Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/BF298F4A8FBF11F1A58CF95C6811F970.roa
File:                     BF298F4A8FBF11F1A58CF95C6811F970.roa (raw, json)
Hash identifier:          TXnS1wgMzdsHK//NBv2o4dJxtrP2qDhE6dk5MgyfgUk=
Subject key identifier:   21:D2:47:1E:17:B9:99:29:25:6F:86:E1:E4:D0:F1:D2:8B:46:5C:76
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0C43
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/BF298F4A8FBF11F1A58CF95C6811F970.roa
Signing time:             Tue 04 Aug 2026 04:48:33 +0000
ROA not before:           Tue 04 Aug 2026 04:48:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132827
IP address blocks:        103.11.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3139 (0xc43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Aug  4 04:48:33 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a716f21-fcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:8e:ee:ce:c8:7c:08:53:3a:9d:e6:a9:a6:
                    9b:17:09:c2:28:22:4c:1f:73:86:c5:8d:9d:4a:de:
                    8c:e1:53:5c:0f:58:d4:97:aa:92:60:b9:a2:a0:5b:
                    90:4b:2f:e3:0a:cb:75:e7:5a:3f:31:9f:7b:28:8e:
                    8e:d7:5c:76:a3:7a:b1:25:29:5a:99:11:5d:e0:c3:
                    fb:be:90:0b:3b:98:13:a7:74:91:8e:8c:87:e8:56:
                    dc:7c:20:b6:0e:66:40:07:6d:83:64:5c:e8:1c:e1:
                    5f:31:0e:7d:1d:b2:c0:b9:d7:1c:05:03:e6:9e:5f:
                    9a:c2:8e:64:71:df:6c:2b:85:52:e6:95:ff:09:67:
                    e5:15:ea:f9:ef:f9:ce:59:52:34:e5:3f:9d:f1:20:
                    8e:fe:2b:29:04:63:07:22:74:b8:7b:9b:87:29:69:
                    17:47:34:96:ca:ca:e1:13:3b:d1:51:44:e4:9e:2d:
                    55:ed:ff:ae:1e:b1:ed:e3:04:ca:3b:03:1d:7f:dc:
                    88:cf:c9:c9:2b:ad:21:78:01:4b:cf:72:4a:76:ef:
                    c4:0c:9c:e5:b5:b2:7f:50:93:0a:06:29:8b:7d:7a:
                    4f:29:be:9f:f6:ff:af:11:a2:f6:47:fd:b0:02:2f:
                    b0:6e:29:de:67:3e:4b:5d:04:c8:94:66:79:37:c9:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D2:47:1E:17:B9:99:29:25:6F:86:E1:E4:D0:F1:D2:8B:46:5C:76
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/BF298F4A8FBF11F1A58CF95C6811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:d8:b0:c5:ce:24:24:51:28:7a:b2:ac:18:c1:46:0d:cd:
         ab:84:bf:58:b9:2e:af:15:09:8a:3e:e0:1a:57:35:8c:e3:bf:
         c8:a9:a5:15:37:fb:27:31:41:1f:3a:d3:8e:3b:f3:b5:f6:46:
         66:41:bc:66:79:10:8a:57:70:e5:1d:b1:14:86:4f:59:6b:0a:
         43:a7:26:64:d9:40:1f:28:ff:0b:ad:53:05:ba:79:64:f8:56:
         bc:43:a6:6a:5d:2d:c6:70:0c:30:3c:e7:2c:78:38:bf:d4:25:
         46:de:91:ca:48:7b:c1:a3:33:b0:0a:c7:dc:5c:54:f0:d8:d1:
         88:2b:46:1d:53:e0:4a:07:ba:2c:44:a8:b8:d3:7b:36:d5:84:
         cf:82:45:0c:02:d3:2d:3d:d1:36:06:4f:c5:81:53:de:a9:34:
         0e:0d:13:10:b2:66:78:1c:34:c0:e8:9b:1c:f4:c0:3b:7e:36:
         b6:55:d8:88:88:46:f2:4e:d4:50:71:ef:86:24:aa:d7:e3:b4:
         92:4e:bd:ae:e9:cc:2c:fa:0a:60:e0:df:42:6a:a0:cd:38:b2:
         38:7d:f3:0b:b2:fe:fc:2c:ed:4b:0c:e3:f0:22:1e:ef:18:66:
         bd:0b:e5:ab:dd:be:81:c0:27:f1:6e:2b:4c:10:d9:a2:eb:85:
         4c:c7:eb:fe
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF
MUNCOEZFRTUwHhcNMjYwODA0MDQ0ODMzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcxNmYyMS1mY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvmmO7s7IfAhTOp3mqaabFwnCKCJMH3OGxY2dSt6M4VNcD1jUl6qSYLmioFuQ
Sy/jCst151o/MZ97KI6O11x2o3qxJSlamRFd4MP7vpALO5gTp3SRjoyH6FbcfCC2
DmZAB22DZFzoHOFfMQ59HbLAudccBQPmnl+awo5kcd9sK4VS5pX/CWflFer57/nO
WVI05T+d8SCO/ispBGMHInS4e5uHKWkXRzSWysrhEzvRUUTkni1V7f+uHrHt4wTK
OwMdf9yIz8nJK60heAFLz3JKdu/EDJzltbJ/UJMKBimLfXpPKb6f9v+vEaL2R/2w
Ai+wbineZz5LXQTIlGZ5N8meJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCHSRx4X
uZkpJW+G4eTQ8dKLRlx2MB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx
NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTIzNTkvRkMyOThERUE0MTcwMTFFQTk4REU2NTZBQzRGOUFFMDIvQkYyOThGNEE4
RkJGMTFGMUE1OENGOTVDNjgxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZwsGMA0GCSqGSIb3DQEBCwUAA4IBAQCcw9iwxc4kJFEoerKsGMFG
Dc2rhL9YuS6vFQmKPuAaVzWM47/IqaUVN/snMUEfOtOOO/O19kZmQbxmeRCKV3Dl
HbEUhk9ZawpDpyZk2UAfKP8LrVMFunlk+Fa8Q6ZqXS3GcAwwPOcseDi/1CVG3pHK
SHvBozOwCsfcXFTw2NGIK0YdU+BKB7osRKi403s21YTPgkUMAtMtPdE2Bk/FgVPe
qTQODRMQsmZ4HDTA6Jsc9MA7fja2VdiIiEbyTtRQce+GJKrX47SSTr2u6cws+gpg
4N9CaqDNOLI4ffMLsv78LO1LDOPwIh7vGGa9C+Wr3b6BwCfxbitMENmi64VMx+v+
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:29 2026 by rpki-client