Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/4D38774A86E611EF9D6F5581C4F9AE02.roa
File:                     4D38774A86E611EF9D6F5581C4F9AE02.roa (raw, json)
Hash identifier:          Y0h1wMVU3nPUU7anlaBflboBuMorRlVX6dChJjP+QRY=
Subject key identifier:   E1:A9:18:F9:5D:CB:45:54:96:84:9C:95:0E:91:B8:7C:5A:CE:DF:4E
Certificate issuer:       /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial:       06F6
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/4D38774A86E611EF9D6F5581C4F9AE02.roa
Signing time:             Thu 08 Oct 2026 22:44:03 +0000
ROA not before:           Thu 08 Oct 2026 22:44:03 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     132139
IP address blocks:        103.101.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 22:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
        Validity
            Not Before: Oct  8 22:44:03 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac81cb3-a216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:ad:c7:f7:da:be:9a:fb:5a:aa:6e:2d:02:
                    23:55:37:2f:56:99:f1:d6:80:4b:a0:a2:bb:43:43:
                    9b:22:a5:a1:15:b8:18:89:f0:f6:f0:0f:06:e7:87:
                    a1:26:2a:77:bb:49:9d:62:82:82:61:77:e2:55:d2:
                    cc:8a:5e:34:b1:79:ec:64:08:8a:7f:94:72:c4:bc:
                    5e:46:b4:56:75:a7:55:b9:04:df:86:94:57:d4:67:
                    87:d0:d8:9e:7f:15:86:09:4a:66:66:b8:9c:2d:29:
                    a2:71:ec:f2:eb:7c:db:48:fc:2a:ce:b2:fe:55:34:
                    a4:94:cf:4d:05:5b:f8:06:18:3e:9c:a6:87:9b:5d:
                    bd:da:b6:13:94:d4:0c:05:5a:e3:75:b6:6a:9f:8f:
                    ad:0a:c8:53:e2:4d:c1:39:b9:01:e4:42:80:46:dd:
                    10:5e:37:99:9f:8d:1a:86:1d:20:d1:2c:06:1b:f0:
                    09:d3:83:68:08:cc:9e:ee:f3:61:88:21:df:9e:04:
                    fb:38:e9:2b:55:95:f7:17:45:1f:b3:28:9f:26:80:
                    5b:ed:1e:f4:d9:a1:42:30:30:50:85:58:a1:d6:46:
                    9b:74:73:ac:7f:8a:2f:6b:1d:42:28:9b:5d:c3:0c:
                    61:dc:67:f0:0d:5f:a3:21:b4:82:11:65:45:30:99:
                    e0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A9:18:F9:5D:CB:45:54:96:84:9C:95:0E:91:B8:7C:5A:CE:DF:4E
            X509v3 Authority Key Identifier:
                keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/4D38774A86E611EF9D6F5581C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:4a:42:18:76:ef:52:91:72:77:c6:a0:24:34:4c:77:88:92:
         00:84:ca:a9:04:52:dd:ac:04:72:f2:0e:fa:40:52:3a:b8:00:
         0a:41:43:74:95:38:8d:18:8e:14:e0:2f:5c:80:c4:70:27:8b:
         fd:75:46:c0:03:6d:d0:d8:d1:86:9e:e2:91:0e:a1:45:a4:da:
         90:55:43:66:90:76:f3:0b:d4:5c:f3:8a:6c:d6:5a:6c:01:5e:
         21:5c:e0:ca:8f:18:9d:e4:d4:05:ea:72:15:5d:54:9a:e0:fe:
         cb:1d:e4:7b:d6:8c:06:22:e0:bf:de:a4:2b:7b:46:ea:b5:c5:
         46:df:7d:95:ac:87:a9:55:da:90:63:21:e0:11:fb:e7:40:22:
         0c:be:cd:52:b9:7e:38:99:c1:cb:f0:1d:55:26:3f:1b:08:1d:
         ad:b4:cf:ec:82:74:40:66:91:1f:af:a6:87:05:cd:c7:f4:74:
         db:d5:eb:e0:93:4e:b2:10:99:5e:f0:0b:34:7c:47:44:a8:5e:
         d2:20:e4:49:93:fa:74:25:f2:68:46:44:d0:e4:b6:df:cb:7e:
         cf:5f:e1:f8:e0:ee:dc:66:df:28:a4:0e:b5:51:6d:ee:d5:d9:
         d0:87:94:f3:13:1a:78:22:4a:bd:98:17:01:48:49:45:41:98:
         bd:2e:a6:c7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz
QzI1OUMxOUYwHhcNMjYxMDA4MjI0NDAzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM4MWNiMy1hMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZatx/favpr7WqpuLQIjVTcvVpnx1oBLoKK7Q0ObIqWhFbgYifD28A8G54eh
Jip3u0mdYoKCYXfiVdLMil40sXnsZAiKf5RyxLxeRrRWdadVuQTfhpRX1GeH0Nie
fxWGCUpmZricLSmicezy63zbSPwqzrL+VTSklM9NBVv4Bhg+nKaHm1292rYTlNQM
BVrjdbZqn4+tCshT4k3BObkB5EKARt0QXjeZn40ahh0g0SwGG/AJ04NoCMye7vNh
iCHfngT7OOkrVZX3F0UfsyifJoBb7R702aFCMDBQhVih1kabdHOsf4ovax1CKJtd
wwxh3GfwDV+jIbSCEWVFMJngNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOGpGPld
y0VUloSclQ6RuHxazt9OMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3
ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUY1RjcvNDRGQ0U1NjhDNzg0MTFFQkFENEM5NjU5QzRGOUFFMDIvNEQzODc3NEE4
NkU2MTFFRjlENkY1NTgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ2XOMA0GCSqGSIb3DQEBCwUAA4IBAQCQSkIYdu9SkXJ3xqAkNEx3
iJIAhMqpBFLdrARy8g76QFI6uAAKQUN0lTiNGI4U4C9cgMRwJ4v9dUbAA23Q2NGG
nuKRDqFFpNqQVUNmkHbzC9Rc84ps1lpsAV4hXODKjxid5NQF6nIVXVSa4P7LHeR7
1owGIuC/3qQre0bqtcVG332VrIepVdqQYyHgEfvnQCIMvs1SuX44mcHL8B1VJj8b
CB2ttM/sgnRAZpEfr6aHBc3H9HTb1evgk06yEJle8As0fEdEqF7SIORJk/p0JfJo
RkTQ5Lbfy37PX+H44O7cZt8opA61UW3u1dnQh5TzExp4Ikq9mBcBSElFQZi9LqbH
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:54:03 2026 by rpki-client