Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B2B2930C21C911EB991D562EC4F9AE02.roa
File:                     B2B2930C21C911EB991D562EC4F9AE02.roa (raw, json)
Hash identifier:          Sm/OBak1L/GxeMDIT65Qr8dDGwL4HkNDx/zYxoxP+Z8=
Subject key identifier:   EA:B6:BC:40:ED:4E:16:92:20:44:31:42:18:74:EA:5D:7A:19:84:A8
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       107C
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B2B2930C21C911EB991D562EC4F9AE02.roa
Signing time:             Thu 28 May 2026 17:22:25 +0000
ROA not before:           Thu 28 May 2026 17:22:25 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135386
IP address blocks:        103.113.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 17:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4220 (0x107c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: May 28 17:22:25 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1879d1-74ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fc:49:07:1b:d6:20:30:29:e7:8c:d2:97:e2:
                    69:08:78:64:4e:10:aa:f0:db:89:e9:61:b1:47:5d:
                    81:10:0b:4d:21:ce:94:c5:8b:d4:ab:ac:33:69:f0:
                    a0:b5:af:fc:95:1d:12:2b:8e:25:a1:cf:cd:09:ab:
                    75:7e:97:a8:b2:5f:8c:9f:c9:92:2a:c0:e8:f4:b7:
                    70:eb:45:64:b7:23:40:0a:b8:92:58:42:cc:70:a7:
                    92:11:e6:06:2e:34:b4:78:4d:bc:cd:2b:d5:51:34:
                    c3:c5:be:ff:e4:dc:27:6f:17:16:c1:51:11:e7:02:
                    43:bd:f4:51:ff:80:9e:3e:3a:1e:d3:53:4f:53:dd:
                    80:28:4d:66:58:6e:38:00:cc:25:54:4b:68:2e:ed:
                    26:76:a4:02:78:25:22:02:9b:5f:de:2d:00:13:2c:
                    b5:90:fc:87:2e:86:56:ca:c1:69:40:1a:fe:f6:a5:
                    07:67:8c:a6:a3:dc:da:1b:52:d1:f0:3c:09:5e:46:
                    e6:52:54:3a:41:6f:c0:9b:bd:4b:d5:61:5c:10:18:
                    05:e5:17:8b:3c:f7:a6:19:e6:21:01:48:48:41:f5:
                    14:3d:75:8b:3d:a2:41:47:da:f6:a9:85:78:77:d4:
                    22:cb:6e:e3:62:69:95:92:5b:0b:c8:d7:e4:3d:55:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B6:BC:40:ED:4E:16:92:20:44:31:42:18:74:EA:5D:7A:19:84:A8
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B2B2930C21C911EB991D562EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:f5:ec:92:46:88:d4:2c:1d:77:45:c1:38:29:21:be:a5:dd:
         c3:dd:6d:b4:6c:8b:83:0b:5a:c1:74:c4:e0:fa:a5:53:62:f9:
         20:9e:71:d9:04:43:9d:0c:e7:fe:09:09:7a:9e:d8:a3:9f:84:
         46:e1:70:b4:4e:2b:ae:46:5e:86:5a:f9:8b:71:6e:a0:30:84:
         18:2f:d7:1a:0b:a4:c0:cb:cc:64:c0:97:30:93:db:ab:94:a8:
         72:2e:11:1f:32:f7:72:78:da:4e:40:20:b7:f3:34:b0:c7:a4:
         53:dd:4a:94:85:4f:ac:e0:3f:30:ac:08:e4:1c:be:cc:54:1f:
         eb:3a:fd:a7:a0:78:e6:cb:04:32:e8:d7:d5:ba:68:34:bd:9c:
         d9:bd:9b:11:9a:c1:bd:e0:4c:23:0b:d8:86:dc:9d:34:29:20:
         5f:53:b9:8e:4c:fc:d2:b7:f0:77:7d:31:f6:4e:9a:72:b7:93:
         72:9c:33:77:cb:d2:cc:5c:44:51:8e:4c:81:c6:7d:0a:fb:3b:
         3b:2e:85:97:43:21:18:74:78:f9:8d:38:8e:9a:b5:f1:08:f9:
         03:61:7c:06:97:74:43:94:69:b5:bc:26:9a:8e:57:37:51:12:
         a3:36:47:92:b4:63:03:0c:c0:21:21:64:5f:4a:d1:3d:22:1b:
         66:15:29:90
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2
RkZBQzQ2NjEwHhcNMjYwNTI4MTcyMjI1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE4NzlkMS03NGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk/xJBxvWIDAp54zSl+JpCHhkThCq8NuJ6WGxR12BEAtNIc6UxYvUq6wzafCg
ta/8lR0SK44loc/NCat1fpeosl+Mn8mSKsDo9Ldw60VktyNACriSWELMcKeSEeYG
LjS0eE28zSvVUTTDxb7/5NwnbxcWwVER5wJDvfRR/4CePjoe01NPU92AKE1mWG44
AMwlVEtoLu0mdqQCeCUiAptf3i0AEyy1kPyHLoZWysFpQBr+9qUHZ4ymo9zaG1LR
8DwJXkbmUlQ6QW/Am71L1WFcEBgF5ReLPPemGeYhAUhIQfUUPXWLPaJBR9r2qYV4
d9Qiy27jYmmVklsLyNfkPVW8bQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOq2vEDt
ThaSIEQxQhh06l16GYSoMB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz
RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjNGMDIvQ0NBQjU3NTA2M0YwMTFFOUE5QkNBMTQxQzRGOUFFMDIvQjJCMjkzMEMy
MUM5MTFFQjk5MUQ1NjJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3FcMA0GCSqGSIb3DQEBCwUAA4IBAQBl9eySRojULB13RcE4KSG+
pd3D3W20bIuDC1rBdMTg+qVTYvkgnnHZBEOdDOf+CQl6ntijn4RG4XC0TiuuRl6G
WvmLcW6gMIQYL9caC6TAy8xkwJcwk9urlKhyLhEfMvdyeNpOQCC38zSwx6RT3UqU
hU+s4D8wrAjkHL7MVB/rOv2noHjmywQy6NfVumg0vZzZvZsRmsG94EwjC9iG3J00
KSBfU7mOTPzSt/B3fTH2Tppyt5NynDN3y9LMXERRjkyBxn0K+zs7LoWXQyEYdHj5
jTiOmrXxCPkDYXwGl3RDlGm1vCaajlc3URKjNkeStGMDDMAhIWRfStE9IhtmFSmQ
-----END CERTIFICATE-----
Generated at Thu Jun 4 14:17:51 2026 by rpki-client