Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/B3695572FD9E11F087EE26735F6F56BC.roa
File:                     B3695572FD9E11F087EE26735F6F56BC.roa (raw, json)
Hash identifier:          GHquDvrVernkx6CK6w3aPHXc9JWjY2SOp7uJA02vMok=
Subject key identifier:   8D:49:2E:20:09:45:19:0E:D4:20:A2:40:B2:60:6B:6E:7E:28:FB:1A
Certificate issuer:       /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Certificate serial:       6C
Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/B3695572FD9E11F087EE26735F6F56BC.roa
Signing time:             Sat 15 Aug 2026 08:58:20 +0000
ROA not before:           Sat 15 Aug 2026 08:58:20 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     18126
IP address blocks:        103.64.132.0/23 maxlen: 23
                          103.64.134.0/24 maxlen: 24
                          103.64.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
                          rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
        Validity
            Not Before: Aug 15 08:58:20 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a802a2b-5644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:49:5c:e8:e4:74:8c:3e:da:f4:d9:d4:10:
                    fb:e4:0b:f0:e2:fc:30:e8:ac:36:15:68:28:f0:64:
                    99:03:33:d9:4a:cd:9d:6d:18:f2:93:5c:46:0e:6d:
                    75:8d:56:4e:ce:2f:bb:58:87:76:32:e3:8d:b9:73:
                    37:28:5d:3e:77:16:bb:f0:b7:fa:d8:f4:eb:4e:be:
                    e7:bd:34:45:be:9f:a8:e5:b5:ae:de:dd:91:19:2e:
                    5f:4d:bc:85:eb:15:12:1b:3e:ec:99:da:13:53:d7:
                    fe:12:62:75:0f:e0:88:e3:f6:0e:cb:14:2d:d5:05:
                    cf:e1:45:c3:88:42:fa:26:f8:ab:40:02:eb:40:61:
                    93:05:02:46:d3:94:7f:e1:e4:d2:5a:44:38:9f:af:
                    a0:32:4c:b9:c6:63:f9:1b:05:b4:3d:d2:88:6a:8b:
                    50:83:4d:dc:04:5b:72:37:48:9f:24:dd:2e:ea:71:
                    53:bc:e7:64:1d:37:37:f5:56:bb:9f:9b:b7:af:1d:
                    df:aa:3c:b9:8d:1f:c1:29:ed:82:04:f4:f2:d5:fa:
                    62:96:c6:b9:4e:c7:cf:11:e4:7e:f8:2f:d6:88:06:
                    35:07:80:bf:ee:e1:aa:c5:a8:a2:ef:1d:2f:63:63:
                    4f:65:a0:de:87:7e:3c:83:93:e1:6f:00:82:c6:14:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:49:2E:20:09:45:19:0E:D4:20:A2:40:B2:60:6B:6E:7E:28:FB:1A
            X509v3 Authority Key Identifier:
                keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/B3695572FD9E11F087EE26735F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:87:10:d2:e4:6b:c4:a5:09:73:6e:06:b0:c2:b3:42:48:df:
         46:b0:31:de:23:c7:bd:db:0c:9a:59:06:d8:34:4f:36:0b:71:
         24:c8:0f:2b:cb:6c:77:a8:0f:95:d1:e3:44:8d:cd:4f:e5:3b:
         83:1d:ac:b8:20:9e:03:91:b6:1f:a2:c9:b6:c5:32:fa:ee:c8:
         21:e4:3e:a0:85:8c:bf:9c:3e:91:c8:66:14:e3:cf:0a:18:ab:
         f7:eb:30:4f:4f:d9:70:dd:d2:47:6b:fe:4e:18:d1:6f:cc:07:
         1c:6d:30:aa:8d:85:65:58:7c:bb:cd:31:89:86:86:ef:91:bb:
         44:5a:35:2b:01:d8:d7:b8:fd:c6:9f:76:1c:90:4b:e2:b5:ba:
         71:cf:af:f7:bd:25:4c:91:a3:ff:0c:70:84:9c:99:d8:a1:ee:
         b8:99:0e:03:17:76:6d:f3:cd:62:5f:e5:dd:d4:3a:fb:88:49:
         d4:dc:80:93:58:2d:61:6c:80:02:25:fd:40:fb:49:34:af:5a:
         39:d0:40:25:35:bf:17:19:f5:1b:5a:31:44:9a:5f:35:04:97:
         03:93:61:e0:1a:f7:49:13:53:61:1c:dc:49:a1:01:bf:fb:d6:
         11:45:5a:10:56:ee:19:e2:5a:25:3a:40:c3:a3:0e:00:d6:b0:
         38:75:45:1f
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDRFMTExMC8GA1UEBRMoMzEwOEYyRDc4QTkwMEJFOTczOTM3OEY4MThBNUE5NjFD
QTUxMkM0QjAeFw0yNjA4MTUwODU4MjBaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhODAyYTJiLTU2NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3wUlc6OR0jD7a9NnUEPvkC/Di/DDorDYVaCjwZJkDM9lKzZ1tGPKTXEYObXWN
Vk7OL7tYh3Yy4425czcoXT53Frvwt/rY9OtOvue9NEW+n6jlta7e3ZEZLl9NvIXr
FRIbPuyZ2hNT1/4SYnUP4Ijj9g7LFC3VBc/hRcOIQvom+KtAAutAYZMFAkbTlH/h
5NJaRDifr6AyTLnGY/kbBbQ90ohqi1CDTdwEW3I3SJ8k3S7qcVO852QdNzf1Vruf
m7evHd+qPLmNH8Ep7YIE9PLV+mKWxrlOx88R5H74L9aIBjUHgL/u4arFqKLvHS9j
Y09loN6HfjyDk+FvAILGFDoNAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUjUkuIAlF
GQ7UIKJAsmBrbn4o+xowHwYDVR0jBBgwFoAUMQjy14qQC+lzk3j4GKWpYcpRLEsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNEUxLzFDNDhEOEU4RkQ5
RTExRjBCRkM5NjI3MTVGNkY1NkJDL01RankxNHFRQy1semszajRHS1dwWWNwUkxF
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTVFqeTE0cVFDLWx6azNqNEdLV3BZY3BSTEVzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDRFMS8xQzQ4RDhFOEZEOUUxMUYwQkZDOTYyNzE1RjZGNTZCQy9CMzY5NTU3MkZE
OUUxMUYwODdFRTI2NzM1RjZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnQIQwDQYJKoZIhvcNAQELBQADggEBADeHENLka8SlCXNuBrDCs0JI
30awMd4jx73bDJpZBtg0TzYLcSTIDyvLbHeoD5XR40SNzU/lO4MdrLggngORth+i
ybbFMvruyCHkPqCFjL+cPpHIZhTjzwoYq/frME9P2XDd0kdr/k4Y0W/MBxxtMKqN
hWVYfLvNMYmGhu+Ru0RaNSsB2Ne4/cafdhyQS+K1unHPr/e9JUyRo/8McIScmdih
7riZDgMXdm3zzWJf5d3UOvuISdTcgJNYLWFsgAIl/UD7STSvWjnQQCU1vxcZ9Rta
MUSaXzUElwOTYeAa90kTU2Ec3EmhAb/71hFFWhBW7hniWiU6QMOjDgDWsDh1RR8=
-----END CERTIFICATE-----
Generated at Sat Aug 22 04:13:24 2026 by rpki-client