Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/10123D12E34E11ECB9CB283EC4F9AE02.roa
File:                     10123D12E34E11ECB9CB283EC4F9AE02.roa (raw, json)
Hash identifier:          DQIURahNU+uZjBuu1atNMOrlVGfw2TaQnUdfAtEIv7Y=
Subject key identifier:   2E:F3:6E:E0:BE:32:DF:EE:24:43:D2:8C:B4:89:80:19:52:CD:15:54
Certificate issuer:       /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
Certificate serial:       070E
Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/10123D12E34E11ECB9CB283EC4F9AE02.roa
Signing time:             Sun 04 Oct 2026 22:43:03 +0000
ROA not before:           Sun 04 Oct 2026 22:43:02 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     9009
IP address blocks:        103.73.64.0/23 maxlen: 24
                          103.73.66.0/23 maxlen: 24
                          216.250.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1806 (0x70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
        Validity
            Not Before: Oct  4 22:43:02 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac2d676-fd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:74:b7:43:5a:38:9e:c2:79:51:23:fd:e7:ab:
                    90:5b:58:70:57:7c:87:3e:b4:aa:92:e6:6a:a9:fa:
                    f1:06:34:96:48:fb:3a:e9:93:2a:1d:4d:bf:74:80:
                    83:c0:9a:33:a7:4e:d9:a5:42:dc:68:48:b7:1a:03:
                    e6:da:c0:a4:cb:29:72:d3:38:0c:17:42:98:64:7a:
                    31:89:8d:7b:42:44:f9:ac:0b:03:12:18:f8:c6:5d:
                    c6:bb:47:be:46:64:b3:a9:18:cc:32:8b:d0:95:11:
                    8e:ee:b6:32:1f:df:79:c0:be:b2:34:7a:42:ab:df:
                    8f:bd:37:45:ce:98:68:87:0f:0c:a5:d0:f7:12:a3:
                    f3:fb:6d:8c:e5:d4:15:c6:06:e2:b9:f7:7e:a5:0c:
                    d6:ec:be:aa:0e:9a:25:06:13:bf:00:2a:74:53:e0:
                    e6:43:99:36:35:98:be:17:36:8d:45:55:1b:1e:7e:
                    50:68:59:0d:11:74:b0:19:7b:b4:34:6c:0c:9b:b1:
                    02:f9:33:27:6c:82:a4:96:46:a0:42:d8:2c:2a:7a:
                    d1:fc:1a:94:ce:42:0c:1f:7f:27:d5:1f:04:1a:43:
                    63:ca:09:aa:ee:6c:61:7b:fb:8e:50:28:a7:85:01:
                    59:ab:d6:18:03:b7:26:b8:5a:c1:6b:6d:66:0d:bb:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F3:6E:E0:BE:32:DF:EE:24:43:D2:8C:B4:89:80:19:52:CD:15:54
            X509v3 Authority Key Identifier:
                keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/10123D12E34E11ECB9CB283EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.64.0/22
                  216.250.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:bd:c5:d7:09:4b:8e:7e:0e:79:b1:9d:b5:7f:5e:e7:f2:35:
         c2:fb:08:3b:74:20:1e:4f:73:83:fd:4a:99:e7:b6:63:80:8e:
         6f:c1:61:b2:a0:4d:2f:5b:65:ca:37:4f:03:d7:bc:0c:fc:31:
         1f:f2:ae:96:a5:65:6e:82:2c:c5:c7:1a:ca:c0:91:23:41:1f:
         4a:68:b8:86:79:3c:07:dc:4b:c4:3b:ad:f0:b8:db:47:03:ff:
         94:ec:cc:d5:2a:dc:c0:96:ea:51:68:2a:6c:4c:54:78:b7:2c:
         f5:73:f9:0c:35:00:29:a4:84:b8:1a:c6:c1:5d:4f:bb:93:57:
         de:12:15:ab:41:e5:3e:08:63:e9:ba:6d:25:05:23:6a:7e:69:
         1f:0e:1d:b8:76:56:11:c7:87:fa:12:2e:b9:67:60:62:11:68:
         83:ea:12:0f:2d:30:17:a9:58:79:c3:6a:db:96:d3:b7:39:1a:
         c8:a5:0f:e5:4a:75:70:b1:95:17:d4:3e:4a:d3:70:89:4f:bd:
         0c:1e:d6:fd:cf:59:7e:85:28:5e:ae:5b:37:66:79:97:53:ca:
         92:e4:73:50:03:f9:ce:11:21:a5:cf:78:df:1a:b2:24:5a:12:
         ee:76:f0:07:f4:f8:7d:cb:98:a5:7f:76:b3:49:67:2b:b6:da:
         ce:01:33:a6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExNzYxMTAvBgNVBAUTKDc2NjFGNTk3RUE2OEVGRjRDOTI5NzM2MzlCQjY3NUQ3
RjAzOTA5NzEwHhcNMjYxMDA0MjI0MzAyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMyZDY3Ni1mZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6nS3Q1o4nsJ5USP956uQW1hwV3yHPrSqkuZqqfrxBjSWSPs66ZMqHU2/dICD
wJozp07ZpULcaEi3GgPm2sCkyyly0zgMF0KYZHoxiY17QkT5rAsDEhj4xl3Gu0e+
RmSzqRjMMovQlRGO7rYyH995wL6yNHpCq9+PvTdFzphohw8MpdD3EqPz+22M5dQV
xgbiufd+pQzW7L6qDpolBhO/ACp0U+DmQ5k2NZi+FzaNRVUbHn5QaFkNEXSwGXu0
NGwMm7EC+TMnbIKklkagQtgsKnrR/BqUzkIMH38n1R8EGkNjygmq7mxhe/uOUCin
hQFZq9YYA7cmuFrBa21mDbuaawIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFC7zbuC+
Mt/uJEPSjLSJgBlSzRVUMB8GA1UdIwQYMBaAFHZh9ZfqaO/0ySlzY5u2ddfwOQlx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE3Ni9BREQzQUVDRUIy
OEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdfVEpLWE5qbTdaMTFfQTVD
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RtSDFsLXBvN19USktYTmptN1oxMV9BNUNYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUExNzYvQUREM0FFQ0VCMjhFMTFFQjk0RDIxODQ3QzRGOUFFMDIvMTAxMjNEMTJF
MzRFMTFFQ0I5Q0IyODNFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ0lAAwQB2PpgMA0GCSqGSIb3DQEBCwUAA4IBAQBOvcXXCUuOfg55
sZ21f17n8jXC+wg7dCAeT3OD/UqZ57ZjgI5vwWGyoE0vW2XKN08D17wM/DEf8q6W
pWVugizFxxrKwJEjQR9KaLiGeTwH3EvEO63wuNtHA/+U7MzVKtzAlupRaCpsTFR4
tyz1c/kMNQAppIS4GsbBXU+7k1feEhWrQeU+CGPpum0lBSNqfmkfDh24dlYRx4f6
Ei65Z2BiEWiD6hIPLTAXqVh5w2rbltO3ORrIpQ/lSnVwsZUX1D5K03CJT70MHtb9
z1l+hSherls3ZnmXU8qS5HNQA/nOESGlz3jfGrIkWhLudvAH9Ph9y5ilf3azSWcr
ttrOATOm
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:53:29 2026 by rpki-client