Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/743EA894779E11EE842F9D85C4F9AE02.roa
File:                     743EA894779E11EE842F9D85C4F9AE02.roa (raw, json)
Hash identifier:          yLCHLkKHbHA08+tXZCtJcmyubM9Z6U4xpeyvONN3Ypg=
Subject key identifier:   9D:A2:B2:97:B9:99:0F:8A:9D:FB:B1:C6:AF:01:53:62:C1:E6:C7:AB
Certificate issuer:       /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
Certificate serial:       01F6
Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/743EA894779E11EE842F9D85C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 04:34:04 +0000
ROA not before:           Fri 05 Jun 2026 04:34:04 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     135428
IP address blocks:        103.138.184.0/24 maxlen: 24
                          103.219.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl
                          rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 03:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
        Validity
            Not Before: Jun  5 04:34:04 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2251bc-1900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:31:9a:55:94:3a:13:ff:dd:47:da:86:b9:
                    14:a6:a1:7b:95:94:90:d9:a6:1b:a8:fb:1a:50:6c:
                    9c:ae:ee:fe:fa:ec:50:2f:2e:d7:8e:d9:34:0c:2f:
                    51:9f:a5:54:e4:41:5f:69:30:fa:e9:3e:21:84:fe:
                    aa:be:32:f1:f4:79:47:56:3e:12:7d:70:da:ae:9e:
                    2f:e7:7f:09:45:92:e7:f5:5b:ec:a7:46:10:78:61:
                    0c:8d:39:bc:74:3f:74:a0:17:31:0b:3f:db:b3:de:
                    e0:55:e0:1c:65:5a:60:63:20:fa:60:09:60:76:f3:
                    4f:b6:95:0c:f8:20:18:35:5c:14:36:15:d0:88:47:
                    f2:66:38:c0:19:d6:e9:3c:77:61:58:a0:df:0c:20:
                    16:77:0b:d0:54:59:cc:40:99:bf:32:c7:f2:ab:89:
                    1a:da:ba:62:5f:93:24:23:58:1e:bc:6e:b9:cd:ce:
                    b4:49:4d:35:1a:ff:a3:a7:41:92:f4:77:c7:37:5a:
                    d7:6a:3b:c2:67:8e:9c:26:5d:8d:b9:34:01:46:87:
                    e1:85:85:05:4d:9a:cb:4d:0c:09:62:59:eb:92:b9:
                    9d:31:df:42:5a:67:54:46:d6:e9:f5:ae:ea:eb:46:
                    2d:65:1c:1c:c6:d0:04:b7:9a:43:62:81:9e:88:c4:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A2:B2:97:B9:99:0F:8A:9D:FB:B1:C6:AF:01:53:62:C1:E6:C7:AB
            X509v3 Authority Key Identifier:
                keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/743EA894779E11EE842F9D85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.184.0/24
                  103.219.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:44:4d:88:5b:21:24:2a:02:af:bb:76:3c:e1:1e:57:97:ba:
         5e:57:76:52:11:f5:43:05:24:d0:50:11:11:c9:53:18:60:5c:
         59:da:03:2e:31:3c:1b:b1:0d:c8:77:ba:c2:86:b6:dc:2a:ba:
         dd:64:60:0b:dd:d0:73:25:dc:07:b7:24:55:26:23:ad:81:eb:
         33:5b:37:bd:ac:f3:90:f0:3d:81:fe:cd:24:de:aa:f3:16:bf:
         21:0e:e0:d2:14:b4:d3:ba:07:d2:2d:a5:c0:03:a0:c8:e2:e1:
         0e:9e:47:7d:ad:9a:70:68:e8:59:0c:b3:ed:fc:99:e9:49:28:
         cd:f0:fa:47:57:40:a3:9f:c6:7c:0f:08:3c:cb:a0:36:71:26:
         59:c9:ec:5a:bb:d3:d7:f0:c4:88:52:ce:e2:d1:38:49:5f:2b:
         ca:e1:02:d0:84:ae:a9:01:38:3f:65:14:65:6e:7d:df:7d:d6:
         00:10:98:bb:ec:fd:49:b5:8c:b6:b0:9c:1b:12:19:b2:c8:b8:
         7a:f6:d8:9b:10:80:93:e7:0a:43:69:00:8f:bd:27:72:ee:07:
         e4:84:46:56:e2:3d:ee:8f:94:e0:0f:10:50:70:21:c6:1b:3b:
         c5:78:44:58:a4:f7:8b:f0:77:64:11:9f:03:09:e7:dc:c2:86:
         bf:82:e9:f7
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew
QkU3NjQ4RjEwHhcNMjYwNjA1MDQzNDA0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyNTFiYy0xOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwYxmlWUOhP/3UfahrkUpqF7lZSQ2aYbqPsaUGycru7++uxQLy7Xjtk0DC9R
n6VU5EFfaTD66T4hhP6qvjLx9HlHVj4SfXDarp4v538JRZLn9Vvsp0YQeGEMjTm8
dD90oBcxCz/bs97gVeAcZVpgYyD6YAlgdvNPtpUM+CAYNVwUNhXQiEfyZjjAGdbp
PHdhWKDfDCAWdwvQVFnMQJm/Msfyq4ka2rpiX5MkI1gevG65zc60SU01Gv+jp0GS
9HfHN1rXajvCZ46cJl2NuTQBRofhhYUFTZrLTQwJYlnrkrmdMd9CWmdURtbp9a7q
60YtZRwcxtAEt5pDYoGeiMQORwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJ2ispe5
mQ+Knfuxxq8BU2LB5serMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3
OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDk2MkIvM0YwRjVDRUM3NzlDMTFFRTgyMjEzOTY3QzRGOUFFMDIvNzQzRUE4OTQ3
NzlFMTFFRTg0MkY5RDg1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ4q4AwQAZ9txMA0GCSqGSIb3DQEBCwUAA4IBAQBmRE2IWyEkKgKv
u3Y84R5Xl7peV3ZSEfVDBSTQUBERyVMYYFxZ2gMuMTwbsQ3Id7rChrbcKrrdZGAL
3dBzJdwHtyRVJiOtgeszWze9rPOQ8D2B/s0k3qrzFr8hDuDSFLTTugfSLaXAA6DI
4uEOnkd9rZpwaOhZDLPt/JnpSSjN8PpHV0Cjn8Z8Dwg8y6A2cSZZyexau9PX8MSI
Us7i0ThJXyvK4QLQhK6pATg/ZRRlbn3ffdYAEJi77P1JtYy2sJwbEhmyyLh69tib
EICT5wpDaQCPvSdy7gfkhEZW4j3uj5TgDxBQcCHGGzvFeERYpPeL8HdkEZ8DCefc
woa/gun3
-----END CERTIFICATE-----
Generated at Tue Jun 9 00:51:04 2026 by rpki-client