Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/56CBAF060CEE11EF80CB5642C4F9AE02.roa
File:                     56CBAF060CEE11EF80CB5642C4F9AE02.roa (raw, json)
Hash identifier:          GE/BEKlvCROhI6gv8DUS+S1F55emeefvuroew5sprrM=
Subject key identifier:   E4:FC:3A:9D:FB:8C:B5:9F:74:91:AA:B7:5E:5A:C9:56:49:5C:6A:44
Certificate issuer:       /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
Certificate serial:       01BE
Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/56CBAF060CEE11EF80CB5642C4F9AE02.roa
Signing time:             Sun 09 Aug 2026 03:53:24 +0000
ROA not before:           Sun 09 Aug 2026 03:53:24 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     55649
IP address blocks:        43.242.140.0/22 maxlen: 22
                          43.242.140.0/24 maxlen: 24
                          43.242.141.0/24 maxlen: 24
                          43.242.142.0/24 maxlen: 24
                          43.242.143.0/24 maxlen: 24
                          103.38.28.0/22 maxlen: 22
                          103.38.28.0/24 maxlen: 24
                          103.38.29.0/24 maxlen: 24
                          103.38.30.0/24 maxlen: 24
                          103.38.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 04:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811
        Validity
            Not Before: Aug  9 03:53:24 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a77f9b4-1cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:55:de:d1:58:08:d4:0f:d1:cd:f3:b4:20:
                    1f:9c:a5:89:31:54:9a:0a:47:63:2a:ff:c6:ac:ed:
                    1a:62:a2:db:67:87:8c:c4:e5:1b:91:f7:78:5a:bd:
                    61:f6:df:e4:35:ea:ce:fe:6d:7f:3b:4b:72:89:b0:
                    43:b3:14:26:4c:71:19:aa:61:4d:a7:06:9d:b6:90:
                    b4:04:1f:84:30:1f:22:ba:61:b8:0e:01:17:f8:df:
                    55:da:ff:4c:48:40:45:d6:1c:67:43:35:4a:08:0e:
                    02:c6:db:66:ba:f1:0b:b2:4e:70:66:73:e8:1a:6a:
                    4e:d2:6f:81:84:86:46:6e:79:6b:28:45:7f:66:ef:
                    1e:5f:25:05:bf:f4:8f:c2:1b:50:18:91:94:43:b1:
                    11:3a:77:06:98:86:da:1a:59:60:e9:41:fc:a2:73:
                    14:c8:dc:4b:a0:0f:fa:5d:0c:4f:be:95:a7:35:22:
                    40:2b:9e:28:f9:f7:f1:e7:34:fe:cd:37:24:34:34:
                    11:57:62:d3:3e:9e:17:36:4f:e9:5e:cc:af:01:57:
                    9d:e8:eb:88:bd:08:35:1f:c7:a3:b2:6c:85:2e:c1:
                    ce:5a:c3:68:2d:59:ac:57:94:cd:40:39:d1:36:ee:
                    82:3c:ef:a5:7d:af:39:50:f7:48:4e:b5:e6:55:0e:
                    ef:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FC:3A:9D:FB:8C:B5:9F:74:91:AA:B7:5E:5A:C9:56:49:5C:6A:44
            X509v3 Authority Key Identifier:
                keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/56CBAF060CEE11EF80CB5642C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.140.0/22
                  103.38.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:e4:c2:ec:b2:8f:67:e7:97:0a:66:a7:2e:33:b3:3f:aa:00:
         12:8a:5c:ef:a9:d5:f6:e5:39:20:7c:78:b1:ac:59:2b:08:06:
         89:6a:3f:da:83:11:f7:91:e9:f9:8b:e5:25:2b:27:a8:20:29:
         2a:2f:34:a1:7b:a8:90:8a:f3:25:c3:05:a2:c4:c9:95:ae:cf:
         3c:d6:e8:a1:e9:f8:ef:ea:a2:64:b5:35:29:8a:1c:97:3d:f0:
         9e:ce:6e:94:3e:0e:15:fd:91:b0:43:b1:04:20:00:60:d3:eb:
         4f:e6:07:3b:b6:4e:cd:f3:f3:b5:1e:5a:1b:31:25:91:cb:f6:
         fc:b7:4d:08:f8:bf:60:d0:bc:0f:f8:57:54:51:27:30:97:c5:
         a0:5d:66:0e:82:57:7d:5c:0c:c7:6f:57:8e:dc:77:67:27:92:
         4c:66:20:53:26:eb:f6:11:9e:bd:2f:04:3a:43:48:1b:b5:26:
         ca:22:9b:da:62:3a:86:53:f5:03:71:1e:12:c6:3d:0f:a5:bc:
         95:46:e4:07:44:f4:01:be:1a:04:b1:42:b1:ed:3b:cb:26:e2:
         6e:f9:67:85:82:27:b0:c4:d4:fb:42:80:37:85:ea:6e:b7:e6:
         9b:db:f0:45:50:19:ad:1d:ef:0e:a9:6b:c8:52:16:17:8e:1f:
         dc:f3:60:04
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1
Mjg4NjM4MTEwHhcNMjYwODA5MDM1MzI0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc3ZjliNC0xY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZlV3tFYCNQP0c3ztCAfnKWJMVSaCkdjKv/GrO0aYqLbZ4eMxOUbkfd4Wr1h
9t/kNerO/m1/O0tyibBDsxQmTHEZqmFNpwadtpC0BB+EMB8iumG4DgEX+N9V2v9M
SEBF1hxnQzVKCA4CxttmuvELsk5wZnPoGmpO0m+BhIZGbnlrKEV/Zu8eXyUFv/SP
whtQGJGUQ7EROncGmIbaGllg6UH8onMUyNxLoA/6XQxPvpWnNSJAK54o+ffx5zT+
zTckNDQRV2LTPp4XNk/pXsyvAVed6OuIvQg1H8ejsmyFLsHOWsNoLVmsV5TNQDnR
Nu6CPO+lfa85UPdITrXmVQ7vMQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOT8Op37
jLWfdJGqt15ayVZJXGpEMB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD
RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjRFMkIvRjgzNkJERUMwQ0VDMTFFRjlGODFGNjNGQzRGOUFFMDIvNTZDQkFGMDYw
Q0VFMTFFRjgwQ0I1NjQyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK/KMAwQCZyYcMA0GCSqGSIb3DQEBCwUAA4IBAQCm5MLsso9n55cK
ZqcuM7M/qgASilzvqdX25TkgfHixrFkrCAaJaj/agxH3ken5i+UlKyeoICkqLzSh
e6iQivMlwwWixMmVrs881uih6fjv6qJktTUpihyXPfCezm6UPg4V/ZGwQ7EEIABg
0+tP5gc7tk7N8/O1HlobMSWRy/b8t00I+L9g0LwP+FdUUScwl8WgXWYOgld9XAzH
b1eO3HdnJ5JMZiBTJuv2EZ69LwQ6Q0gbtSbKIpvaYjqGU/UDcR4Sxj0PpbyVRuQH
RPQBvhoEsUKx7TvLJuJu+WeFgiewxNT7QoA3heput+ab2/BFUBmtHe8OqWvIUhYX
jh/c82AE
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:18:24 2026 by rpki-client