a:92:6a:a3:70:98:a5:42:7c:9a:
                    d7:80:15:dc:77:6b:80:72:2b:2d:30:3b:a6:0a:0e:
                    68:ca:e4:4d:4b:94:b8:d4:0f:78:88:87:db:a0:da:
                    b7:c0:b4:cf:1c:7e:bc:de:d6:fd:6e:47:90:2d:5a:
                    96:c6:80:74:5f:30:3d:14:82:fc:36:26:22:51:72:
                    39:e9:5b:a3:21:bd:9e:b5:cf:7d:61:ed:a3:90:c4:
                    11:c4:53:79:73:0b:23:0e:a5:f9:03:7c:76:5d:24:
                    45:e3:b7:05:3d:ad:36:65:18:b0:ab:fb:c1:4f:0e:
                    1c:50:11:c1:e7:b6:39:ea:8a:0b:92:e5:0a:d0:72:
                    3d:9a:e1:e9:f1:bb:8e:b9:25:f1:a0:14:05:32:99:
                    a9:64:77:f2:1a:20:88:2d:73:b9:90:e0:40:41:82:
                    44:f3:73:24:09:ea:3f:f1:5d:a5:8b:8a:f3:dd:26:
                    a5:38:ba:07:f7:ab:ac:92:fe:5b:99:73:76:9d:e9:
                    38:10:d4:d5:34:16:2d:b0:1c:23:5e:9f:af:71:9d:
                    6b:31:d7:51:80:d1:ed:36:70:34:0e:de:22:da:cb:
                    71:39:7d:9d:57:ea:c9:7d:f1:7a:42:28:6d:ce:fc:
                    eb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:20:B2:7B:D2:84:EE:D5:4B:44:92:8C:0C:33:8E:8F:BA:A2:1E:A5
            X509v3 Authority Key Identifier:
                keyid:93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/23C2AF26267111F19CC61B4CAD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.60.0/23
                IPv6:
                  2001:df3:cdc0::/48
                  2402:5c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:c1:0c:b4:ba:c5:3e:6b:29:23:1e:1a:93:40:4b:f5:89:36:
         ac:f3:c5:59:2c:e3:56:52:e9:79:01:1f:3c:01:6c:31:6a:25:
         9a:30:d7:08:ba:4d:26:c6:87:60:83:a7:30:b7:67:4e:86:31:
         58:64:1d:2e:29:9b:f6:bd:67:ca:d9:eb:3a:30:ac:2a:90:91:
         02:c6:ea:f6:ca:31:5a:48:97:b9:c1:92:8f:84:d6:e7:98:43:
         2c:09:17:0d:85:14:f8:c8:19:31:06:23:98:5f:35:a9:bf:ca:
         bf:09:03:5e:88:ef:3a:7f:7a:09:01:c2:9b:6a:c0:3e:41:30:
         42:7e:75:f2:96:15:ce:63:49:90:50:e6:1d:f9:5d:1b:89:3f:
         30:0e:2b:55:ee:94:d7:f2:3d:38:35:a2:e9:c4:70:5a:73:75:
         59:89:c5:1d:4e:9c:b0:47:55:88:be:38:ef:b6:bc:92:ab:78:
         bb:1b:eb:90:df:fa:59:67:03:93:3a:18:f9:ba:29:58:67:6e:
         9d:26:9f:56:58:73:78:98:80:48:0c:78:28:53:f3:70:48:0b:
         53:25:96:6f:c5:63:b2:8e:72:25:3d:e7:26:06:32:f0:a8:06:
         f1:07:17:41:39:91:a9:8e:27:6f:ee:6e:86:a9:2c:d5:30:00:
         10:f9:c4:b0
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RTlBODExMC8GA1UEBRMoOTNCQjMyQUY5NDUyNUMxODJFNzdGMkQ4RDRFOTY5N0Yw
QzU1RjNCRjAeFw0yNjA1MTMwNTI2MjJaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMDQwYjdkLTE3MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC18qK6HycKRC2B0wUheT3j7mMmepJqo3CYpUJ8mteAFdx3a4ByKy0wO6YKDmjK
5E1LlLjUD3iIh9ug2rfAtM8cfrze1v1uR5AtWpbGgHRfMD0Ugvw2JiJRcjnpW6Mh
vZ61z31h7aOQxBHEU3lzCyMOpfkDfHZdJEXjtwU9rTZlGLCr+8FPDhxQEcHntjnq
iguS5QrQcj2a4enxu465JfGgFAUymalkd/IaIIgtc7mQ4EBBgkTzcyQJ6j/xXaWL
ivPdJqU4ugf3q6yS/luZc3ad6TgQ1NU0Fi2wHCNen69xnWsx11GA0e02cDQO3iLa
y3E5fZ1X6sl98XpCKG3O/OtnAgMBAAGjggJ4MIICdDAdBgNVHQ4EFgQU6yCye9KE
7tVLRJKMDDOOj7qiHqUwHwYDVR0jBBgwFoAUk7syr5RSXBgud/LY1OlpfwxV878w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFOUE4L0RDQzA5MDY2MjY3
MDExRjE4OTM3OTgwRUFEODMzNzczL2s3c3lyNVJTWEJndWRfTFkxT2xwZnd4Vjg3
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvazdzeXI1UlNYQmd1ZF9MWTFPbHBmd3hWODc4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTlBOC9EQ0MwOTA2NjI2NzAxMUYxODkzNzk4MEVBRDgzMzc3My8yM0MyQUYyNjI2
NzExMUYxOUNDNjFCNENBRDgzMzc3My5yb2EwNwYIKwYBBQUHAQcBAf8EKDAmMAwE
AgABMAYDBAFnmzwwFgQCAAIwEAMHACABDfPNwAMFACQCXCAwDQYJKoZIhvcNAQEL
BQADggEBAKbBDLS6xT5rKSMeGpNAS/WJNqzzxVks41ZS6XkBHzwBbDFqJZow1wi6
TSbGh2CDpzC3Z06GMVhkHS4pm/a9Z8rZ6zowrCqQkQLG6vbKMVpIl7nBko+E1ueY
QywJFw2FFPjIGTEGI5hfNam/yr8JA16I7zp/egkBwptqwD5BMEJ+dfKWFc5jSZBQ
5h35XRuJPzAOK1XulNfyPTg1ounEcFpzdVmJxR1OnLBHVYi+OO+2vJKreLsb65Df
+llnA5M6GPm6KVhnbp0mn1ZYc3iYgEgMeChT83BIC1Mllm/FY7KOciU95yYGMvCo
BvEHF0E5kamOJ2/uboapLNUwABD5xLA=
-----END CERTIFICATE-----
Generated at Thu May 21 11:40:34 2026 by rpki-client