Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/7B3163F0072A11EA9E314D4CC4F9AE02.roa
File:                     7B3163F0072A11EA9E314D4CC4F9AE02.roa (raw, json)
Hash identifier:          hr+BwUVMGjaR63JX30qV8dhB24Yz2YmxfxAIkQhUhZA=
Subject key identifier:   8F:95:84:D4:74:BF:C3:DB:0E:43:50:70:DD:7A:74:3E:F0:11:72:11
Certificate issuer:       /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Certificate serial:       0DEA
Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/7B3163F0072A11EA9E314D4CC4F9AE02.roa
Signing time:             Mon 12 Oct 2026 18:35:22 +0000
ROA not before:           Mon 12 Oct 2026 18:35:22 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        103.115.208.0/22 maxlen: 24
                          117.20.64.0/21 maxlen: 24
                          119.17.128.0/19 maxlen: 24
                          202.153.208.0/20 maxlen: 24
                          2403:640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
                          rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 17:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3562 (0xdea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610
        Validity
            Not Before: Oct 12 18:35:22 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6acd286a-0d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:47:ba:80:35:ac:d9:99:49:fe:8f:68:82:5a:
                    40:22:1b:da:1c:e1:50:15:fe:c2:04:23:33:23:ec:
                    9a:ab:fb:82:eb:3e:a8:91:07:ff:8e:d9:a9:68:8b:
                    24:61:11:42:52:66:e7:85:6e:e5:af:03:f0:d5:b6:
                    8d:a1:a4:35:7e:61:49:27:38:49:c0:b6:19:32:6d:
                    ef:0a:b5:c5:a2:6a:67:56:65:09:bc:56:5b:9e:7a:
                    98:b5:db:39:cd:8e:45:66:1b:55:cc:36:50:a9:56:
                    fe:12:70:6f:7b:35:51:ea:4e:dd:7b:a3:b8:9a:32:
                    0d:a8:81:52:9d:4d:01:53:a0:99:bc:07:9f:59:18:
                    bf:23:8a:0d:84:7d:ac:4f:77:1d:60:1c:30:40:b2:
                    39:75:c1:a2:9b:02:a5:f1:c7:b1:d6:be:35:dd:9c:
                    b2:66:ea:2a:f4:b5:03:a0:fc:72:89:21:af:b9:45:
                    7b:be:51:3c:d1:44:90:17:f5:3c:f6:fb:94:22:e5:
                    10:26:df:07:5a:7a:16:92:95:7e:54:c4:25:5d:4a:
                    15:93:ba:94:21:e2:54:0f:48:3c:12:2a:7b:b6:33:
                    4f:1d:3e:8b:81:ee:69:5b:cf:6c:f0:5f:23:c7:63:
                    aa:e6:ed:10:42:12:4a:70:1d:4f:d8:9e:b7:3d:4b:
                    26:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:95:84:D4:74:BF:C3:DB:0E:43:50:70:DD:7A:74:3E:F0:11:72:11
            X509v3 Authority Key Identifier:
                keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/7B3163F0072A11EA9E314D4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.208.0/22
                  117.20.64.0/21
                  119.17.128.0/19
                  202.153.208.0/20
                IPv6:
                  2403:640::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:60:dc:fb:59:e4:d2:15:7c:5b:72:5b:bb:0d:ce:9f:7e:81:
         d7:a5:4e:23:71:fd:6b:55:c3:ed:43:40:d7:b5:24:ca:ac:6d:
         5c:35:3f:9f:ef:90:73:65:b0:df:e9:fd:8e:18:fb:04:c9:ba:
         71:81:ac:9f:04:9e:b6:24:0d:ff:60:fa:3e:f0:40:d5:a8:37:
         f2:6e:d8:73:e4:6f:a4:3c:1a:42:19:d8:52:d7:66:ea:5a:89:
         f0:f4:fb:f8:3c:70:f2:12:2f:22:81:e4:b8:8e:93:e3:18:36:
         0d:b4:90:34:bb:2e:35:17:24:b6:72:8c:98:d0:45:dd:eb:e7:
         61:bd:ba:cd:cd:32:e6:3e:f1:04:c7:9a:8a:e2:e1:40:f2:6a:
         f5:b2:86:ae:38:cf:cb:47:ce:ce:35:4d:d9:47:a7:8c:e4:cf:
         cb:49:60:32:3a:41:6f:e5:d1:25:15:1f:d2:e5:d2:92:0c:a6:
         88:03:36:5d:32:56:a1:f3:c5:50:f8:00:3c:4b:e4:0d:2f:76:
         57:af:ff:34:c5:5d:12:48:0b:f7:85:2b:e9:6b:35:8b:7f:1f:
         f4:f8:52:aa:cb:ff:a5:b8:40:9b:7d:91:8d:95:0b:31:5a:63:
         6b:f4:40:00:56:80:26:cb:52:e9:5f:18:cc:85:b5:54:d4:cb:
         95:5a:37:fa
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgICDeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx
MzRBOUU2MTAwHhcNMjYxMDEyMTgzNTIyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNkMjg2YS0wZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiEe6gDWs2ZlJ/o9oglpAIhvaHOFQFf7CBCMzI+yaq/uC6z6okQf/jtmpaIsk
YRFCUmbnhW7lrwPw1baNoaQ1fmFJJzhJwLYZMm3vCrXFompnVmUJvFZbnnqYtds5
zY5FZhtVzDZQqVb+EnBvezVR6k7de6O4mjINqIFSnU0BU6CZvAefWRi/I4oNhH2s
T3cdYBwwQLI5dcGimwKl8cex1r413ZyyZuoq9LUDoPxyiSGvuUV7vlE80USQF/U8
9vuUIuUQJt8HWnoWkpV+VMQlXUoVk7qUIeJUD0g8Eip7tjNPHT6Lge5pW89s8F8j
x2Oq5u0QQhJKcB1P2J63PUsm5QIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFI+VhNR0
v8PbDkNQcN16dD7wEXIRMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4
N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTM0MzAvODZBQzg5RDBFODdCMTFFOUExRUQ1QjQ3QzRGOUFFMDIvN0IzMTYzRjAw
NzJBMTFFQTlFMzE0RDRDQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe
BAIAATAYAwQCZ3PQAwQDdRRAAwQFdxGAAwQEypnQMA0EAgACMAcDBQAkAwZAMA0G
CSqGSIb3DQEBCwUAA4IBAQCPYNz7WeTSFXxbclu7Dc6ffoHXpU4jcf1rVcPtQ0DX
tSTKrG1cNT+f75BzZbDf6f2OGPsEybpxgayfBJ62JA3/YPo+8EDVqDfybthz5G+k
PBpCGdhS12bqWonw9Pv4PHDyEi8igeS4jpPjGDYNtJA0uy41FyS2coyY0EXd6+dh
vbrNzTLmPvEEx5qK4uFA8mr1soauOM/LR87ONU3ZR6eM5M/LSWAyOkFv5dElFR/S
5dKSDKaIAzZdMlah88VQ+AA8S+QNL3ZXr/80xV0SSAv3hSvpazWLfx/0+FKqy/+l
uECbfZGNlQsxWmNr9EAAVoAmy1LpXxjMhbVU1MuVWjf6
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:19:28 2026 by rpki-client