Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/E5692882C63411EB9E5F5F30C4F9AE02.roa
File:                     E5692882C63411EB9E5F5F30C4F9AE02.roa (raw, json)
Hash identifier:          qvLQA7WpjcptMon0VXPLruBJDNLR89kXk5T+FJz9bmw=
Subject key identifier:   39:AC:8C:92:6F:68:50:B5:02:90:5C:5D:54:D3:78:14:85:88:73:C9
Certificate issuer:       /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Certificate serial:       068D
Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/E5692882C63411EB9E5F5F30C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 23:29:01 +0000
ROA not before:           Tue 30 Jun 2026 23:29:01 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138346
IP address blocks:        103.167.14.0/24 maxlen: 24
                          103.167.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 22:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
        Validity
            Not Before: Jun 30 23:29:01 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a44513d-5dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:f2:4b:7d:c6:e6:50:ba:e7:a3:bc:7f:30:
                    b2:4e:cc:b3:5d:3f:33:59:f0:2f:b0:d4:40:85:99:
                    8c:de:c3:3b:58:69:b5:18:c2:d1:81:69:c5:61:be:
                    4e:ca:93:7a:f2:dc:2b:46:af:15:18:99:c2:2b:ed:
                    99:06:67:41:d8:36:a5:14:a1:ae:20:87:b7:dc:a7:
                    d5:93:a1:8c:96:dc:89:cc:f0:ab:5e:7c:0e:1d:b6:
                    5a:9f:5f:10:fa:69:0e:cf:ab:2b:f8:6b:cd:99:b4:
                    a0:4f:29:36:37:c8:ca:eb:d6:d1:28:fb:05:30:2d:
                    22:95:36:c9:a7:46:94:d7:29:b6:af:aa:23:de:fd:
                    e6:8b:f6:e0:30:bb:77:12:aa:7f:56:7a:91:d8:49:
                    52:7a:8b:aa:92:09:15:28:ed:ba:4c:52:0d:b1:b4:
                    08:5b:24:a4:bf:c6:84:b5:2f:81:c6:5c:d6:5e:a8:
                    ed:4d:49:45:62:b9:87:b5:a5:04:75:9f:03:9b:8b:
                    9d:0e:9a:77:a6:7b:6a:31:fc:06:59:92:0a:51:09:
                    25:f0:48:73:56:19:e1:7d:34:11:e5:d0:33:52:fb:
                    52:b6:c4:f1:3a:63:3b:f7:07:a0:b3:c7:88:49:6e:
                    90:dd:19:d6:e6:ad:ca:e3:39:e0:e0:06:b0:33:8f:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AC:8C:92:6F:68:50:B5:02:90:5C:5D:54:D3:78:14:85:88:73:C9
            X509v3 Authority Key Identifier:
                keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/E5692882C63411EB9E5F5F30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:c2:a1:69:cb:e9:59:bf:a7:c2:f2:73:af:3a:f0:aa:e8:33:
         b3:70:3e:f7:f4:49:af:d1:b6:fa:78:9a:ab:f9:d2:f7:dc:0e:
         f2:39:94:00:46:10:14:44:fb:5b:b8:8a:1c:ce:64:1b:fb:22:
         03:87:63:ed:25:af:d6:d0:a2:1c:93:b6:e1:20:37:7a:0c:76:
         c9:b2:ca:23:72:ef:7c:17:9d:6e:a4:91:14:6b:05:b1:8e:31:
         e6:57:79:eb:1c:7c:71:d5:5b:21:ef:18:4f:ae:bd:8c:35:4a:
         f6:36:71:dc:98:de:c3:6e:d5:ce:a6:ae:4b:e6:75:5a:9d:4a:
         a2:93:dd:b6:bc:a9:1b:2d:8f:54:4c:c5:f3:42:af:7d:55:42:
         4d:18:37:44:75:4f:57:96:53:58:f5:20:92:f6:4e:8d:b7:97:
         df:14:58:94:13:bd:2f:f1:fc:a0:7c:00:be:43:eb:d1:c6:87:
         fc:01:9c:b4:d6:0c:26:8c:02:c8:b2:94:62:1f:1a:e5:b6:4e:
         b7:8e:40:6f:dc:e8:ff:0f:7b:75:0c:ae:36:a7:de:ed:36:6a:
         7c:f8:92:2e:11:1a:a6:ea:9b:6a:fc:a6:bb:0b:70:1c:c5:70:
         20:6c:17:1b:2f:67:c8:10:57:22:9b:ea:2c:ac:2b:7b:1b:ad:
         d7:e5:41:dd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc3QzIxMTAvBgNVBAUTKEM5QjZGMzg3N0FDQ0EwODEyRUZGOEQ4QTNGNUMwNDRB
MEMzMEJDODAwHhcNMjYwNjMwMjMyOTAxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0NTEzZC01ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1yvyS33G5lC656O8fzCyTsyzXT8zWfAvsNRAhZmM3sM7WGm1GMLRgWnFYb5O
ypN68twrRq8VGJnCK+2ZBmdB2DalFKGuIIe33KfVk6GMltyJzPCrXnwOHbZan18Q
+mkOz6sr+GvNmbSgTyk2N8jK69bRKPsFMC0ilTbJp0aU1ym2r6oj3v3mi/bgMLt3
Eqp/VnqR2ElSeouqkgkVKO26TFINsbQIWySkv8aEtS+BxlzWXqjtTUlFYrmHtaUE
dZ8Dm4udDpp3pntqMfwGWZIKUQkl8EhzVhnhfTQR5dAzUvtStsTxOmM79wegs8eI
SW6Q3RnW5q3K4zng4AawM4+T+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDmsjJJv
aFC1ApBcXVTTeBSFiHPJMB8GA1UdIwQYMBaAFMm284d6zKCBLv+Nij9cBEoMMLyA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzdDMi8zRURBRDEwQ0M2
MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9JRXVfNDJLUDF3RVNnd3d2
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3liYnpoM3JNb0lFdV80MktQMXdFU2d3d3ZJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTc3QzIvM0VEQUQxMENDNjMyMTFFQkFBRDc0QTJFQzRGOUFFMDIvRTU2OTI4ODJD
NjM0MTFFQjlFNUY1RjMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6cOMA0GCSqGSIb3DQEBCwUAA4IBAQCowqFpy+lZv6fC8nOvOvCq
6DOzcD739Emv0bb6eJqr+dL33A7yOZQARhAURPtbuIoczmQb+yIDh2PtJa/W0KIc
k7bhIDd6DHbJssojcu98F51upJEUawWxjjHmV3nrHHxx1Vsh7xhPrr2MNUr2NnHc
mN7DbtXOpq5L5nVanUqik922vKkbLY9UTMXzQq99VUJNGDdEdU9XllNY9SCS9k6N
t5ffFFiUE70v8fygfAC+Q+vRxof8AZy01gwmjALIspRiHxrltk63jkBv3Oj/D3t1
DK42p97tNmp8+JIuERqm6ptq/Ka7C3AcxXAgbBcbL2fIEFcim+osrCt7G63X5UHd
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:14:16 2026 by rpki-client