Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/F87DB8B440C811EEB681DC40C4F9AE02.roa
File:                     F87DB8B440C811EEB681DC40C4F9AE02.roa (raw, json)
Hash identifier:          ip48wthcZQj2yzO90ZC3ETY+zndLk/B6YcMLzIWEh4c=
Subject key identifier:   6C:BB:27:2E:37:A7:21:CD:13:0E:6F:0E:2B:D7:35:C7:08:0B:33:76
Certificate issuer:       /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial:       358C
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/F87DB8B440C811EEB681DC40C4F9AE02.roa
Signing time:             Tue 04 Aug 2026 16:17:09 +0000
ROA not before:           Tue 04 Aug 2026 16:17:09 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     396904
IP address blocks:        103.14.96.0/24 maxlen: 24
                          103.14.97.0/24 maxlen: 24
                          103.14.98.0/24 maxlen: 24
                          103.14.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
                          rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13708 (0x358c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
        Validity
            Not Before: Aug  4 16:17:09 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a721085-2432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0b:2c:c4:d3:1a:50:f3:70:23:85:a5:cd:26:
                    a9:ce:75:40:0f:ab:bd:ce:63:30:ee:2d:2b:d1:e8:
                    da:e5:5d:f9:c1:ab:cf:ec:3d:d4:b5:4a:80:a0:1a:
                    2d:6b:57:5e:46:95:fc:1c:7c:7e:05:ef:74:12:ce:
                    ab:6f:7b:76:be:95:3c:85:43:dc:96:fd:e4:0a:2a:
                    13:52:e6:a4:da:f9:88:0d:2a:de:ea:47:da:c6:4e:
                    b7:e7:7e:ce:ba:99:90:c4:6b:ed:a7:ad:ac:56:22:
                    d5:3c:4e:84:88:12:f8:c4:46:f4:37:ec:3b:23:bf:
                    18:5c:76:ab:ad:4c:97:5d:b6:c1:6b:37:fa:33:c5:
                    d2:7c:21:a1:4e:5a:85:ad:6e:b6:26:3b:a5:a7:dc:
                    5b:ff:c7:aa:78:e6:9a:be:06:8b:66:6f:a5:d4:c4:
                    ff:9c:4a:04:50:aa:96:40:ea:9d:8a:9b:3a:1c:15:
                    1a:66:3b:2f:da:99:c9:3e:d0:26:50:4d:f0:a1:e0:
                    04:6e:2b:55:40:62:7a:0e:ab:26:e4:2c:6a:4e:26:
                    11:ca:94:25:f7:22:be:fd:3d:7d:1e:e2:79:30:0a:
                    4f:b7:24:31:18:51:2d:0c:0b:ed:31:3a:b8:96:c9:
                    bd:92:c3:4e:49:5e:74:ae:c2:1f:40:2d:ac:ce:0e:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BB:27:2E:37:A7:21:CD:13:0E:6F:0E:2B:D7:35:C7:08:0B:33:76
            X509v3 Authority Key Identifier:
                keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/F87DB8B440C811EEB681DC40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:23:9c:3e:dd:c5:8b:8e:b5:e3:bf:a0:ad:5f:c1:24:d2:0e:
         9f:87:c6:bb:57:aa:de:23:79:f9:00:32:29:0a:26:ee:e8:02:
         d7:fd:5f:ec:27:56:36:f8:99:91:ea:4d:71:0d:da:e7:fc:11:
         63:f4:2c:de:73:2c:d9:5e:b9:c1:7c:b9:03:2d:0c:87:9b:00:
         2d:d4:44:10:f9:21:de:6b:e8:77:2a:57:2d:fa:e6:f1:e8:b6:
         df:a1:c4:7f:8f:b9:df:5b:30:0e:16:5d:46:83:e0:a0:58:ff:
         a5:51:f4:df:de:ce:98:c9:d4:d1:d5:09:31:98:67:f4:d5:5b:
         51:23:dc:a9:8c:1f:bb:f6:3b:96:7b:a7:19:20:ba:af:84:a9:
         a7:97:9b:a9:e7:bf:b0:ac:e9:a3:b2:6c:a7:8f:31:3a:fb:c5:
         fd:25:5f:27:f2:bc:c3:b0:f1:96:21:cf:0c:3a:73:3e:7c:37:
         3a:5d:9a:83:26:f1:d3:32:4a:69:fa:3f:8e:6f:e3:95:a6:7b:
         df:9a:14:ec:82:1f:80:82:8d:66:85:f2:5f:4c:85:3a:d9:d2:
         57:d6:e3:80:40:67:77:f7:ab:be:1b:c4:d9:f1:3a:9e:ab:70:
         61:2b:b4:7f:f9:8a:d8:ff:73:78:08:c4:42:1b:90:81:79:c3:
         c6:09:e1:1b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND
QUU4QkY5MEQwHhcNMjYwODA0MTYxNzA5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcyMTA4NS0yNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4QssxNMaUPNwI4WlzSapznVAD6u9zmMw7i0r0eja5V35wavP7D3UtUqAoBot
a1deRpX8HHx+Be90Es6rb3t2vpU8hUPclv3kCioTUuak2vmIDSre6kfaxk63537O
upmQxGvtp62sViLVPE6EiBL4xEb0N+w7I78YXHarrUyXXbbBazf6M8XSfCGhTlqF
rW62Jjulp9xb/8eqeOaavgaLZm+l1MT/nEoEUKqWQOqdips6HBUaZjsv2pnJPtAm
UE3woeAEbitVQGJ6Dqsm5CxqTiYRypQl9yK+/T19HuJ5MApPtyQxGFEtDAvtMTq4
lsm9ksNOSV50rsIfQC2szg7o+wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGy7Jy43
pyHNEw5vDivXNccICzN2MB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE
QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThCQUYvMzJEOEUyMkUxREFCMTFFMkE5N0QyM0E5MDhCMDJDRDIvRjg3REI4QjQ0
MEM4MTFFRUI2ODFEQzQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZw5gMA0GCSqGSIb3DQEBCwUAA4IBAQAtI5w+3cWLjrXjv6CtX8Ek
0g6fh8a7V6reI3n5ADIpCibu6ALX/V/sJ1Y2+JmR6k1xDdrn/BFj9CzecyzZXrnB
fLkDLQyHmwAt1EQQ+SHea+h3Klct+ubx6LbfocR/j7nfWzAOFl1Gg+CgWP+lUfTf
3s6YydTR1QkxmGf01VtRI9ypjB+79juWe6cZILqvhKmnl5up57+wrOmjsmynjzE6
+8X9JV8n8rzDsPGWIc8MOnM+fDc6XZqDJvHTMkpp+j+Ob+OVpnvfmhTsgh+Ago1m
hfJfTIU62dJX1uOAQGd396u+G8TZ8Tqeq3BhK7R/+YrY/3N4CMRCG5CBecPGCeEb
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:38:55 2026 by rpki-client