Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B2B2930C21C911EB991D562EC4F9AE02.roa
File:                     B2B2930C21C911EB991D562EC4F9AE02.roa (raw, json)
Hash identifier:          bx80odAXkY0MYIUdPq3Se5Z99i5ov0hqTySdt08ambI=
Subject key identifier:   10:D6:FC:ED:DD:81:97:5C:C5:F0:64:7B:FC:50:83:A9:71:5A:07:67
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       10B0
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B2B2930C21C911EB991D562EC4F9AE02.roa
Signing time:             Wed 19 Aug 2026 08:02:38 +0000
ROA not before:           Wed 19 Aug 2026 08:02:38 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135386
IP address blocks:        103.113.92.0/22 maxlen: 24
                          103.140.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4272 (0x10b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: Aug 19 08:02:38 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a85631d-272c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:59:98:38:dc:46:65:74:5b:3e:4e:35:0b:
                    1a:a3:32:c1:0c:55:31:cb:36:c7:53:92:71:9d:64:
                    19:46:56:f8:13:11:9f:a1:2b:3f:79:6a:84:f2:2f:
                    73:7b:c6:f9:76:67:58:6c:1c:18:af:20:c9:11:5a:
                    ec:58:e9:3c:36:21:93:e4:53:d8:5a:34:8c:d5:0a:
                    fe:c9:b7:1a:4c:fc:30:70:09:43:cd:59:6a:57:d5:
                    54:6d:71:d0:7b:14:3d:59:d7:ca:45:eb:80:48:61:
                    86:d5:51:3c:ff:68:92:4a:db:c9:17:26:b2:4e:37:
                    9a:85:d7:9d:27:8f:b6:ca:e0:38:8f:9f:1b:f8:d9:
                    e8:7f:07:35:c4:83:5e:cd:4d:89:18:48:00:18:6b:
                    bf:77:07:1f:5c:a7:1f:a3:8b:9b:db:a8:c4:7d:bf:
                    a5:7a:2f:17:32:53:96:16:fd:80:73:5a:7f:3c:d1:
                    18:bf:e8:f4:e4:b5:ca:56:aa:f4:9b:be:d6:03:23:
                    3a:95:1c:e3:c4:d1:78:a8:8c:37:b2:3d:44:eb:0c:
                    fb:39:c4:17:57:2c:6a:66:76:d9:52:04:fc:59:69:
                    11:51:61:8d:2c:51:89:ba:64:99:19:48:ad:e0:00:
                    07:6a:f5:e8:f8:63:09:c7:69:f6:a4:2c:2f:29:8d:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D6:FC:ED:DD:81:97:5C:C5:F0:64:7B:FC:50:83:A9:71:5A:07:67
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B2B2930C21C911EB991D562EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22
                  103.140.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:b8:df:20:52:ea:81:ab:f7:66:c8:2d:be:15:9d:d0:8c:cb:
         75:37:0c:d6:cd:c6:05:73:54:5c:71:71:c2:5d:f3:14:b7:81:
         59:18:b7:d7:b6:55:37:03:3d:c5:e5:d0:94:e5:bd:e0:9e:30:
         a0:3a:9d:15:71:9a:fa:82:49:c7:f8:bc:8f:21:bb:cd:b8:ff:
         be:f3:fb:90:39:ff:fa:79:fa:12:ba:ab:72:33:3a:d1:51:9a:
         b3:9f:f8:82:e1:2f:16:06:8c:12:67:45:6a:f7:82:31:1a:44:
         3e:b3:3d:38:a9:57:2e:ac:6a:b1:b8:f4:ec:4e:26:33:9c:20:
         9f:41:99:14:a1:cb:fe:ba:75:2a:61:70:28:dc:17:b7:8e:9a:
         33:1d:b1:ab:20:7e:c7:5a:8d:6b:bf:19:ce:04:27:27:bf:dc:
         e9:66:d9:45:6b:f7:45:4b:6e:fe:6d:71:b6:a9:23:51:09:d7:
         8b:62:a2:38:6e:da:8d:61:58:1b:bd:6b:4c:cf:8f:6f:77:17:
         5a:ae:e0:6d:0a:e6:48:92:67:2f:28:09:91:f7:e7:cc:d0:e1:
         a9:85:a6:ec:46:7e:85:6d:7e:78:7f:80:c2:60:c2:5d:e3:46:
         bc:81:55:d0:84:5e:8e:11:1c:7f:26:8f:f6:b5:04:09:c4:89:
         50:0e:23:74
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICELAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2
RkZBQzQ2NjEwHhcNMjYwODE5MDgwMjM4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg1NjMxZC0yNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoDlZmDjcRmV0Wz5ONQsaozLBDFUxyzbHU5JxnWQZRlb4ExGfoSs/eWqE8i9z
e8b5dmdYbBwYryDJEVrsWOk8NiGT5FPYWjSM1Qr+ybcaTPwwcAlDzVlqV9VUbXHQ
exQ9WdfKReuASGGG1VE8/2iSStvJFyayTjeahdedJ4+2yuA4j58b+Nnofwc1xINe
zU2JGEgAGGu/dwcfXKcfo4ub26jEfb+lei8XMlOWFv2Ac1p/PNEYv+j05LXKVqr0
m77WAyM6lRzjxNF4qIw3sj1E6wz7OcQXVyxqZnbZUgT8WWkRUWGNLFGJumSZGUit
4AAHavXo+GMJx2n2pCwvKY0BowIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBDW/O3d
gZdcxfBke/xQg6lxWgdnMB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz
RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjNGMDIvQ0NBQjU3NTA2M0YwMTFFOUE5QkNBMTQxQzRGOUFFMDIvQjJCMjkzMEMy
MUM5MTFFQjk5MUQ1NjJFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ3FcAwQBZ4zkMA0GCSqGSIb3DQEBCwUAA4IBAQCDuN8gUuqBq/dm
yC2+FZ3QjMt1NwzWzcYFc1RccXHCXfMUt4FZGLfXtlU3Az3F5dCU5b3gnjCgOp0V
cZr6gknH+LyPIbvNuP++8/uQOf/6efoSuqtyMzrRUZqzn/iC4S8WBowSZ0Vq94Ix
GkQ+sz04qVcurGqxuPTsTiYznCCfQZkUocv+unUqYXAo3Be3jpozHbGrIH7HWo1r
vxnOBCcnv9zpZtlFa/dFS27+bXG2qSNRCdeLYqI4btqNYVgbvWtMz49vdxdaruBt
CuZIkmcvKAmR9+fM0OGphabsRn6FbX54f4DCYMJd40a8gVXQhF6OERx/Jo/2tQQJ
xIlQDiN0
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:44:46 2026 by rpki-client