Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa
File:                     1DE1E418EDE211EB8CEA3415C4F9AE02.roa (raw, json)
Hash identifier:          aU5xrCVr0rx2dJrESHwVd+dJg3AOWpB3NnDDFJyaC0g=
Subject key identifier:   74:A5:FC:73:0A:B4:41:A8:BD:CE:21:79:16:16:48:34:06:92:D7:C6
Certificate issuer:       /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535
Certificate serial:       0660
Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 23:43:46 +0000
ROA not before:           Sun 30 Aug 2026 23:43:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     142541
IP address blocks:        103.87.88.0/24 maxlen: 24
                          103.168.193.0/24 maxlen: 24
                          103.254.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 22:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535
        Validity
            Not Before: Aug 30 23:43:46 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a94c032-6523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d5:b4:a3:19:54:f7:bd:bc:ce:49:3b:40:46:
                    62:7f:b3:f6:ac:24:6e:2d:bc:48:bf:d3:6a:69:e9:
                    8e:ac:e7:4e:41:84:88:db:40:49:80:de:09:66:3d:
                    c6:11:04:72:89:9e:ed:84:3a:2c:9c:9c:97:b2:78:
                    63:ff:45:06:81:d1:55:e1:ef:89:c2:57:20:55:7d:
                    51:11:a0:f5:21:ee:8e:c9:0b:3c:1f:b4:a0:57:d8:
                    90:49:95:d3:b8:e7:02:c4:f2:26:5f:f0:00:27:79:
                    70:a2:d1:9e:9b:a1:dc:68:28:53:4a:2c:4b:57:a4:
                    66:cb:04:46:81:da:de:48:8f:2a:20:c4:08:db:fd:
                    7c:c2:e1:0f:3a:fc:3c:a0:d2:d6:c2:0c:44:9d:11:
                    3d:3b:4d:dd:5c:f1:16:05:c1:9d:a9:99:e3:1d:7d:
                    12:99:86:2b:6f:50:22:34:d7:73:10:03:6d:79:e8:
                    66:af:7e:3b:ce:2a:af:7a:24:99:f8:a3:cf:8f:56:
                    25:0c:f3:b0:d6:15:d5:0e:ee:73:af:90:16:67:af:
                    b2:a1:1d:0d:fc:59:b9:65:c4:fd:01:d4:3d:84:12:
                    2e:00:62:cc:38:41:db:13:e8:5c:8b:f5:42:9e:2f:
                    99:77:18:a4:7f:5c:fc:78:6a:ab:89:28:9e:57:ee:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A5:FC:73:0A:B4:41:A8:BD:CE:21:79:16:16:48:34:06:92:D7:C6
            X509v3 Authority Key Identifier:
                keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.88.0/24
                  103.168.193.0/24
                  103.254.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:8d:da:8a:5f:09:02:92:aa:43:84:14:fc:16:52:a5:ea:cb:
         32:01:fb:49:0a:85:ce:a7:8d:f4:a9:20:d2:77:4c:c4:d4:45:
         c0:f8:4c:04:82:ae:3a:d0:85:6c:04:05:c8:1d:8a:8b:82:61:
         c0:a9:56:a1:6c:0c:60:35:74:9c:e3:01:f0:a6:e6:81:e2:48:
         84:3b:f9:6d:1a:24:f0:fb:a5:f4:fd:7b:bd:be:5f:9b:7e:4f:
         e8:b5:91:2c:d3:b3:f2:2d:04:4f:9e:16:04:0f:31:d9:6f:d2:
         2a:6f:d7:9d:f2:e1:25:72:3d:94:0d:9f:e9:26:95:9f:0a:18:
         1b:aa:3f:21:c8:b4:25:1e:7f:f8:9d:91:c1:b7:27:39:61:0a:
         e3:a5:55:80:c1:33:8d:7b:40:21:6a:e9:f7:78:d3:da:8e:9a:
         1a:97:31:91:d1:02:18:77:17:53:97:bd:b1:99:b6:7f:f7:a4:
         ea:7c:2e:e4:8f:ea:45:c6:d7:9a:20:1d:aa:8b:07:fe:d0:f8:
         c3:d4:2c:a6:e9:90:ee:61:b6:e9:f9:c7:65:30:4f:35:3c:7a:
         47:65:15:1a:8a:6c:7d:7d:20:33:a5:c9:7e:83:29:d7:97:d9:
         ce:e0:e0:3e:b6:ef:71:bd:ec:d2:4c:e4:6d:93:dc:b3:ef:52:
         0e:80:97:e9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw
NzFEMjQ1MzUwHhcNMjYwODMwMjM0MzQ2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0YzAzMi02NTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA49W0oxlU9728zkk7QEZif7P2rCRuLbxIv9NqaemOrOdOQYSI20BJgN4JZj3G
EQRyiZ7thDosnJyXsnhj/0UGgdFV4e+JwlcgVX1REaD1Ie6OyQs8H7SgV9iQSZXT
uOcCxPImX/AAJ3lwotGem6HcaChTSixLV6RmywRGgdreSI8qIMQI2/18wuEPOvw8
oNLWwgxEnRE9O03dXPEWBcGdqZnjHX0SmYYrb1AiNNdzEANteehmr347ziqveiSZ
+KPPj1YlDPOw1hXVDu5zr5AWZ6+yoR0N/Fm5ZcT9AdQ9hBIuAGLMOEHbE+hci/VC
ni+Zdxikf1z8eGqriSieV+6KXQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHSl/HMK
tEGovc4heRYWSDQGktfGMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1
NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTFDMEIvQjczQTE3OUNFNTVBMTFFQkI5QkY4OTQyQzRGOUFFMDIvMURFMUU0MThF
REUyMTFFQjhDRUEzNDE1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZ1dYAwQAZ6jBAwQAZ/6mMA0GCSqGSIb3DQEBCwUAA4IBAQBNjdqK
XwkCkqpDhBT8FlKl6ssyAftJCoXOp430qSDSd0zE1EXA+EwEgq460IVsBAXIHYqL
gmHAqVahbAxgNXSc4wHwpuaB4kiEO/ltGiTw+6X0/Xu9vl+bfk/otZEs07PyLQRP
nhYEDzHZb9Iqb9ed8uElcj2UDZ/pJpWfChgbqj8hyLQlHn/4nZHBtyc5YQrjpVWA
wTONe0Ahaun3eNPajpoalzGR0QIYdxdTl72xmbZ/96TqfC7kj+pFxteaIB2qiwf+
0PjD1Cym6ZDuYbbp+cdlME81PHpHZRUaimx9fSAzpcl+gynXl9nO4OA+tu9xvezS
TORtk9yz71IOgJfp
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:40:39 2026 by rpki-client