Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/7DAEB1F0A5CF11F19A324F273411F970.roa
File:                     7DAEB1F0A5CF11F19A324F273411F970.roa (raw, json)
Hash identifier:          5YqLlzK1YHp4em5Ro0CYRt/wM0OwKS9iYZOWAN6s4xY=
Subject key identifier:   52:B4:18:6B:4B:0B:49:0B:63:35:7D:BD:54:E4:79:5A:6B:E9:BA:2D
Certificate issuer:       /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial:       0C3E
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/7DAEB1F0A5CF11F19A324F273411F970.roa
Signing time:             Tue 01 Sep 2026 06:36:41 +0000
ROA not before:           Tue 01 Sep 2026 06:36:41 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     6939
IP address blocks:        103.231.38.0/24 maxlen: 24
                          103.231.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 18:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3134 (0xc3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
        Validity
            Not Before: Sep  1 06:36:41 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a967279-c6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:04:6a:f9:67:64:c8:fa:7f:8b:70:16:3a:
                    ef:a9:5d:9a:de:a8:71:00:db:e8:1d:98:a9:ff:a2:
                    3e:81:67:64:33:0c:31:54:a9:d4:e6:ad:3e:29:40:
                    83:e5:36:ff:a5:c6:2d:db:cd:de:50:52:4d:50:41:
                    17:c2:4c:cb:86:f1:6a:15:db:7a:35:5d:cc:b1:b3:
                    ab:31:d5:ac:17:ac:01:2b:9f:d5:10:01:d4:98:ab:
                    32:e7:5b:8d:46:ff:f8:4d:74:86:1c:55:0f:f8:17:
                    a0:57:19:b0:e0:5d:a1:7b:00:17:fa:77:7d:5a:b5:
                    4f:5a:dc:6a:20:1a:5e:57:9e:00:50:84:3f:43:ec:
                    20:87:ae:4c:18:d8:71:93:58:41:59:4c:d3:c2:e5:
                    2e:98:37:e9:96:c3:da:9d:7c:3d:0c:ca:1c:92:d2:
                    52:6d:c0:b3:dd:f2:eb:04:6d:f6:bc:a1:61:2a:41:
                    2f:1b:ca:48:b0:72:0d:40:01:06:3f:2e:1a:9e:f7:
                    b8:4d:db:75:20:8b:0f:22:63:7e:92:af:8d:be:df:
                    6d:e3:21:e1:ba:74:fc:f0:5c:11:ea:dc:a6:35:fc:
                    38:6a:cf:b9:85:6c:9e:ed:61:37:e4:f2:45:39:fe:
                    32:65:00:24:8b:00:4e:83:db:ea:ca:9b:3b:6b:a6:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B4:18:6B:4B:0B:49:0B:63:35:7D:BD:54:E4:79:5A:6B:E9:BA:2D
            X509v3 Authority Key Identifier:
                keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/7DAEB1F0A5CF11F19A324F273411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:ae:38:f6:a0:85:3f:a6:35:37:4a:4d:ef:94:38:33:42:78:
         51:0b:a4:d3:32:59:e7:ff:6f:14:95:14:e2:1d:ca:9b:be:ab:
         b0:ba:14:6f:43:1d:a0:4c:9c:e4:0c:4b:62:7e:02:c6:98:c6:
         e3:4e:1f:1e:35:4d:50:ca:78:88:ec:a1:0e:00:f7:36:c5:72:
         63:50:1a:54:ae:19:ea:ec:96:14:74:d2:78:3f:ea:8f:78:a2:
         df:1e:fa:1d:03:58:32:c4:c1:35:f2:1d:46:c9:83:fc:c4:e8:
         9d:ce:49:7a:c8:4f:79:b0:31:76:ea:c7:e0:37:9f:21:1e:cf:
         90:07:52:c0:fb:31:68:b5:e5:6b:98:3d:5a:9c:ec:0c:09:09:
         07:14:0b:aa:fc:22:56:35:e2:91:ca:27:7c:c1:7e:92:67:f3:
         75:42:0a:8f:d2:2b:e0:c5:6a:95:47:1b:07:fb:d7:70:72:e8:
         0d:4e:d5:26:f3:98:63:08:bf:10:c6:c4:bc:63:63:78:67:fa:
         58:6b:99:b0:95:60:f9:cd:d5:e6:0e:23:e6:c5:5d:80:e1:54:
         9d:fa:77:ce:97:a9:69:fa:0b:b3:d9:2c:ab:60:cc:49:45:5b:
         ab:3b:20:58:c9:99:e9:23:f8:b0:f4:8c:ec:64:fa:ee:3e:69:
         dc:23:1e:99
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw
REZERjYyRTQwHhcNMjYwOTAxMDYzNjQxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk2NzI3OS1jNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNIEavlnZMj6f4twFjrvqV2a3qhxANvoHZip/6I+gWdkMwwxVKnU5q0+KUCD
5Tb/pcYt283eUFJNUEEXwkzLhvFqFdt6NV3MsbOrMdWsF6wBK5/VEAHUmKsy51uN
Rv/4TXSGHFUP+BegVxmw4F2hewAX+nd9WrVPWtxqIBpeV54AUIQ/Q+wgh65MGNhx
k1hBWUzTwuUumDfplsPanXw9DMocktJSbcCz3fLrBG32vKFhKkEvG8pIsHINQAEG
Py4anve4Tdt1IIsPImN+kq+Nvt9t4yHhunT88FwR6tymNfw4as+5hWye7WE35PJF
Of4yZQAkiwBOg9vqyps7a6YmqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFK0GGtL
C0kLYzV9vVTkeVpr6botMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx
OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ
dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUJCNUIvMjlERTc0OEE0MTlFMTFFQUI4NjZFNzdBQzRGOUFFMDIvN0RBRUIxRjBB
NUNGMTFGMTlBMzI0RjI3MzQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ+cmMA0GCSqGSIb3DQEBCwUAA4IBAQAsrjj2oIU/pjU3Sk3vlDgz
QnhRC6TTMlnn/28UlRTiHcqbvquwuhRvQx2gTJzkDEtifgLGmMbjTh8eNU1QyniI
7KEOAPc2xXJjUBpUrhnq7JYUdNJ4P+qPeKLfHvodA1gyxME18h1GyYP8xOidzkl6
yE95sDF26sfgN58hHs+QB1LA+zFoteVrmD1anOwMCQkHFAuq/CJWNeKRyid8wX6S
Z/N1QgqP0ivgxWqVRxsH+9dwcugNTtUm85hjCL8QxsS8Y2N4Z/pYa5mwlWD5zdXm
DiPmxV2A4VSd+nfOl6lp+guz2SyrYMxJRVurOyBYyZnpI/iw9IzsZPruPmncIx6Z
-----END CERTIFICATE-----
Generated at Wed Sep 9 01:56:53 2026 by rpki-client