Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/6BD6CD146F7F11EBB1A2C853C4F9AE02.roa
File:                     6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (raw, json)
Hash identifier:          j8esqwVKP9sAbri33kMLYSvi9ktpzKa2b0fdRCKQtX8=
Subject key identifier:   8D:51:E7:A7:53:81:E4:9C:B1:79:CE:BD:EC:97:67:00:2C:58:06:63
Certificate issuer:       /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
Certificate serial:       0727
Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/6BD6CD146F7F11EBB1A2C853C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:12:47 +0000
ROA not before:           Sat 14 Feb 2026 22:19:17 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141711
IP address blocks:        103.162.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl
                          rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
        Validity
            Not Before: Feb 14 22:19:17 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a4495e-55f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:8d:c6:a7:ef:dc:63:4e:82:34:3f:87:0d:
                    11:10:e7:3c:b5:bc:e7:b3:40:ec:d4:1b:9d:bc:dc:
                    9c:73:86:c9:07:62:61:4e:89:55:f5:e7:60:69:f7:
                    09:5a:a9:88:b4:0a:97:72:62:b3:bf:fa:66:20:16:
                    a4:af:e3:78:57:82:02:b9:4c:7e:5a:83:72:41:71:
                    f2:20:a5:87:ec:4c:70:55:a5:72:26:37:9f:65:6d:
                    56:bb:17:ee:db:3c:de:a3:12:c5:0c:38:e4:ba:a0:
                    e6:b6:59:8e:63:92:14:d7:9b:04:a3:c5:64:39:33:
                    d4:8b:35:2d:43:95:e8:8e:f2:9e:dc:3e:33:a3:a9:
                    1b:e9:98:19:7c:92:e6:85:f0:99:44:43:f5:ea:1b:
                    43:d1:06:87:1f:9d:29:45:92:f5:ab:e7:c3:59:5c:
                    08:4c:b8:9d:04:7c:02:9f:80:36:70:66:49:f9:7a:
                    dc:1a:13:66:fe:e3:97:88:72:86:ad:5a:69:83:9a:
                    bf:66:39:59:27:16:e2:6a:30:a8:33:2f:bc:8f:5a:
                    4d:0b:23:4f:76:9c:35:fe:54:8f:7c:30:ff:d4:34:
                    ac:b7:47:b7:b2:35:31:cf:a0:ea:a1:13:4d:2e:c6:
                    88:3c:88:cb:3b:db:3d:ee:a2:d1:69:0f:09:81:c9:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:51:E7:A7:53:81:E4:9C:B1:79:CE:BD:EC:97:67:00:2C:58:06:63
            X509v3 Authority Key Identifier:
                keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/6BD6CD146F7F11EBB1A2C853C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:79:05:c1:e7:ec:24:52:38:c5:99:dc:ff:6a:d9:72:28:b7:
         6d:c2:ec:37:96:7e:19:96:2b:e2:ae:e2:59:30:96:a9:c3:42:
         13:8b:fd:0f:ae:fa:50:4d:ea:3e:2b:30:47:7f:1d:11:1a:17:
         20:3d:71:7c:53:58:ae:3f:67:2b:84:8a:54:87:6d:69:84:73:
         b7:7f:ee:c1:03:4b:91:99:e3:fa:a1:b3:d3:d0:e6:7d:d8:c0:
         f0:86:44:4b:3d:33:cb:58:09:c2:ed:d1:62:79:35:b7:ab:df:
         62:1d:a2:80:cf:f9:91:5c:e6:f5:d8:d4:43:2d:65:fc:ce:47:
         d2:1a:be:b9:57:dc:b9:a1:55:01:a8:17:14:5b:40:c5:2c:86:
         95:f3:57:1d:8e:00:98:32:d9:7b:44:8b:dc:ab:20:15:a9:89:
         ab:46:06:6e:3c:f0:8d:91:e2:ec:14:5f:35:a1:62:56:2c:eb:
         58:04:b6:d5:61:7b:6a:a6:95:2b:6d:77:b0:64:bc:b5:ec:68:
         b6:80:f4:45:92:be:c8:96:bb:d0:48:ef:66:c1:ef:61:42:5b:
         1a:b3:37:61:fd:01:99:45:9c:51:ac:35:58:75:65:c3:45:75:
         84:dc:6b:7b:5e:cf:13:eb:c4:29:59:f0:79:9d:8b:90:ed:51:
         f2:93:9c:ec
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2
RDZFQkZGOUIwHhcNMjYwMjE0MjIxOTE3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDk1ZS01NWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1CNxqfv3GNOgjQ/hw0REOc8tbzns0Ds1BudvNycc4bJB2JhTolV9edgafcJ
WqmItAqXcmKzv/pmIBakr+N4V4ICuUx+WoNyQXHyIKWH7ExwVaVyJjefZW1Wuxfu
2zzeoxLFDDjkuqDmtlmOY5IU15sEo8VkOTPUizUtQ5XojvKe3D4zo6kb6ZgZfJLm
hfCZREP16htD0QaHH50pRZL1q+fDWVwITLidBHwCn4A2cGZJ+XrcGhNm/uOXiHKG
rVppg5q/ZjlZJxbiajCoMy+8j1pNCyNPdpw1/lSPfDD/1DSst0e3sjUxz6DqoRNN
LsaIPIjLO9s97qLRaQ8JgclYEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI1R56dT
geScsXnOveyXZwAsWAZjMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG
N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzczQTcvMkQyQ0IzNDA2RjdFMTFFQjlFMTM1MjUzQzRGOUFFMDIvNkJENkNEMTQ2
RjdGMTFFQkIxQTJDODUzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6KUMA0GCSqGSIb3DQEBCwUAA4IBAQCWeQXB5+wkUjjFmdz/atly
KLdtwuw3ln4ZliviruJZMJapw0ITi/0PrvpQTeo+KzBHfx0RGhcgPXF8U1iuP2cr
hIpUh21phHO3f+7BA0uRmeP6obPT0OZ92MDwhkRLPTPLWAnC7dFieTW3q99iHaKA
z/mRXOb12NRDLWX8zkfSGr65V9y5oVUBqBcUW0DFLIaV81cdjgCYMtl7RIvcqyAV
qYmrRgZuPPCNkeLsFF81oWJWLOtYBLbVYXtqppUrbXewZLy17Gi2gPRFkr7IlrvQ
SO9mwe9hQlsaszdh/QGZRZxRrDVYdWXDRXWE3Gt7Xs8T68QpWfB5nYuQ7VHyk5zs
-----END CERTIFICATE-----
Generated at Sat Mar 14 06:03:44 2026 by rpki-client