Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/37EA495A6BBE11F0A43ABA75C4F9AE02.roa
File:                     37EA495A6BBE11F0A43ABA75C4F9AE02.roa (raw, json)
Hash identifier:          X22M1xDJyv52wtlywQ71TBasACr2RDm+u2QepE1tBdw=
Subject key identifier:   47:16:2A:41:B9:FF:D5:7F:03:D6:FC:3F:1E:E2:97:92:BF:6B:6B:A4
Certificate issuer:       /CN=A91C62B6/serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC
Certificate serial:       01BE
Authority key identifier: C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/37EA495A6BBE11F0A43ABA75C4F9AE02.roa
Signing time:             Sat 23 May 2026 04:36:08 +0000
ROA not before:           Sat 23 May 2026 04:36:08 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     147314
IP address blocks:        103.14.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl
                          rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 06:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C62B6, serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC
        Validity
            Not Before: May 23 04:36:08 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a112eb7-8619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:e4:18:95:2d:14:9f:e9:47:1f:77:d9:63:
                    e5:a3:36:74:20:5e:1d:c8:f6:a6:3e:cf:56:a7:cb:
                    ad:d7:91:90:c2:db:4f:88:22:46:f3:f8:3b:59:b0:
                    c0:38:f7:3c:c6:5c:2f:ed:7c:72:fd:be:c6:74:cd:
                    d1:12:22:87:54:c3:01:01:3e:35:23:28:c7:31:dd:
                    e2:90:af:1d:9d:31:55:9e:e1:04:e0:dc:fc:a0:26:
                    69:44:bd:f3:37:ad:53:e3:cf:fd:e5:a7:b4:ef:cf:
                    fb:69:3e:9e:10:05:b9:95:86:27:15:04:0d:cf:10:
                    9e:2c:bf:db:6c:08:0a:37:cb:07:ee:b0:bb:93:73:
                    3f:99:bd:2d:c1:f5:ba:58:88:95:3c:03:a9:e0:3e:
                    fe:24:3a:b8:71:61:cc:3b:48:a6:e4:16:66:cb:be:
                    40:a5:90:b3:df:25:c5:73:d5:62:3a:75:9b:25:2f:
                    69:40:2c:1e:95:b4:c3:ef:69:f2:3b:ef:f2:13:d2:
                    dd:a0:d0:ac:4e:3c:0b:bf:c8:1e:61:23:c5:cb:ed:
                    24:cf:1f:d5:91:bb:30:f2:49:7b:91:12:f2:ee:aa:
                    41:17:57:72:b2:f7:99:68:98:99:98:61:7a:e8:ff:
                    69:cb:a1:51:2e:3b:ba:79:b3:75:67:e4:47:92:b9:
                    fd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:16:2A:41:B9:FF:D5:7F:03:D6:FC:3F:1E:E2:97:92:BF:6B:6B:A4
            X509v3 Authority Key Identifier:
                keyid:C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/37EA495A6BBE11F0A43ABA75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:4d:52:9d:e8:8c:e0:4e:54:3e:ab:bb:91:66:e2:e7:c4:61:
         86:f0:1b:5d:c5:98:26:df:b6:a8:af:30:5f:ca:33:47:58:2c:
         10:b5:ac:b9:2b:19:29:72:fa:95:f2:93:95:6b:30:b0:ed:3a:
         89:8a:76:d5:04:1d:02:15:80:c7:1f:5b:0e:93:3e:22:4f:40:
         a2:9c:5d:39:ae:e9:8c:04:e0:00:95:1a:2f:22:8d:84:07:7c:
         46:9e:f8:ae:1c:45:ad:5a:80:f4:e7:85:37:d1:95:80:6c:da:
         31:09:1f:df:f4:f5:14:88:3e:7a:0e:31:0a:75:91:34:d9:f4:
         c7:e7:94:fc:4a:bf:9b:22:78:b2:4a:19:5b:cc:4e:f2:a9:37:
         87:2d:8b:58:2b:d6:09:6b:9d:a4:0b:a8:03:6a:5e:e5:dc:5d:
         e5:65:80:2f:a0:1e:bb:f1:46:95:3c:71:f7:2a:03:0c:fb:51:
         e3:d6:72:71:62:f3:c2:54:a3:d8:95:ce:53:81:38:84:b5:29:
         af:48:dc:97:26:5c:a3:99:94:93:78:a1:e8:00:2f:13:d0:37:
         e5:30:68:7d:25:41:a3:fa:df:8b:60:2b:40:44:d4:91:ea:96:
         1f:6c:cc:d2:f0:d3:b5:0b:9b:e3:74:ae:0b:87:f3:5f:15:11:
         41:12:d9:ed
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYyQjYxMTAvBgNVBAUTKEMxNEEwRTYwODJGMEU5MjJDQUZFMjI5Njk1MjNFODY0
QzdBOEYxREMwHhcNMjYwNTIzMDQzNjA4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTExMmViNy04NjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqVbkGJUtFJ/pRx932WPlozZ0IF4dyPamPs9Wp8ut15GQwttPiCJG8/g7WbDA
OPc8xlwv7Xxy/b7GdM3REiKHVMMBAT41IyjHMd3ikK8dnTFVnuEE4Nz8oCZpRL3z
N61T48/95ae078/7aT6eEAW5lYYnFQQNzxCeLL/bbAgKN8sH7rC7k3M/mb0twfW6
WIiVPAOp4D7+JDq4cWHMO0im5BZmy75ApZCz3yXFc9ViOnWbJS9pQCwelbTD72ny
O+/yE9LdoNCsTjwLv8geYSPFy+0kzx/Vkbsw8kl7kRLy7qpBF1dysveZaJiZmGF6
6P9py6FRLju6ebN1Z+RHkrn95wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEcWKkG5
/9V/A9b8Px7il5K/a2ukMB8GA1UdIwQYMBaAFMFKDmCC8Okiyv4ilpUj6GTHqPHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJCNi9COTk4N0FBNEZF
NDAxMUVFOEZFNzQ1NjlDNEY5QUUwMi93VW9PWUlMdzZTTEtfaUtXbFNQb1pNZW84
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVb09ZSUx3NlNMS19pS1dsU1BvWk1lbzhkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzYyQjYvQjk5ODdBQTRGRTQwMTFFRThGRTc0NTY5QzRGOUFFMDIvMzdFQTQ5NUE2
QkJFMTFGMEE0M0FCQTc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZw6XMA0GCSqGSIb3DQEBCwUAA4IBAQCeTVKd6IzgTlQ+q7uRZuLn
xGGG8BtdxZgm37aorzBfyjNHWCwQtay5KxkpcvqV8pOVazCw7TqJinbVBB0CFYDH
H1sOkz4iT0CinF05rumMBOAAlRovIo2EB3xGnviuHEWtWoD054U30ZWAbNoxCR/f
9PUUiD56DjEKdZE02fTH55T8Sr+bIniyShlbzE7yqTeHLYtYK9YJa52kC6gDal7l
3F3lZYAvoB678UaVPHH3KgMM+1Hj1nJxYvPCVKPYlc5TgTiEtSmvSNyXJlyjmZST
eKHoAC8T0DflMGh9JUGj+t+LYCtARNSR6pYfbMzS8NO1C5vjdK4Lh/NfFRFBEtnt
-----END CERTIFICATE-----
Generated at Fri Jun 12 12:07:52 2026 by rpki-client