Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3B31153A7EAF11F1AD3956B567A30FBC.roa
File:                     3B31153A7EAF11F1AD3956B567A30FBC.roa (raw, json)
Hash identifier:          6I/mIpBlBaCLa5fE/991rx1+T51Uz+/8gDKlG8N6JVI=
Subject key identifier:   DE:0D:83:56:3B:1D:38:69:44:B5:F1:BF:A7:96:91:94:EC:8E:2D:BC
Certificate issuer:       /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial:       075F
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3B31153A7EAF11F1AD3956B567A30FBC.roa
Signing time:             Fri 02 Oct 2026 22:43:00 +0000
ROA not before:           Fri 02 Oct 2026 22:43:00 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     12083
IP address blocks:        103.97.228.0/24 maxlen: 24
                          103.106.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
                          rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
        Validity
            Not Before: Oct  2 22:43:00 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ac03374-1f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bc:a6:94:22:b4:ba:b0:5e:af:e4:01:22:b3:
                    42:19:c6:b0:bf:8e:ca:f7:c8:3c:dc:90:59:ba:87:
                    6b:51:ab:e6:3a:68:2e:7c:e4:c5:7c:05:a0:e4:42:
                    d9:9f:5f:05:5d:d8:81:82:48:73:e8:f6:05:76:5c:
                    2e:6e:84:2f:b1:0d:e9:6a:02:9e:45:61:15:bf:91:
                    84:df:be:62:c9:96:65:73:30:4d:06:be:ff:9d:d1:
                    82:84:fb:5b:6b:ba:cc:db:2c:16:d0:93:eb:6a:35:
                    d3:fa:57:e9:28:ac:c8:e4:16:7b:13:55:92:aa:1c:
                    43:aa:b0:c9:92:a6:9e:c6:12:92:77:ae:4d:03:e8:
                    9c:0c:34:84:2d:27:58:2a:15:e4:56:fe:cf:f9:8c:
                    4a:19:32:db:7f:ac:e9:ff:64:be:c6:f0:4a:4d:5e:
                    94:64:60:b7:26:19:a8:a5:3b:95:24:2d:8e:85:89:
                    44:b9:49:72:92:11:ac:28:1e:11:92:27:99:1d:36:
                    2c:0f:33:e3:4d:19:49:89:ce:7e:30:65:5e:58:6f:
                    02:8c:55:84:07:0c:09:15:fb:b9:a5:a3:22:37:75:
                    ab:e8:01:17:11:d7:58:2f:38:76:e7:67:f0:ac:35:
                    eb:23:ea:67:e4:7f:31:44:65:c2:f3:35:ec:86:de:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0D:83:56:3B:1D:38:69:44:B5:F1:BF:A7:96:91:94:EC:8E:2D:BC
            X509v3 Authority Key Identifier:
                keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/3B31153A7EAF11F1AD3956B567A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.228.0/24
                  103.106.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:86:e9:52:07:f3:4a:82:82:07:96:08:d0:58:7f:59:4f:aa:
         f2:63:99:e9:b9:bf:9d:ad:ef:dd:87:62:97:36:ab:9a:70:ac:
         b5:e6:91:05:bd:2d:b3:93:18:64:95:38:c9:a8:61:d9:9b:c9:
         87:d0:92:d5:89:3b:66:c3:41:7d:e7:e9:3d:5d:95:36:d6:12:
         49:80:2e:d3:8a:66:50:c7:3c:2f:94:06:a7:24:31:00:fb:d1:
         c7:ed:de:69:67:c2:e7:3c:a7:05:1f:ab:7b:96:51:54:c3:62:
         11:f2:ff:fc:4a:f4:0d:7b:30:c8:0c:78:20:f8:ce:79:66:10:
         93:12:b4:a7:61:5c:8d:19:a7:b7:bc:e8:8a:22:1a:9d:23:18:
         ec:0f:b6:8c:8d:92:10:cb:83:69:4b:f0:88:53:44:0a:d8:9e:
         78:f5:fd:81:7e:15:27:23:23:66:28:49:13:c3:10:c3:e9:07:
         cf:d5:49:87:35:0c:cd:2b:c2:27:cf:68:3c:88:0d:6f:34:3b:
         2a:8d:21:42:45:58:6b:b4:a5:28:96:e4:ea:d4:d7:26:ad:35:
         6f:a7:8c:62:be:57:5f:82:38:58:c4:89:4f:3e:3b:f0:8b:07:
         47:9a:16:c1:d8:7a:fa:88:0f:fa:5e:be:35:e1:fd:98:50:fa:
         91:9d:1b:60
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5
NEU5RjUwOTUwHhcNMjYxMDAyMjI0MzAwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMwMzM3NC0xZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5rymlCK0urBer+QBIrNCGcawv47K98g83JBZuodrUavmOmgufOTFfAWg5ELZ
n18FXdiBgkhz6PYFdlwuboQvsQ3pagKeRWEVv5GE375iyZZlczBNBr7/ndGChPtb
a7rM2ywW0JPrajXT+lfpKKzI5BZ7E1WSqhxDqrDJkqaexhKSd65NA+icDDSELSdY
KhXkVv7P+YxKGTLbf6zp/2S+xvBKTV6UZGC3JhmopTuVJC2OhYlEuUlykhGsKB4R
kieZHTYsDzPjTRlJic5+MGVeWG8CjFWEBwwJFfu5paMiN3Wr6AEXEddYLzh252fw
rDXrI+pn5H8xRGXC8zXsht62ewIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFN4Ng1Y7
HThpRLXxv6eWkZTsji28MB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1
QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUE4OTcvRTFEMTE3NzA5NUJBMTFFQkIyODEyMzcxQzRGOUFFMDIvM0IzMTE1M0E3
RUFGMTFGMUFEMzk1NkI1NjdBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ2HkAwQAZ2rLMA0GCSqGSIb3DQEBCwUAA4IBAQAXhulSB/NKgoIH
lgjQWH9ZT6ryY5npub+dre/dh2KXNquacKy15pEFvS2zkxhklTjJqGHZm8mH0JLV
iTtmw0F95+k9XZU21hJJgC7TimZQxzwvlAanJDEA+9HH7d5pZ8LnPKcFH6t7llFU
w2IR8v/8SvQNezDIDHgg+M55ZhCTErSnYVyNGae3vOiKIhqdIxjsD7aMjZIQy4Np
S/CIU0QK2J549f2BfhUnIyNmKEkTwxDD6QfP1UmHNQzNK8Inz2g8iA1vNDsqjSFC
RVhrtKUoluTq1NcmrTVvp4xivldfgjhYxIlPPjvwiwdHmhbB2Hr6iA/6Xr414f2Y
UPqRnRtg
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:38:43 2026 by rpki-client