Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa
File:                     41A8950C272F11EF9D0A0C5CC4F9AE02.roa (raw, json)
Hash identifier:          d/c8vI45LOwVlgQ3QO11BVSR0P5AhnRZDNl0HjMipe8=
Subject key identifier:   AC:81:E9:ED:E3:21:D7:63:94:DC:DF:2E:A0:D7:47:9A:71:E6:73:54
Certificate issuer:       /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial:       01FC
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa
Signing time:             Wed 21 Oct 2026 04:52:05 +0000
ROA not before:           Wed 21 Oct 2026 04:52:05 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     32787
IP address blocks:        103.37.228.0/24 maxlen: 24
                          103.55.52.0/24 maxlen: 24
                          103.55.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
                          rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
        Validity
            Not Before: Oct 21 04:52:05 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ad844f5-8d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:4a:87:93:6c:dd:40:c6:d0:4d:f4:b7:a4:
                    10:29:4f:2c:0c:49:ae:3e:0c:da:a1:99:4f:65:78:
                    37:d1:11:a5:2e:6c:cd:71:bd:b8:ba:4b:bd:c2:b8:
                    1b:fe:9a:31:e8:7e:6b:2f:48:3c:91:63:71:70:0c:
                    d5:15:45:49:1e:d4:9d:3a:c9:d2:58:e6:8f:b6:8f:
                    6f:73:80:3d:82:b4:10:3d:58:c8:fb:dd:28:3e:1d:
                    3c:04:d1:28:44:3d:8f:f5:eb:01:c2:6e:9a:87:55:
                    20:9b:2e:00:5b:54:9c:cb:5b:97:17:35:7c:1a:64:
                    2c:15:1b:6a:1f:6e:71:77:29:fa:d7:7e:fd:c3:ec:
                    47:09:42:46:d9:f3:3d:eb:22:00:9d:17:6c:e4:43:
                    00:30:fc:af:04:cf:2d:b0:11:b3:39:a8:f5:3b:7f:
                    b2:f8:0a:fc:1d:de:97:46:db:75:ec:55:a6:f8:01:
                    93:28:35:30:17:e7:5c:ba:49:6a:8c:31:8c:56:27:
                    eb:5b:37:b7:71:30:64:f0:95:c5:22:56:f0:a5:7e:
                    02:a9:69:19:45:de:e8:5c:41:df:97:31:f7:da:69:
                    48:85:23:f9:b4:a7:56:f1:85:30:7e:66:0e:24:91:
                    ef:a6:34:4b:ab:22:5e:6d:32:35:49:50:1f:38:4f:
                    dd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:81:E9:ED:E3:21:D7:63:94:DC:DF:2E:A0:D7:47:9A:71:E6:73:54
            X509v3 Authority Key Identifier:
                keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.228.0/24
                  103.55.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:8a:7d:5b:6b:ce:67:f5:2a:78:b7:10:5d:44:c2:35:a9:dc:
         8f:f9:31:a0:04:0f:5a:75:91:45:68:f2:d0:d5:94:18:2c:08:
         23:9b:87:c3:b2:2e:81:7c:f7:09:a2:e6:fa:67:dc:f6:01:d2:
         68:d8:92:56:ce:ad:a2:c8:82:7a:4a:eb:c5:61:6f:b6:2d:be:
         e7:fb:68:00:5d:c0:02:f8:79:67:31:16:b5:6d:e2:e3:97:54:
         eb:f5:eb:ba:9b:5a:91:5e:00:03:77:08:f6:8f:1d:74:3d:48:
         b9:ff:4c:91:18:21:8a:1b:b8:43:40:dd:b4:3e:70:7a:29:bc:
         f2:98:98:27:2b:83:f3:2d:42:75:2f:d3:d3:55:8f:30:4d:4e:
         b5:f9:fb:ce:30:39:05:d1:37:64:59:54:4d:03:5a:54:43:90:
         79:58:fc:fc:c7:b8:85:e5:b9:44:ba:7a:87:87:c7:94:97:35:
         bf:a5:3f:be:d3:11:2f:23:20:9f:d1:c9:31:b6:e9:43:cc:e0:
         95:a5:4e:99:d4:cf:8c:54:d4:3b:43:a9:d4:81:69:98:6b:02:
         2d:4d:9d:4b:f8:76:ae:fa:a7:3f:fd:50:a1:ca:dd:9a:f2:b8:
         70:9d:4a:f0:0a:75:76:36:c1:d6:ba:c8:e2:9f:9f:90:9c:4b:
         08:a6:4d:cc
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE
NTk1OUYzMjUwHhcNMjYxMDIxMDQ1MjA1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQ4NDRmNS04ZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo0dKh5Ns3UDG0E30t6QQKU8sDEmuPgzaoZlPZXg30RGlLmzNcb24uku9wrgb
/pox6H5rL0g8kWNxcAzVFUVJHtSdOsnSWOaPto9vc4A9grQQPVjI+90oPh08BNEo
RD2P9esBwm6ah1Ugmy4AW1Scy1uXFzV8GmQsFRtqH25xdyn61379w+xHCUJG2fM9
6yIAnRds5EMAMPyvBM8tsBGzOaj1O3+y+Ar8Hd6XRtt17FWm+AGTKDUwF+dcuklq
jDGMVifrWze3cTBk8JXFIlbwpX4CqWkZRd7oXEHflzH32mlIhSP5tKdW8YUwfmYO
JJHvpjRLqyJebTI1SVAfOE/dzQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKyB6e3j
IddjlNzfLqDXR5px5nNUMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0
QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJDOEEvNjFFQzQ5MTYyNEM5MTFFRjlDOEM2MjU5QzRGOUFFMDIvNDFBODk1MEMy
NzJGMTFFRjlEMEEwQzVDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZyXkAwQBZzc0MA0GCSqGSIb3DQEBCwUAA4IBAQAOin1ba85n9Sp4
txBdRMI1qdyP+TGgBA9adZFFaPLQ1ZQYLAgjm4fDsi6BfPcJoub6Z9z2AdJo2JJW
zq2iyIJ6SuvFYW+2Lb7n+2gAXcAC+HlnMRa1beLjl1Tr9eu6m1qRXgADdwj2jx10
PUi5/0yRGCGKG7hDQN20PnB6KbzymJgnK4PzLUJ1L9PTVY8wTU61+fvOMDkF0Tdk
WVRNA1pUQ5B5WPz8x7iF5blEunqHh8eUlzW/pT++0xEvIyCf0ckxtulDzOCVpU6Z
1M+MVNQ7Q6nUgWmYawItTZ1L+Hau+qc//VChyt2a8rhwnUrwCnV2NsHWusjin5+Q
nEsIpk3M
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:58:19 2026 by rpki-client