Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/BB90B3249BE811F188B60C046311F970.roa
File:                     BB90B3249BE811F188B60C046311F970.roa (raw, json)
Hash identifier:          adapqyoaMpriFk8shJ47WPubnDhRH3fPAQYXpJULaPE=
Subject key identifier:   F4:00:20:7E:C5:FE:D8:F3:A8:A7:60:A1:CB:33:D5:2F:FA:AB:93:20
Certificate issuer:       /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial:       056C
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/BB90B3249BE811F188B60C046311F970.roa
Signing time:             Wed 19 Aug 2026 16:12:11 +0000
ROA not before:           Wed 19 Aug 2026 16:12:11 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152605
IP address blocks:        103.115.197.0/24 maxlen: 24
                          103.115.198.0/24 maxlen: 24
                          103.115.199.0/24 maxlen: 24
                          2402:edc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 16:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
        Validity
            Not Before: Aug 19 16:12:11 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a85d5db-61dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:02:38:c9:34:90:6b:2c:c4:a5:4d:dc:53:
                    1b:63:7d:a2:c7:c5:e5:42:2b:65:7c:59:6f:9c:67:
                    99:d7:a1:0c:ca:8b:3d:37:89:6c:98:46:66:4b:ad:
                    2d:54:35:b0:f7:a6:58:f8:ef:27:0a:11:d7:41:2f:
                    97:bd:b0:00:ec:b9:ca:1f:10:77:eb:af:d9:e4:b6:
                    d2:83:27:30:ca:07:53:f9:ca:b8:07:3b:90:90:23:
                    12:59:8a:22:78:0e:e2:d2:d2:15:bc:c6:1f:63:4e:
                    da:94:59:6e:3c:e7:1e:40:90:d1:f5:b9:f3:f0:aa:
                    f0:ad:6b:f1:ae:b5:84:18:d5:a6:12:7b:1c:d8:dd:
                    0f:af:0b:5a:b0:d6:4d:42:a5:5e:d6:a7:bb:03:4a:
                    4c:4a:4f:a8:31:57:6f:b3:67:34:e3:a8:f0:6b:62:
                    63:c7:bf:53:5a:af:a9:59:53:e3:43:6d:a9:01:96:
                    2a:59:ca:08:8c:3b:ea:9a:e1:bf:89:c7:20:66:e7:
                    8b:a0:b7:6a:cb:81:9e:80:ff:10:b1:61:ab:3f:24:
                    44:f2:dd:23:0a:1b:67:9a:ab:7c:d0:4a:77:11:b5:
                    f9:1a:3a:ab:0f:2d:89:e1:87:c2:05:a5:e2:c6:f4:
                    5b:ab:f7:00:c1:af:b1:4c:c3:f0:e4:14:e5:64:29:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:00:20:7E:C5:FE:D8:F3:A8:A7:60:A1:CB:33:D5:2F:FA:AB:93:20
            X509v3 Authority Key Identifier:
                keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/BB90B3249BE811F188B60C046311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.197.0-103.115.199.255
                IPv6:
                  2402:edc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:52:eb:ec:73:e9:16:87:14:04:27:e2:77:02:e0:62:40:
         bb:d0:33:76:ad:a6:14:14:3a:75:dd:04:51:6a:09:28:42:42:
         2d:42:e3:2f:1f:de:12:4e:40:bd:a2:c6:66:52:ff:4c:c6:20:
         53:25:cf:10:e8:b8:51:a8:cb:eb:40:d4:bb:e6:7d:5c:4e:0e:
         0d:86:44:9d:a2:5f:75:25:51:77:44:62:a8:60:49:dc:87:d1:
         3e:02:d3:ff:d4:65:df:d4:3e:1f:22:ea:d4:48:3c:fa:c8:5a:
         73:64:30:70:70:fa:d2:7b:bc:67:d3:85:99:7e:bd:a2:c8:bd:
         bb:6c:3a:10:a9:b8:40:b0:54:9c:05:b4:f2:9b:69:c6:44:b2:
         46:3f:9f:e2:f4:c2:7b:bc:5f:37:6f:6d:11:d2:29:49:bd:d4:
         e6:a8:21:a3:23:ba:06:62:7b:32:07:e5:a3:a0:11:30:15:84:
         22:fc:c5:06:42:bb:2b:59:f1:51:07:d1:40:eb:33:8e:cb:2f:
         f6:f4:54:be:46:f9:33:86:c6:e5:31:a6:82:b6:c3:65:c2:4e:
         af:fd:da:b7:d2:a2:76:cc:aa:e2:77:5e:28:b7:64:92:e3:ae:
         1f:c3:2a:b9:51:2d:2d:4a:9e:0d:74:d4:d3:bd:f7:f3:35:a8:
         06:d8:20:0d
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD
QjMxRDlCMTAwHhcNMjYwODE5MTYxMjExWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg1ZDVkYi02MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAptcCOMk0kGssxKVN3FMbY32ix8XlQitlfFlvnGeZ16EMyos9N4lsmEZmS60t
VDWw96ZY+O8nChHXQS+XvbAA7LnKHxB366/Z5LbSgycwygdT+cq4BzuQkCMSWYoi
eA7i0tIVvMYfY07alFluPOceQJDR9bnz8KrwrWvxrrWEGNWmEnsc2N0PrwtasNZN
QqVe1qe7A0pMSk+oMVdvs2c046jwa2Jjx79TWq+pWVPjQ22pAZYqWcoIjDvqmuG/
iccgZueLoLdqy4GegP8QsWGrPyRE8t0jChtnmqt80Ep3EbX5GjqrDy2J4YfCBaXi
xvRbq/cAwa+xTMPw5BTlZCnitQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFPQAIH7F
/tjzqKdgocsz1S/6q5MgMB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw
NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt
eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0U4MjEvODExRkI1OTA2MDUxMTFFODhDRDhFQzQ3QzRGOUFFMDIvQkI5MEIzMjQ5
QkU4MTFGMTg4QjYwQzA0NjMxMUY5NzAucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU
BAIAATAOMAwDBABnc8UDBANnc8AwDQQCAAIwBwMFACQC7cAwDQYJKoZIhvcNAQEL
BQADggEBAAGjUuvsc+kWhxQEJ+J3AuBiQLvQM3atphQUOnXdBFFqCShCQi1C4y8f
3hJOQL2ixmZS/0zGIFMlzxDouFGoy+tA1LvmfVxODg2GRJ2iX3UlUXdEYqhgSdyH
0T4C0//UZd/UPh8i6tRIPPrIWnNkMHBw+tJ7vGfThZl+vaLIvbtsOhCpuECwVJwF
tPKbacZEskY/n+L0wnu8XzdvbRHSKUm91OaoIaMjugZiezIH5aOgETAVhCL8xQZC
uytZ8VEH0UDrM47LL/b0VL5G+TOGxuUxpoK2w2XCTq/92rfSonbMquJ3Xii3ZJLj
rh/DKrlRLS1Kng101NO99/M1qAbYIA0=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:52:34 2026 by rpki-client