Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/AEBB4B3694AA11F1B1B21F766F11F970.roa
File:                     AEBB4B3694AA11F1B1B21F766F11F970.roa (raw, json)
Hash identifier:          d/LouYjmkM3IGdXU2p7GDSfZPoGSMofElYoz9hVqDIc=
Subject key identifier:   6D:2A:53:91:58:4A:83:91:B8:2E:46:D2:99:3E:0F:A2:3C:35:48:EE
Certificate issuer:       /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F
Certificate serial:       0AA1
Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/AEBB4B3694AA11F1B1B21F766F11F970.roa
Signing time:             Mon 10 Aug 2026 11:07:20 +0000
ROA not before:           Mon 10 Aug 2026 11:07:20 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139305
IP address blocks:        103.141.14.0/23 maxlen: 23
                          2001:df0:e480::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2721 (0xaa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F
        Validity
            Not Before: Aug 10 11:07:20 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a79b0e8-350c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:06:b6:51:b1:1a:24:96:50:61:f6:eb:ec:
                    af:00:19:e3:e4:18:ac:f4:6c:8c:29:36:10:7c:aa:
                    2a:70:d1:cf:2e:2f:28:8f:92:5e:82:4d:d7:28:a1:
                    da:dc:72:29:15:30:58:94:ee:39:c2:81:10:67:e8:
                    99:5c:31:04:81:b4:81:d7:8c:99:76:2a:f0:3c:b5:
                    a5:41:0c:7e:16:6d:f7:03:bd:1e:23:e4:b0:8d:80:
                    a0:ad:43:b2:6f:61:70:bc:af:81:22:dc:01:d0:ba:
                    6c:64:4d:37:57:84:07:cb:09:c0:09:ee:cf:3f:58:
                    4b:58:30:81:2a:eb:fc:a1:e8:50:2d:40:a6:67:bd:
                    03:8a:2d:d7:03:e5:60:7c:93:3f:e5:e2:6f:80:a7:
                    38:41:6d:04:fe:c3:39:53:7d:b5:cd:ac:ed:b2:b2:
                    09:f6:ad:89:d5:f0:e8:26:b5:49:5b:dd:e4:90:fa:
                    f8:b8:a3:94:3d:5b:46:37:ef:3f:b5:9d:6b:40:12:
                    20:c4:dc:0b:dc:b4:ad:29:f7:54:02:71:1d:2d:dd:
                    8e:42:80:15:78:5f:a3:35:e8:20:98:0f:c8:b5:fb:
                    08:9c:5b:c2:24:cd:d4:77:45:4a:1f:52:5d:87:3b:
                    1d:a7:70:b2:66:6b:a9:8c:f8:5d:3f:d7:0c:e9:15:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2A:53:91:58:4A:83:91:B8:2E:46:D2:99:3E:0F:A2:3C:35:48:EE
            X509v3 Authority Key Identifier:
                keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/AEBB4B3694AA11F1B1B21F766F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.14.0/23
                IPv6:
                  2001:df0:e480::/47

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:9b:3a:a8:5d:e9:49:48:d9:99:19:82:d9:83:b7:5f:91:
         88:5c:8f:8d:31:17:d5:e3:05:f2:ae:48:4b:c1:45:21:31:76:
         6f:d3:a2:19:32:e5:0d:9f:b2:13:7b:1c:7a:b3:2c:b0:ca:c1:
         5f:22:24:d1:2d:b9:9a:05:0f:04:d9:ff:5a:6c:4a:f7:17:3e:
         9b:dd:df:c6:95:fa:a8:81:d6:36:c7:e3:2d:e8:fc:50:d0:c5:
         a8:57:f7:c8:97:ec:e8:b6:de:9b:20:46:27:80:cb:8e:c7:a5:
         15:83:51:62:0c:e1:c0:18:41:79:a0:12:f8:6e:8a:ef:70:a9:
         be:a8:54:be:c1:c5:cd:19:b1:c2:33:9f:4f:8f:36:2d:ad:a8:
         6c:de:b5:20:9d:57:fa:1e:ef:62:88:28:45:2a:9c:91:58:7f:
         7c:c5:a2:25:6d:e7:69:c8:9e:32:a8:1c:04:0e:df:50:d4:be:
         a8:ea:7e:f9:74:a2:ff:1a:11:b6:23:b6:8f:9f:84:e0:77:2f:
         48:23:0c:d4:5b:ab:f6:c3:09:75:d1:aa:e1:dc:c6:1a:be:90:
         6b:00:74:d3:8f:76:a1:42:82:23:73:06:99:96:e4:69:39:50:
         32:a8:3a:10:9b:fd:0e:b2:46:00:51:52:6b:6d:73:ef:90:31:
         81:27:c0:8a
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0
Q0E3ODdENkYwHhcNMjYwODEwMTEwNzIwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc5YjBlOC0zNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmZ4GtlGxGiSWUGH26+yvABnj5Bis9GyMKTYQfKoqcNHPLi8oj5Jegk3XKKHa
3HIpFTBYlO45woEQZ+iZXDEEgbSB14yZdirwPLWlQQx+Fm33A70eI+SwjYCgrUOy
b2FwvK+BItwB0LpsZE03V4QHywnACe7PP1hLWDCBKuv8oehQLUCmZ70Dii3XA+Vg
fJM/5eJvgKc4QW0E/sM5U321zaztsrIJ9q2J1fDoJrVJW93kkPr4uKOUPVtGN+8/
tZ1rQBIgxNwL3LStKfdUAnEdLd2OQoAVeF+jNeggmA/ItfsInFvCJM3Ud0VKH1Jd
hzsdp3CyZmupjPhdP9cM6RVTUQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFG0qU5FY
SoORuC5G0pk+D6I8NUjuMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2
MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkM1QkMvMTNFQUE0N0M4NjIzMTFFQUEwMDU5ODgxQzRGOUFFMDIvQUVCQjRCMzY5
NEFBMTFGMUIxQjIxRjc2NkYxMUY5NzAucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ40OMA8EAgACMAkDBwEgAQ3w5IAwDQYJKoZIhvcNAQELBQADggEB
AAjCmzqoXelJSNmZGYLZg7dfkYhcj40xF9XjBfKuSEvBRSExdm/Tohky5Q2fshN7
HHqzLLDKwV8iJNEtuZoFDwTZ/1psSvcXPpvd38aV+qiB1jbH4y3o/FDQxahX98iX
7Oi23psgRieAy47HpRWDUWIM4cAYQXmgEvhuiu9wqb6oVL7Bxc0ZscIzn0+PNi2t
qGzetSCdV/oe72KIKEUqnJFYf3zFoiVt52nInjKoHAQO31DUvqjqfvl0ov8aEbYj
to+fhOB3L0gjDNRbq/bDCXXRquHcxhq+kGsAdNOPdqFCgiNzBpmW5Gk5UDKoOhCb
/Q6yRgBRUmttc++QMYEnwIo=
-----END CERTIFICATE-----
Generated at Sat Sep 12 14:30:30 2026 by rpki-client