Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/511F1EDCFC0511F081195104746F56BC.roa
File:                     511F1EDCFC0511F081195104746F56BC.roa (raw, json)
Hash identifier:          3ZY9LtMnfjJy2QVhjYp4QqSiXFPZWzNKEPSHSZcoGaM=
Subject key identifier:   44:58:3A:15:D5:DA:18:FD:3E:56:10:61:43:2A:D1:19:9A:B8:9C:93
Certificate issuer:       /CN=A91CC473/serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
Certificate serial:       70
Authority key identifier: 33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/511F1EDCFC0511F081195104746F56BC.roa
Signing time:             Wed 29 Jul 2026 09:59:19 +0000
ROA not before:           Wed 29 Jul 2026 09:59:19 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132874
IP address blocks:        103.26.196.0/22 maxlen: 22
                          103.26.196.0/24 maxlen: 24
                          103.26.197.0/24 maxlen: 24
                          103.26.198.0/24 maxlen: 24
                          103.26.199.0/24 maxlen: 24
                          2001:df4:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl
                          rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC473, serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
        Validity
            Not Before: Jul 29 09:59:19 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a69cef7-0e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:5b:89:6d:d8:d1:f2:06:2f:ed:8a:f9:1e:
                    e4:ba:3d:7e:a7:8d:f1:58:64:c7:41:8f:3b:be:a3:
                    31:22:1f:d9:65:86:b5:66:47:40:1d:5d:e2:3d:0a:
                    53:21:cf:f2:70:ef:33:13:d1:f0:7a:61:37:90:96:
                    88:aa:7e:fa:25:96:4b:aa:f5:38:d2:bb:f0:85:94:
                    c0:f7:c6:35:ab:7b:d3:72:cb:8a:c7:d4:be:c0:23:
                    de:14:7b:45:4a:9f:f6:5d:7d:c4:b0:b8:1b:b6:82:
                    46:22:bb:ee:21:3f:d8:0b:47:6b:eb:fd:be:6b:6a:
                    37:11:cb:da:f9:c4:d0:f3:72:dc:24:a8:eb:df:5e:
                    97:10:40:61:d1:f4:df:d8:5e:b2:54:ac:5c:7c:5a:
                    bb:61:8d:08:50:14:45:5b:0b:c8:29:ee:46:83:f3:
                    4b:f4:30:ec:c1:6f:72:05:9f:12:8b:97:af:72:31:
                    9a:65:c7:6a:02:1a:6f:5c:40:fc:17:b4:c1:a1:4b:
                    94:bd:83:20:43:71:5a:6e:41:37:aa:44:48:fd:07:
                    81:ad:55:37:95:9e:f0:b7:9d:95:c9:89:c1:5e:9f:
                    0a:17:b4:46:01:eb:54:03:a1:b5:2a:cf:3f:78:0d:
                    b2:dc:8f:d6:e9:fd:9a:73:c6:75:5c:39:d6:c1:df:
                    a8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:58:3A:15:D5:DA:18:FD:3E:56:10:61:43:2A:D1:19:9A:B8:9C:93
            X509v3 Authority Key Identifier:
                keyid:33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/511F1EDCFC0511F081195104746F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.196.0/22
                IPv6:
                  2001:df4:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:00:e9:06:3a:e5:77:e6:a3:06:04:9a:9b:e5:55:13:94:cd:
         df:74:31:d1:3e:56:51:f5:2a:89:e5:b6:87:e5:e7:a6:3f:d6:
         07:de:b6:24:42:1c:05:fe:aa:61:7b:4d:82:22:25:b1:dd:b3:
         6a:b9:7d:2f:38:b1:2f:6b:1d:a8:9c:f6:9c:77:68:ab:53:35:
         8c:0f:17:f3:69:c4:a5:cc:d7:37:ce:a8:ab:21:bf:88:3a:31:
         6a:fc:34:ff:24:83:a1:1b:08:6f:72:31:f0:fb:0d:4c:17:ce:
         06:1b:cb:af:cc:40:46:cd:31:4b:25:42:6c:01:20:b6:88:4d:
         eb:b5:a3:d9:01:f9:16:02:db:d1:95:f8:cd:81:19:5d:2b:8f:
         a4:e1:d1:b8:2d:34:24:9e:0f:b8:8b:56:0b:e2:48:97:ab:aa:
         e6:28:d6:c0:71:fc:e8:89:ac:91:9f:f7:4c:93:24:4c:58:80:
         ed:37:79:c5:c1:ba:93:59:52:19:5b:99:3b:0a:5b:e8:a0:3b:
         7b:1e:55:ce:5e:e3:0f:d0:28:76:8c:ef:55:94:f6:cf:5e:99:
         46:43:42:12:bb:ac:88:e3:58:a6:f6:5c:87:12:6a:11:1a:52:
         c8:8c:d4:af:55:aa:6f:18:b7:ed:8c:80:07:74:f1:e8:7e:58:
         51:e3:5e:45
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
QzQ3MzExMC8GA1UEBRMoMzMzNzdBMTE1RkU1MkU5MUNENjEyMTk3MTk4NUEwMDNC
QjNCQTQ0OTAeFw0yNjA3MjkwOTU5MTlaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNjljZWY3LTBlMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCRcVuJbdjR8gYv7Yr5HuS6PX6njfFYZMdBjzu+ozEiH9llhrVmR0AdXeI9ClMh
z/Jw7zMT0fB6YTeQloiqfvollkuq9TjSu/CFlMD3xjWre9Nyy4rH1L7AI94Ue0VK
n/ZdfcSwuBu2gkYiu+4hP9gLR2vr/b5rajcRy9r5xNDzctwkqOvfXpcQQGHR9N/Y
XrJUrFx8WrthjQhQFEVbC8gp7kaD80v0MOzBb3IFnxKLl69yMZplx2oCGm9cQPwX
tMGhS5S9gyBDcVpuQTeqREj9B4GtVTeVnvC3nZXJicFenwoXtEYB61QDobUqzz94
DbLcj9bp/ZpzxnVcOdbB36htAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQURFg6FdXa
GP0+VhBhQyrRGZq4nJMwHwYDVR0jBBgwFoAUMzd6EV/lLpHNYSGXGYWgA7s7pEkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNDczLzZDMTdFRUNDRkMw
NDExRjA4RTNDRkEwMDc0NkY1NkJDL016ZDZFVl9sTHBITllTR1hHWVdnQTdzN3BF
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTXpkNkVWX2xMcEhOWVNHWEdZV2dBN3M3cEVrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzQ3My82QzE3RUVDQ0ZDMDQxMUYwOEUzQ0ZBMDA3NDZGNTZCQy81MTFGMUVEQ0ZD
MDUxMUYwODExOTUxMDQ3NDZGNTZCQy5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE
AgABMAYDBAJnGsQwDwQCAAIwCQMHACABDfRgADANBgkqhkiG9w0BAQsFAAOCAQEA
tADpBjrld+ajBgSam+VVE5TN33Qx0T5WUfUqieW2h+Xnpj/WB962JEIcBf6qYXtN
giIlsd2zarl9LzixL2sdqJz2nHdoq1M1jA8X82nEpczXN86oqyG/iDoxavw0/ySD
oRsIb3Ix8PsNTBfOBhvLr8xARs0xSyVCbAEgtohN67Wj2QH5FgLb0ZX4zYEZXSuP
pOHRuC00JJ4PuItWC+JIl6uq5ijWwHH86ImskZ/3TJMkTFiA7Td5xcG6k1lSGVuZ
Owpb6KA7ex5Vzl7jD9AodozvVZT2z16ZRkNCErusiONYpvZchxJqERpSyIzUr1Wq
bxi37YyAB3Tx6H5YUeNeRQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:15 2026 by rpki-client