Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa
File:                     41D7A1D4AB0511F0AD64C814C4F9AE02.roa (raw, json)
Hash identifier:          esPy6MMmYtKzPWXObL0sx4eLY1hmGAfUOV4Qg6UpVgo=
Subject key identifier:   C6:98:45:79:C0:67:9B:A0:6A:56:21:08:B5:80:50:38:88:62:2F:69
Certificate issuer:       /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Certificate serial:       C5
Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 19:38:42 +0000
ROA not before:           Wed 30 Sep 2026 19:38:41 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     38562
IP address blocks:        103.175.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 18:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
        Validity
            Not Before: Sep 30 19:38:41 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6abd6541-5d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:bd:8d:4d:d0:a8:5e:60:25:16:72:88:5b:
                    d8:f0:2b:08:0f:3b:c7:5f:cb:71:1c:5b:73:bd:91:
                    ee:c9:07:65:94:92:6e:e9:2e:fb:32:f1:61:4f:2b:
                    b6:d0:7e:ea:89:9c:af:d8:e6:48:64:56:58:7b:5b:
                    94:f4:44:75:3e:7a:a1:b6:4e:8e:6d:ad:10:e8:ec:
                    4d:24:7a:12:68:51:ae:c9:e7:72:c0:5d:0d:46:83:
                    c9:77:77:87:14:ae:b7:6e:0d:d3:d0:cb:0d:ec:4b:
                    12:8c:ef:e9:2a:61:60:e1:df:3c:50:2a:63:ee:42:
                    d0:0a:7f:58:b4:62:b5:26:52:e9:1b:e9:a6:b0:6f:
                    47:37:44:6c:0e:35:2a:f0:cd:d8:ab:a4:00:be:a7:
                    a2:a5:97:00:2b:8c:12:00:3d:f3:96:fb:0b:fd:d7:
                    d1:ce:29:89:fb:fb:bb:5b:6c:57:dc:2b:0c:18:94:
                    78:11:79:f4:4e:33:5c:50:cc:1f:ea:bb:ea:e2:7c:
                    9f:26:fb:21:5a:56:96:47:f3:d1:36:82:d6:ff:b7:
                    b8:a7:9a:d9:97:d5:7e:76:4e:ae:ff:95:5c:7e:26:
                    fe:8e:ee:84:50:22:50:53:68:74:e5:f5:6f:ad:a4:
                    17:86:29:f8:de:19:bb:e3:3b:cb:94:38:e7:d0:3b:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:98:45:79:C0:67:9B:A0:6A:56:21:08:B5:80:50:38:88:62:2F:69
            X509v3 Authority Key Identifier:
                keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:0f:a6:51:9d:11:14:9b:32:d8:0e:70:e3:a3:a6:39:8a:f2:
         92:2b:14:41:3e:56:57:79:c0:8c:12:c5:a0:35:46:35:c6:eb:
         fb:e8:02:11:5e:33:ef:4e:8c:2b:a2:b7:cd:e7:c5:03:a9:28:
         12:86:67:28:84:bd:31:72:3b:23:03:93:29:00:57:a8:fd:c9:
         19:0f:e6:57:af:db:87:db:9a:46:1b:5b:70:37:5b:ed:82:52:
         46:22:73:a5:16:9a:1a:4f:27:50:91:75:db:ac:d0:f6:5f:c6:
         2a:82:b0:c9:cd:fb:d2:34:2b:33:ce:97:9d:4a:05:00:81:8c:
         71:32:eb:c1:f1:ff:4e:b9:b8:e2:91:04:0a:ab:ed:e0:ae:0c:
         2b:2f:f9:ec:a4:7b:bc:dc:4e:4b:34:98:cd:2b:34:85:1b:3e:
         d8:5c:5b:a3:e1:9c:eb:04:68:4d:d7:c3:56:f4:7d:bb:68:dc:
         75:ce:56:af:35:b7:1b:fb:a8:9b:f1:81:f8:9c:2c:6d:25:2e:
         ac:c0:d4:b0:19:38:70:dc:18:3d:f2:8c:49:e4:39:4e:1b:6c:
         e5:f4:cf:fe:ae:db:00:47:e3:5f:5b:f6:16:fe:c2:29:18:9c:
         9b:ee:c0:8f:60:12:d8:52:1e:fc:39:3d:d5:f3:4b:ae:96:6c:
         c3:84:c5:9a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERDRDkxMTAvBgNVBAUTKDNEMDY5MjlEOEQ1RTFGNjhFRTIzRUNBM0Y5NDhDRkY3
QTJFNDk1QjMwHhcNMjYwOTMwMTkzODQxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkNjU0MS01ZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Ya9jU3QqF5gJRZyiFvY8CsIDzvHX8txHFtzvZHuyQdllJJu6S77MvFhTyu2
0H7qiZyv2OZIZFZYe1uU9ER1Pnqhtk6Oba0Q6OxNJHoSaFGuyedywF0NRoPJd3eH
FK63bg3T0MsN7EsSjO/pKmFg4d88UCpj7kLQCn9YtGK1JlLpG+mmsG9HN0RsDjUq
8M3Yq6QAvqeipZcAK4wSAD3zlvsL/dfRzimJ+/u7W2xX3CsMGJR4EXn0TjNcUMwf
6rvq4nyfJvshWlaWR/PRNoLW/7e4p5rZl9V+dk6u/5Vcfib+ju6EUCJQU2h05fVv
raQXhin43hm74zvLlDjn0DsyAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMaYRXnA
Z5ugalYhCLWAUDiIYi9pMB8GA1UdIwQYMBaAFD0Gkp2NXh9o7iPso/lIz/ei5JWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF
NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9QUWFTblkxZUgyanVJLXlqLVVqUDk2TGts
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BRYVNuWTFlSDJqdUkteWotVWpQOTZMa2xiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RERDRDkvNDEwQkJDMTQ0RTZDMTFFQTg5MDQ5NzQ3QzRGOUFFMDIvNDFEN0ExRDRB
QjA1MTFGMEFENjRDODE0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ69/MA0GCSqGSIb3DQEBCwUAA4IBAQARD6ZRnREUmzLYDnDjo6Y5
ivKSKxRBPlZXecCMEsWgNUY1xuv76AIRXjPvTowrorfN58UDqSgShmcohL0xcjsj
A5MpAFeo/ckZD+ZXr9uH25pGG1twN1vtglJGInOlFpoaTydQkXXbrND2X8YqgrDJ
zfvSNCszzpedSgUAgYxxMuvB8f9OubjikQQKq+3grgwrL/nspHu83E5LNJjNKzSF
Gz7YXFuj4ZzrBGhN18NW9H27aNx1zlavNbcb+6ib8YH4nCxtJS6swNSwGThw3Bg9
8oxJ5DlOG2zl9M/+rtsAR+NfW/YW/sIpGJyb7sCPYBLYUh78OT3V80uulmzDhMWa
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:04:38 2026 by rpki-client