Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/5CF4C0D4FADD11EE8083D572C4F9AE02.roa
File:                     5CF4C0D4FADD11EE8083D572C4F9AE02.roa (raw, json)
Hash identifier:          u3RDHvzO8IyUThl8mfuW7Q0vDhMHboGSoExS7yNBOm0=
Subject key identifier:   0D:61:8E:22:71:FE:A8:C8:A9:18:7F:0F:AD:CC:00:38:62:F0:B2:52
Certificate issuer:       /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Certificate serial:       0216
Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/5CF4C0D4FADD11EE8083D572C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 04:52:55 +0000
ROA not before:           Mon 03 Aug 2026 04:52:55 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     56229
IP address blocks:        103.189.136.0/24 maxlen: 24
                          103.189.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
                          rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 02:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
        Validity
            Not Before: Aug  3 04:52:55 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a701ea7-1791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:12:c3:3c:9a:bc:ff:e4:b5:87:18:08:c0:
                    5c:a6:15:d7:5a:c1:b6:10:87:8b:7d:8a:0f:51:48:
                    a1:19:4b:33:9a:72:48:5e:bb:73:0e:19:0f:ad:56:
                    6d:b2:c1:2f:f5:68:8c:90:02:69:39:2b:65:e1:08:
                    c8:1b:13:9a:73:15:16:d9:64:f7:49:a2:83:59:09:
                    ea:85:08:2f:71:6f:a3:2f:40:3f:27:37:bc:60:4f:
                    49:5a:07:94:ad:df:65:3f:89:8c:33:65:62:b7:09:
                    cb:58:28:53:53:b1:a6:7e:b7:8c:1b:11:b6:20:65:
                    2c:cb:f6:68:aa:6f:22:b0:2e:ee:07:2e:93:6a:e2:
                    93:4c:a1:d4:b2:74:75:50:f0:7a:2f:f5:05:64:48:
                    ff:c2:45:30:5f:22:42:29:12:42:ec:28:a5:f1:99:
                    70:f9:9f:47:50:84:e1:f9:c6:30:b5:a8:8f:9c:dc:
                    8e:bb:10:f9:30:e9:91:07:6e:6e:d0:56:bb:4f:85:
                    c2:44:75:03:0f:4a:1e:9b:ee:c2:50:11:3c:57:e6:
                    af:5d:29:f1:4d:5e:17:27:87:6f:0e:26:55:6d:ec:
                    36:ba:98:83:88:ff:25:b4:c9:18:89:a3:3d:d7:e5:
                    ed:15:b4:34:09:12:d4:7c:22:23:4b:2b:d1:12:0b:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:61:8E:22:71:FE:A8:C8:A9:18:7F:0F:AD:CC:00:38:62:F0:B2:52
            X509v3 Authority Key Identifier:
                keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/5CF4C0D4FADD11EE8083D572C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:99:ed:7d:71:c6:78:b4:08:ca:a7:05:8a:95:aa:98:2d:89:
         e2:dd:90:0a:57:5c:87:3c:cf:5b:d6:4a:02:04:bb:3c:4b:61:
         f4:7c:48:06:1b:49:6f:16:a1:f7:70:bf:dc:39:86:d4:74:4b:
         97:2c:2b:8c:79:b1:bb:05:70:10:a8:ef:99:cc:7b:e8:f2:95:
         e4:4c:e2:64:c8:b3:33:7d:81:96:58:c6:d3:57:e3:5c:85:ab:
         f4:9c:2e:b1:ed:fa:6b:6e:05:8f:b4:f1:47:99:44:25:18:6e:
         f0:d5:e1:84:14:19:ee:22:c5:02:b3:46:fb:c5:3c:01:ba:42:
         8a:c4:7e:3b:56:2b:e2:af:9d:88:ee:95:cc:8e:a8:c1:0b:db:
         7c:d0:f7:8f:6d:db:eb:f7:9f:39:c2:46:c6:07:d4:68:12:69:
         8a:8a:b3:70:39:65:32:06:f8:83:1c:2d:06:86:a5:5f:28:85:
         fe:3a:61:cf:0b:82:07:f3:a3:3f:57:7f:fe:74:61:41:69:94:
         bc:c3:a3:4f:3a:76:44:16:28:06:f9:e6:ab:f2:3e:55:ef:f8:
         2f:d9:24:33:32:03:00:9e:cf:6c:e2:78:47:fa:36:92:97:f3:
         a9:54:74:66:ac:85:74:45:c2:e8:f4:ab:4b:36:36:94:8f:b3:
         70:76:d8:7f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1
RjM0OTNGNjIwHhcNMjYwODAzMDQ1MjU1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcwMWVhNy0xNzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsUUSwzyavP/ktYcYCMBcphXXWsG2EIeLfYoPUUihGUszmnJIXrtzDhkPrVZt
ssEv9WiMkAJpOStl4QjIGxOacxUW2WT3SaKDWQnqhQgvcW+jL0A/Jze8YE9JWgeU
rd9lP4mMM2VitwnLWChTU7GmfreMGxG2IGUsy/Zoqm8isC7uBy6TauKTTKHUsnR1
UPB6L/UFZEj/wkUwXyJCKRJC7Cil8Zlw+Z9HUITh+cYwtaiPnNyOuxD5MOmRB25u
0Fa7T4XCRHUDD0oem+7CUBE8V+avXSnxTV4XJ4dvDiZVbew2upiDiP8ltMkYiaM9
1+XtFbQ0CRLUfCIjSyvREgvvnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA1hjiJx
/qjIqRh/D63MADhi8LJSMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5
NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDY4ODQvMkE5NTAyNTY2OTc1MTFFRUI3MEE1NTBFQzRGOUFFMDIvNUNGNEMwRDRG
QUREMTFFRTgwODNENTcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ72IMA0GCSqGSIb3DQEBCwUAA4IBAQDTme19ccZ4tAjKpwWKlaqY
LYni3ZAKV1yHPM9b1koCBLs8S2H0fEgGG0lvFqH3cL/cOYbUdEuXLCuMebG7BXAQ
qO+ZzHvo8pXkTOJkyLMzfYGWWMbTV+Nchav0nC6x7fprbgWPtPFHmUQlGG7w1eGE
FBnuIsUCs0b7xTwBukKKxH47Vivir52I7pXMjqjBC9t80PePbdvr9585wkbGB9Ro
EmmKirNwOWUyBviDHC0GhqVfKIX+OmHPC4IH86M/V3/+dGFBaZS8w6NPOnZEFigG
+ear8j5V7/gv2SQzMgMAns9s4nhH+jaSl/OpVHRmrIV0RcLo9KtLNjaUj7Nwdth/
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:18:58 2026 by rpki-client