Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/8001633A4A1711F1B9EC201DC9833773.roa
File:                     8001633A4A1711F1B9EC201DC9833773.roa (raw, json)
Hash identifier:          lhGjTh8GIM3KbvxNCTcxjCnPO4S+tAUX/Zv2Xlq7F68=
Subject key identifier:   B3:40:B6:69:F7:68:01:B3:D3:B2:4F:B5:B1:96:DF:3D:10:D3:52:D1
Certificate issuer:       /CN=A91E6348/serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F
Certificate serial:       41
Authority key identifier: 3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/8001633A4A1711F1B9EC201DC9833773.roa
Signing time:             Sat 05 Sep 2026 08:58:36 +0000
ROA not before:           Sat 05 Sep 2026 08:58:36 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     134835
IP address blocks:        103.27.184.0/24 maxlen: 24
                          103.27.185.0/24 maxlen: 24
                          103.27.186.0/24 maxlen: 24
                          103.27.187.0/24 maxlen: 24
                          103.72.148.0/24 maxlen: 24
                          103.72.149.0/24 maxlen: 24
                          103.72.150.0/24 maxlen: 24
                          103.72.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl
                          rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 08:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6348, serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F
        Validity
            Not Before: Sep  5 08:58:36 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9bd9bc-d237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:e1:fb:70:f5:0a:ad:ed:85:4f:0c:48:7c:
                    db:1c:03:51:10:6d:40:b3:18:c3:24:f8:9f:ec:6d:
                    15:ca:af:86:c4:1b:b8:b7:fc:b4:5c:25:05:ab:90:
                    a8:0d:2c:1b:60:f2:ee:e9:99:9d:ac:b2:61:9d:56:
                    bf:d7:8e:4c:e1:05:e6:8d:9b:cf:27:fe:5a:ab:96:
                    39:27:9d:99:26:37:a6:e7:8d:73:a1:67:a0:fd:65:
                    14:cb:50:37:73:e6:bb:81:f0:c0:e5:4b:f7:a9:b4:
                    5b:54:d0:a8:1f:1d:16:09:13:72:ac:cf:f4:9b:91:
                    69:e3:29:09:c0:b8:40:8b:de:4e:1c:d5:68:b2:e5:
                    f8:f5:af:99:07:84:76:ad:bd:b5:fa:fe:36:30:5c:
                    54:3e:0d:d8:97:73:38:89:f3:0d:f2:f5:94:65:52:
                    75:1e:8f:23:eb:02:d2:12:e0:55:4a:1e:2c:22:ee:
                    3a:c5:ce:50:a6:25:66:9e:7a:82:b6:0a:ce:8b:c1:
                    d4:30:5c:04:4b:2c:e0:0d:ad:31:4f:bb:2b:2f:3b:
                    4a:4d:6c:24:04:d8:41:c6:86:14:7e:1f:51:b2:ed:
                    2e:33:d2:79:97:4e:1c:ff:70:9b:c4:8d:12:c7:83:
                    6a:5d:b3:7e:30:20:eb:b7:b6:72:25:45:14:f2:1f:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:40:B6:69:F7:68:01:B3:D3:B2:4F:B5:B1:96:DF:3D:10:D3:52:D1
            X509v3 Authority Key Identifier:
                keyid:3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/8001633A4A1711F1B9EC201DC9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.184.0/22
                  103.72.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:4d:55:52:a9:2d:15:00:83:6e:27:e8:7b:7a:3a:7a:c8:7c:
         3d:86:ea:ac:64:df:c7:b5:29:ac:03:aa:58:a5:6e:04:3e:15:
         eb:c8:15:9f:6c:89:16:d1:e4:9a:b9:15:4b:05:f2:62:d0:e0:
         8b:0b:95:fd:ea:7b:81:4f:fa:22:df:c1:38:50:62:6e:d6:10:
         10:f4:14:a5:0a:04:64:0f:b0:15:09:12:fd:4f:51:94:f6:a1:
         6c:5e:42:79:30:45:4c:09:d0:5c:69:86:f3:e0:7c:a5:89:83:
         c2:0a:63:36:6c:99:bf:35:9b:64:e0:01:2a:41:52:0d:c0:d0:
         a2:b9:33:1c:7c:c1:eb:30:1a:59:28:9f:56:44:c8:59:67:9f:
         61:14:48:9c:3d:41:5c:c7:bb:57:d4:73:26:5e:f2:4f:dd:f6:
         c4:9b:be:7e:2c:e2:4e:57:b4:9f:26:ea:8a:8f:50:a9:db:35:
         fe:c3:a1:77:b7:c9:d9:e8:1e:7a:dd:d1:d8:73:c1:68:e5:66:
         a1:ed:90:16:fc:69:bb:5f:92:11:0f:3f:64:a8:15:49:a1:ae:
         99:ef:71:8e:24:e7:7f:d5:c0:c6:f2:82:7d:38:0a:9e:83:be:
         94:f8:83:37:06:39:bf:de:8a:dd:9e:d3:7c:05:5e:6b:05:29:
         5b:41:1a:78
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NjM0ODExMC8GA1UEBRMoM0EzQ0I5MkY5OTk2REMxMkZENjkyMUEwRDZGOTY2MjMx
Qzk4RTY4RjAeFw0yNjA5MDUwODU4MzZaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOWJkOWJjLWQyMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSAeH7cPUKre2FTwxIfNscA1EQbUCzGMMk+J/sbRXKr4bEG7i3/LRcJQWrkKgN
LBtg8u7pmZ2ssmGdVr/XjkzhBeaNm88n/lqrljknnZkmN6bnjXOhZ6D9ZRTLUDdz
5ruB8MDlS/eptFtU0KgfHRYJE3Ksz/SbkWnjKQnAuECL3k4c1Wiy5fj1r5kHhHat
vbX6/jYwXFQ+DdiXcziJ8w3y9ZRlUnUejyPrAtIS4FVKHiwi7jrFzlCmJWaeeoK2
Cs6LwdQwXARLLOANrTFPuysvO0pNbCQE2EHGhhR+H1Gy7S4z0nmXThz/cJvEjRLH
g2pds34wIOu3tnIlRRTyHzcLAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUs0C2afdo
AbPTsk+1sZbfPRDTUtEwHwYDVR0jBBgwFoAUOjy5L5mW3BL9aSGg1vlmIxyY5o8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzQ4L0VDNUQxQjdFNEEx
NjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JMOWFTR2cxdmxtSXh5WTVv
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT2p5NUw1bVczQkw5YVNHZzF2bG1JeHlZNW84LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjM0OC9FQzVEMUI3RTRBMTYxMUYxOTkzQjkzRjdDODgzMzc3My84MDAxNjMzQTRB
MTcxMUYxQjlFQzIwMURDOTgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAJnG7gDBAJnSJQwDQYJKoZIhvcNAQELBQADggEBAFBNVVKpLRUAg24n
6Ht6OnrIfD2G6qxk38e1KawDqlilbgQ+FevIFZ9siRbR5Jq5FUsF8mLQ4IsLlf3q
e4FP+iLfwThQYm7WEBD0FKUKBGQPsBUJEv1PUZT2oWxeQnkwRUwJ0FxphvPgfKWJ
g8IKYzZsmb81m2TgASpBUg3A0KK5Mxx8weswGlkon1ZEyFlnn2EUSJw9QVzHu1fU
cyZe8k/d9sSbvn4s4k5XtJ8m6oqPUKnbNf7DoXe3ydnoHnrd0dhzwWjlZqHtkBb8
abtfkhEPP2SoFUmhrpnvcY4k53/VwMbygn04Cp6DvpT4gzcGOb/eit2e03wFXmsF
KVtBGng=
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:07:30 2026 by rpki-client