Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/485C1B8EC9E011F1BFEA5EBA3911F970.roa
File:                     485C1B8EC9E011F1BFEA5EBA3911F970.roa (raw, json)
Hash identifier:          56qQcoARAN+RlAOx3d4TNNZoffX+ijLuOpPuUaxg8C8=
Subject key identifier:   72:2C:2C:71:23:7A:A7:E6:D4:08:50:F3:84:2A:21:18:16:20:27:0D
Certificate issuer:       /CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
Certificate serial:       0264
Authority key identifier: 12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/485C1B8EC9E011F1BFEA5EBA3911F970.roa
Signing time:             Sat 17 Oct 2026 04:07:35 +0000
ROA not before:           Sat 17 Oct 2026 04:07:35 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        103.176.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl
                          rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 02:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B778A, serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
        Validity
            Not Before: Oct 17 04:07:35 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ad2f487-ea27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:65:ee:d1:00:38:a2:c9:f3:a0:2d:67:4e:
                    42:12:04:31:9b:fc:38:33:00:a8:42:3c:29:e4:9d:
                    13:7e:c0:1a:67:0c:03:a0:1a:7c:94:12:b3:24:2d:
                    f9:63:b9:2b:e7:14:be:18:ef:46:67:0a:e1:e2:00:
                    0f:d1:65:f1:87:c4:7b:f3:b5:7f:67:ac:81:16:67:
                    28:aa:55:74:30:b1:91:d0:1d:68:13:dd:57:91:9f:
                    6c:08:92:c5:9c:ce:86:31:82:c9:38:96:17:a3:69:
                    40:3c:95:24:93:06:11:02:c1:1a:b2:b8:5b:1b:20:
                    af:bb:1a:78:28:3b:e6:63:7c:2d:f6:e2:63:d5:5b:
                    1f:05:41:1c:1f:34:27:3b:70:03:95:f3:78:d1:7a:
                    c7:a3:b5:d2:b6:ff:2f:db:c3:79:4c:07:f9:f2:f2:
                    35:a7:ef:81:44:00:6c:a3:d5:24:3b:8e:f6:e7:ce:
                    53:58:12:6d:40:d3:5b:d2:6c:d8:b8:1f:4b:af:62:
                    30:34:1e:0d:6c:8f:c6:5c:e4:2a:04:fc:3e:8c:a0:
                    01:fe:01:42:f2:cf:fe:ce:a2:02:12:13:22:0b:13:
                    56:13:4b:49:52:64:2d:fd:c4:c7:9e:7f:d5:4f:93:
                    a7:cb:fd:b8:3c:ca:ef:2d:b5:ac:82:1a:b3:35:09:
                    46:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2C:2C:71:23:7A:A7:E6:D4:08:50:F3:84:2A:21:18:16:20:27:0D
            X509v3 Authority Key Identifier:
                keyid:12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/485C1B8EC9E011F1BFEA5EBA3911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:5b:7e:2c:28:04:df:54:ac:ad:0f:9f:7f:7b:f1:5b:b5:78:
         2d:65:80:57:a6:19:ab:02:e2:23:97:91:e2:e8:6a:78:72:25:
         de:2d:63:82:eb:00:a2:44:f5:70:e5:21:2a:f9:b5:95:74:ab:
         2a:10:2a:de:64:7b:1c:89:29:5a:b4:1d:8d:da:ad:06:7f:74:
         97:6e:35:d9:06:bf:a9:52:2d:24:4c:89:88:6c:94:52:19:b1:
         8f:f5:4f:93:f7:a1:f5:cd:7e:44:9c:cd:b4:03:00:e7:d1:11:
         19:d1:f3:8d:11:2c:be:09:c1:f6:63:1a:6b:1a:1e:27:a3:df:
         32:ad:06:93:b1:d4:20:27:44:9d:78:23:f6:f0:3f:87:94:ac:
         19:66:85:2d:6e:b0:e9:48:c4:48:b4:8a:c0:94:8b:1a:43:fd:
         80:3d:e6:4b:64:8e:76:80:a2:bc:2c:b5:dd:dc:dc:73:a9:94:
         99:69:3e:28:e8:31:52:9a:a4:c2:54:d9:69:8f:41:ef:bf:9d:
         e7:ab:07:a4:c6:99:36:ea:b5:2e:c6:58:8a:67:7a:04:93:24:
         23:3c:9c:de:06:58:94:f3:20:42:f9:e6:6d:25:0d:e4:6a:f9:
         92:44:dd:98:ea:62:9a:0c:1d:05:31:ac:69:40:73:1e:ba:10:
         96:77:1a:d6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3OEExMTAvBgNVBAUTKDEyQUJCRTlENEU1OTk4NTg1OTgxMzQ5QTVGQTlCNzVG
REFCQzU4NzYwHhcNMjYxMDE3MDQwNzM1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQyZjQ4Ny1lYTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0Fl7tEAOKLJ86AtZ05CEgQxm/w4MwCoQjwp5J0TfsAaZwwDoBp8lBKzJC35
Y7kr5xS+GO9GZwrh4gAP0WXxh8R787V/Z6yBFmcoqlV0MLGR0B1oE91XkZ9sCJLF
nM6GMYLJOJYXo2lAPJUkkwYRAsEasrhbGyCvuxp4KDvmY3wt9uJj1VsfBUEcHzQn
O3ADlfN40XrHo7XStv8v28N5TAf58vI1p++BRABso9UkO472585TWBJtQNNb0mzY
uB9Lr2IwNB4NbI/GXOQqBPw+jKAB/gFC8s/+zqICEhMiCxNWE0tJUmQt/cTHnn/V
T5Ony/24PMrvLbWsghqzNQlGtQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHIsLHEj
eqfm1AhQ84QqIRgWICcNMB8GA1UdIwQYMBaAFBKrvp1OWZhYWYE0ml+pt1/avFh2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc4QS85MDJBQUU5ODJC
NkYxMUVFQTRCQThGN0NDNEY5QUUwMi9FcXUtblU1Wm1GaFpnVFNhWDZtM1g5cThX
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VxdS1uVTVabUZoWmdUU2FYNm0zWDlxOFdIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjc3OEEvOTAyQUFFOTgyQjZGMTFFRUE0QkE4RjdDQzRGOUFFMDIvNDg1QzFCOEVD
OUUwMTFGMUJGRUE1RUJBMzkxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7A2MA0GCSqGSIb3DQEBCwUAA4IBAQDQW34sKATfVKytD59/e/Fb
tXgtZYBXphmrAuIjl5Hi6Gp4ciXeLWOC6wCiRPVw5SEq+bWVdKsqECreZHsciSla
tB2N2q0Gf3SXbjXZBr+pUi0kTImIbJRSGbGP9U+T96H1zX5EnM20AwDn0REZ0fON
ESy+CcH2YxprGh4no98yrQaTsdQgJ0SdeCP28D+HlKwZZoUtbrDpSMRItIrAlIsa
Q/2APeZLZI52gKK8LLXd3NxzqZSZaT4o6DFSmqTCVNlpj0Hvv53nqwekxpk26rUu
xliKZ3oEkyQjPJzeBliU8yBC+eZtJQ3kavmSRN2Y6mKaDB0FMaxpQHMeuhCWdxrW
-----END CERTIFICATE-----
Generated at Tue Oct 27 21:01:21 2026 by rpki-client