Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa
File:                     BA69B6FABC2C11EA96657B4BC4F9AE02.roa (raw, json)
Hash identifier:          zsuR744HDeiJUJylgCdTayAjz/Y4ffc8R/05GsGBd50=
Subject key identifier:   C2:0F:29:0F:7E:EA:F5:82:04:03:6A:4E:6A:62:07:E4:74:4E:8B:9B
Certificate issuer:       /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial:       09B5
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa
Signing time:             Wed 02 Sep 2026 20:40:36 +0000
ROA not before:           Wed 02 Sep 2026 20:40:36 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     9311
IP address blocks:        103.240.81.0/24 maxlen: 24
                          103.240.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
                          rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485 (0x9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
        Validity
            Not Before: Sep  2 20:40:36 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9889c4-eef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:b9:fd:0a:d3:96:77:ac:72:be:0e:26:df:
                    4c:ac:83:f5:e2:e0:64:43:8f:ed:55:6b:4b:6f:fe:
                    ac:0a:0d:1b:6f:30:d6:ad:47:9b:1b:c1:92:6d:41:
                    eb:90:d0:58:d7:b4:b5:a0:2f:dc:e7:b0:75:80:a4:
                    92:79:33:d9:73:a9:02:60:90:87:49:f2:ae:9e:22:
                    38:3e:b7:58:ac:45:86:16:d8:f3:a1:ca:3e:26:0f:
                    2d:8a:0d:51:f4:f1:de:14:4c:4a:17:49:34:d7:a2:
                    16:3d:db:f0:7e:2a:bc:03:16:76:14:89:92:b6:20:
                    c8:04:a8:f1:be:cd:81:25:88:d0:e0:45:11:95:4a:
                    34:d5:80:cd:8b:3a:e6:85:2d:b0:f2:0f:7b:50:bc:
                    b9:7a:b7:b3:41:b1:cd:29:fd:a7:4e:ec:a7:84:01:
                    d5:bf:e7:52:87:aa:0c:59:f1:97:e2:58:7c:d3:50:
                    dc:25:cd:de:d6:0a:a9:b7:1d:65:b2:c0:d9:e1:e6:
                    63:cf:a4:17:7d:1d:ba:38:24:cd:d2:03:ab:8d:b7:
                    44:84:48:c5:58:89:a7:53:42:ed:b8:bd:c2:39:c9:
                    45:7c:5e:94:df:42:69:67:e4:05:ca:fe:68:48:2f:
                    41:9e:5a:e1:81:6a:35:7a:93:a0:f2:8b:89:d5:38:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0F:29:0F:7E:EA:F5:82:04:03:6A:4E:6A:62:07:E4:74:4E:8B:9B
            X509v3 Authority Key Identifier:
                keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.81.0/24
                  103.240.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:25:c6:ca:ed:f1:ce:bc:50:36:db:52:ee:97:c4:f7:28:95:
         3f:5a:67:26:d2:c7:db:18:e1:68:ad:96:89:f7:46:5c:c9:ab:
         81:54:2a:bf:31:78:a9:2d:77:44:86:08:4e:90:b0:e6:74:b5:
         74:b0:b9:42:a8:67:b4:87:bb:bf:bb:e6:45:c3:f6:ad:0d:36:
         5f:7d:12:65:80:33:57:b2:4f:37:6f:a6:b2:a3:05:35:5e:31:
         df:a3:e3:9d:a8:7e:ec:73:4b:a4:a4:10:1c:d7:b5:85:56:62:
         aa:6c:ad:b9:de:79:cb:ca:86:66:84:53:7f:bd:50:f2:5c:f0:
         ae:e5:5a:99:c5:98:cb:d0:f1:f4:25:82:ad:a4:93:b2:2f:a5:
         eb:86:d5:ff:f5:c3:90:f5:d3:09:16:69:c1:14:ce:6c:df:a5:
         c2:22:56:84:d1:ca:43:4c:80:d1:d8:98:03:10:3d:92:a5:ea:
         df:82:f8:36:46:13:b1:15:80:68:87:1f:1b:aa:63:8f:ac:a5:
         ff:ee:e6:17:5d:4c:ca:37:e9:aa:80:fe:6b:7c:db:94:9b:b8:
         7e:6b:49:c4:69:ec:b9:db:1b:e8:38:d2:d4:fa:00:69:6b:1e:
         b5:0d:1c:d5:17:84:c8:6a:fc:0a:8e:ae:88:33:8c:c5:2c:36:
         38:37:b0:ba
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF
QTA2Q0NBQzcwHhcNMjYwOTAyMjA0MDM2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4ODljNC1lZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArae5/QrTlnescr4OJt9MrIP14uBkQ4/tVWtLb/6sCg0bbzDWrUebG8GSbUHr
kNBY17S1oC/c57B1gKSSeTPZc6kCYJCHSfKuniI4PrdYrEWGFtjzoco+Jg8tig1R
9PHeFExKF0k016IWPdvwfiq8AxZ2FImStiDIBKjxvs2BJYjQ4EURlUo01YDNizrm
hS2w8g97ULy5erezQbHNKf2nTuynhAHVv+dSh6oMWfGX4lh801DcJc3e1gqptx1l
ssDZ4eZjz6QXfR26OCTN0gOrjbdEhEjFWImnU0LtuL3COclFfF6U30JpZ+QFyv5o
SC9BnlrhgWo1epOg8ouJ1TjNQQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMIPKQ9+
6vWCBANqTmpiB+R0ToubMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD
MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTExQjQvQjE5OTNDNDBCQzJCMTFFQTgyQjY4NzRBQzRGOUFFMDIvQkE2OUI2RkFC
QzJDMTFFQTk2NjU3QjRCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ/BRAwQAZ/BTMA0GCSqGSIb3DQEBCwUAA4IBAQA+JcbK7fHOvFA2
21Lul8T3KJU/Wmcm0sfbGOForZaJ90ZcyauBVCq/MXipLXdEhghOkLDmdLV0sLlC
qGe0h7u/u+ZFw/atDTZffRJlgDNXsk83b6ayowU1XjHfo+OdqH7sc0ukpBAc17WF
VmKqbK253nnLyoZmhFN/vVDyXPCu5VqZxZjL0PH0JYKtpJOyL6XrhtX/9cOQ9dMJ
FmnBFM5s36XCIlaE0cpDTIDR2JgDED2Sperfgvg2RhOxFYBohx8bqmOPrKX/7uYX
XUzKN+mqgP5rfNuUm7h+a0nEaey52xvoONLU+gBpax61DRzVF4TIavwKjq6IM4zF
LDY4N7C6
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:41:59 2026 by rpki-client