Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/44A88C482CA611F1A847C919C5833773.roa
File:                     44A88C482CA611F1A847C919C5833773.roa (raw, json)
Hash identifier:          bKgCp4EHIIvC6tgJBK5J1/iYjgk0IVxADvyBY64+CAc=
Subject key identifier:   01:E2:B4:C9:0F:D8:22:0D:6E:7A:AF:6D:0F:4A:4D:A8:A0:DA:83:AC
Certificate issuer:       /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Certificate serial:       2267
Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/44A88C482CA611F1A847C919C5833773.roa
Signing time:             Tue 18 Aug 2026 16:22:12 +0000
ROA not before:           Tue 18 Aug 2026 16:22:11 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        103.12.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8807 (0x2267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8E25, serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
        Validity
            Not Before: Aug 18 16:22:11 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8486b3-cd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:b5:41:7c:0d:b3:33:0e:61:1b:6a:1f:33:
                    da:8b:a5:72:c9:83:80:78:d8:c1:ee:01:25:b4:27:
                    b8:5b:a8:43:6c:8b:31:35:8f:e4:b2:77:06:b4:c2:
                    8e:95:70:2c:6f:fc:73:1f:08:0c:9c:2f:86:46:04:
                    0b:fc:4d:48:7e:be:d3:91:3c:aa:65:71:71:03:30:
                    39:86:cd:00:38:d7:fa:54:f6:9d:ba:3e:9b:77:10:
                    6e:13:63:52:d9:d7:4a:a4:29:08:78:12:ea:48:57:
                    19:e5:9f:ec:63:0c:fa:c0:cf:81:93:87:38:08:45:
                    ca:57:e8:2a:e5:79:af:d8:8c:01:5b:93:b4:f8:bd:
                    96:56:53:7d:08:64:aa:4b:2d:97:b1:fa:6e:e3:e0:
                    06:66:39:ef:f7:4d:f6:26:c5:15:d8:77:75:af:57:
                    a7:ec:27:89:dd:c5:52:f6:66:68:13:74:1f:37:bb:
                    f3:0a:59:fe:7e:7b:27:dd:1f:88:fd:a6:23:b9:31:
                    0a:08:f0:20:af:b9:1c:2f:64:4e:3e:94:cb:75:8e:
                    f6:61:ac:69:a0:56:9c:d3:66:b1:e4:f7:8b:ab:bd:
                    42:d4:44:d5:33:a0:b5:c8:b7:15:b6:51:de:0d:50:
                    91:43:65:78:d9:5e:84:5f:af:86:eb:90:9f:bc:9f:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E2:B4:C9:0F:D8:22:0D:6E:7A:AF:6D:0F:4A:4D:A8:A0:DA:83:AC
            X509v3 Authority Key Identifier:
                keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/44A88C482CA611F1A847C919C5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:1b:a2:ea:77:d9:cd:89:6f:5a:a3:e6:b9:0f:85:15:2f:62:
         60:19:d3:c0:8b:b7:b5:72:16:18:b1:11:56:96:e2:77:14:08:
         65:a3:da:85:6c:6a:e8:07:bf:62:f2:2e:15:c8:04:f5:6d:65:
         f0:fb:70:0e:b5:67:f3:28:56:9a:d0:f5:1d:79:12:25:17:a6:
         bb:00:4e:6e:7a:b9:c7:2d:81:92:03:21:19:48:1c:95:46:09:
         01:eb:fd:a7:87:b0:00:15:70:41:a4:03:6c:03:42:00:36:c8:
         bb:54:a9:9a:37:d3:37:33:2f:2b:e1:70:ff:75:58:5f:98:65:
         35:c3:3f:b7:3f:5d:df:cb:fb:2f:47:d1:2a:be:28:ba:ad:f0:
         2d:b4:22:ad:8d:35:2e:1e:49:b8:1e:bc:5b:ec:df:f0:81:18:
         6c:9e:b5:93:13:7d:20:69:8e:31:74:e9:bf:1d:35:77:fd:ed:
         e7:ca:5e:15:29:da:30:6c:fe:b3:2d:96:ec:7f:21:42:86:7a:
         54:fe:5b:0d:10:51:0d:64:e5:65:a3:a3:41:37:44:4a:c7:af:
         4e:a4:93:06:1d:c1:40:ce:cd:5d:c7:36:11:14:36:c8:5d:a2:
         ed:34:dc:ce:ad:e5:c4:01:4b:30:bc:1e:a5:0b:c9:00:50:60:
         16:b5:c9:ea
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICImcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhFMjUxMTAvBgNVBAUTKDZGMDk0QzAwRUY4OEZEOEI3MDgxM0Q2REFEQ0I1NDY4
NzYzMjhDRDkwHhcNMjYwODE4MTYyMjExWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg0ODZiMy1jZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA25W1QXwNszMOYRtqHzPai6VyyYOAeNjB7gEltCe4W6hDbIsxNY/ksncGtMKO
lXAsb/xzHwgMnC+GRgQL/E1Ifr7TkTyqZXFxAzA5hs0AONf6VPaduj6bdxBuE2NS
2ddKpCkIeBLqSFcZ5Z/sYwz6wM+Bk4c4CEXKV+gq5Xmv2IwBW5O0+L2WVlN9CGSq
Sy2Xsfpu4+AGZjnv9032JsUV2Hd1r1en7CeJ3cVS9mZoE3QfN7vzCln+fnsn3R+I
/aYjuTEKCPAgr7kcL2ROPpTLdY72YaxpoFac02ax5PeLq71C1ETVM6C1yLcVtlHe
DVCRQ2V42V6EX6+G65CfvJ9LiQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAHitMkP
2CINbnqvbQ9KTaig2oOsMB8GA1UdIwQYMBaAFG8JTADviP2LcIE9ba3LVGh2MozZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUyNS9GNDM0NDExNjhB
MkUxMUUzQjVCNkU5NUU1OTExRUEzMi9id2xNQU8tSV9ZdHdnVDF0cmN0VWFIWXlq
TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J3bE1BTy1JX1l0d2dUMXRyY3RVYUhZeWpOay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjhFMjUvRjQzNDQxMTY4QTJFMTFFM0I1QjZFOTVFNTkxMUVBMzIvNDRBODhDNDgy
Q0E2MTFGMUE4NDdDOTE5QzU4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZwzxMA0GCSqGSIb3DQEBCwUAA4IBAQCGG6Lqd9nNiW9ao+a5D4UV
L2JgGdPAi7e1chYYsRFWluJ3FAhlo9qFbGroB79i8i4VyAT1bWXw+3AOtWfzKFaa
0PUdeRIlF6a7AE5uernHLYGSAyEZSByVRgkB6/2nh7AAFXBBpANsA0IANsi7VKma
N9M3My8r4XD/dVhfmGU1wz+3P13fy/svR9Eqvii6rfAttCKtjTUuHkm4Hrxb7N/w
gRhsnrWTE30gaY4xdOm/HTV3/e3nyl4VKdowbP6zLZbsfyFChnpU/lsNEFENZOVl
o6NBN0RKx69OpJMGHcFAzs1dxzYRFDbIXaLtNNzOreXEAUswvB6lC8kAUGAWtcnq
-----END CERTIFICATE-----
Generated at Fri Sep 11 11:29:24 2026 by rpki-client