Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/62884F1AB6CC11EF84CBC45FC4F9AE02.roa
File:                     62884F1AB6CC11EF84CBC45FC4F9AE02.roa (raw, json)
Hash identifier:          AXDH2N6IFT5Fud9AQTkuO+onQ48n5ZtmHoBIWEhfafk=
Subject key identifier:   80:2B:F7:4E:09:C5:AA:B7:12:67:01:E9:29:15:E5:0A:3F:DF:CB:D8
Certificate issuer:       /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial:       07C6
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/62884F1AB6CC11EF84CBC45FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 21:28:23 +0000
ROA not before:           Mon 02 Mar 2026 21:28:23 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     5065
IP address blocks:        103.226.127.0/24 maxlen: 24
                          150.129.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
                          rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990 (0x7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
        Validity
            Not Before: Mar  2 21:28:23 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a600f7-d721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:86:d1:7a:00:60:4c:0f:26:de:ab:7a:bd:
                    55:49:b2:42:f6:0e:6e:7f:3d:ff:6a:62:b3:2f:75:
                    d9:8a:55:9c:d9:eb:de:6b:4d:9c:35:d7:24:2f:3a:
                    b1:11:da:f2:d4:d9:34:c9:43:c7:9b:a0:ef:0f:ee:
                    e6:74:4b:fa:1a:29:f8:da:40:26:51:ee:42:d3:69:
                    ea:c9:85:88:cc:c5:5f:24:6b:6f:d2:bb:a4:7f:65:
                    18:a9:8d:e9:6c:dc:6a:78:a3:c3:b8:ae:dd:e5:66:
                    19:b1:6f:02:63:5f:1e:f4:f4:13:0b:e4:78:22:a4:
                    37:b7:c6:01:ce:98:d9:e3:b5:2e:e5:0f:8a:db:45:
                    8b:04:67:8c:e3:82:44:2e:73:b9:3b:9a:23:5f:c3:
                    a3:b4:4f:ef:fd:a7:1e:7e:4d:12:40:cd:b4:ac:b8:
                    a7:46:01:24:cb:64:5d:3a:06:b9:b6:9e:c8:06:6e:
                    08:76:ac:86:b0:7b:d1:b1:7e:58:49:0a:22:6e:5b:
                    49:6a:4e:ef:26:ce:96:a2:bc:75:9a:3c:77:a7:85:
                    bb:9a:88:6d:1e:2b:8c:92:81:9c:fe:db:a0:2d:8a:
                    df:89:51:ce:0e:44:39:dd:90:a0:55:90:d6:60:38:
                    07:4e:6b:ef:ac:3c:a1:28:60:52:0f:e1:e5:ef:1e:
                    fb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2B:F7:4E:09:C5:AA:B7:12:67:01:E9:29:15:E5:0A:3F:DF:CB:D8
            X509v3 Authority Key Identifier:
                keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/62884F1AB6CC11EF84CBC45FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.127.0/24
                  150.129.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:d3:f4:1f:8a:67:c6:f1:e6:4c:1a:4a:7f:db:4b:92:a1:70:
         59:35:ea:14:18:cf:a0:89:58:f4:b9:e4:1a:1e:a0:68:99:6b:
         0a:b8:dc:3d:6d:c8:e3:f6:e5:f9:a7:fa:29:fa:e8:b7:e1:4f:
         7e:3f:9c:1d:db:91:25:72:06:08:a9:09:8e:74:22:f8:94:bd:
         a5:49:03:b2:e6:4c:41:04:11:29:7a:ae:48:70:f0:d5:ef:90:
         62:16:9a:bc:59:b4:48:08:37:80:48:dd:1c:5b:f4:ef:78:23:
         f0:c6:76:65:54:74:da:29:47:71:44:d1:be:bc:6a:be:9f:fe:
         5e:43:1d:4f:86:2f:08:5b:b3:48:23:7a:60:d9:7f:db:ed:1d:
         a7:b9:ee:31:5f:e9:4f:c4:25:b2:ef:62:ef:9b:5a:3e:4a:00:
         37:ed:3f:e7:0e:f1:f4:c9:7e:48:d6:a9:5b:38:21:5d:f2:41:
         e0:d3:55:87:8b:ef:ea:b3:e1:a8:63:33:91:c8:a1:f6:43:bd:
         57:fb:36:42:24:15:61:4a:6e:50:19:50:a7:04:61:86:89:09:
         12:9c:62:d2:d7:df:6f:19:fd:6b:28:2d:90:d4:10:ac:20:0c:
         a1:32:23:0f:a9:1e:67:09:5b:fa:51:35:95:dd:12:f1:75:32:
         25:cc:ca:10
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjk2NjUxMTAvBgNVBAUTKDMwNThBNDY5QjY3RDAzMDcyQzJEOEEzODVFOUYyQUFC
QkExMzRFMkIwHhcNMjYwMzAyMjEyODIzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MDBmNy1kNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuXWG0XoAYEwPJt6rer1VSbJC9g5ufz3/amKzL3XZilWc2evea02cNdckLzqx
Edry1Nk0yUPHm6DvD+7mdEv6Gin42kAmUe5C02nqyYWIzMVfJGtv0rukf2UYqY3p
bNxqeKPDuK7d5WYZsW8CY18e9PQTC+R4IqQ3t8YBzpjZ47Uu5Q+K20WLBGeM44JE
LnO5O5ojX8OjtE/v/acefk0SQM20rLinRgEky2RdOga5tp7IBm4IdqyGsHvRsX5Y
SQoibltJak7vJs6Worx1mjx3p4W7mohtHiuMkoGc/tugLYrfiVHODkQ53ZCgVZDW
YDgHTmvvrDyhKGBSD+Hl7x77LQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIAr904J
xaq3EmcB6SkV5Qo/38vYMB8GA1UdIwQYMBaAFDBYpGm2fQMHLC2KOF6fKqu6E04r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTY2NS82RDBEMTJCODRC
RjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJaOUF3Y3NMWW80WHA4cXE3b1RU
aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01GaWthYlo5QXdjc0xZbzRYcDhxcTdvVFRpcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjk2NjUvNkQwRDEyQjg0QkY1MTFFQkJEODNCODdCQzRGOUFFMDIvNjI4ODRGMUFC
NkNDMTFFRjg0Q0JDNDVGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ+J/AwQAloFQMA0GCSqGSIb3DQEBCwUAA4IBAQAF0/QfimfG8eZM
Gkp/20uSoXBZNeoUGM+giVj0ueQaHqBomWsKuNw9bcjj9uX5p/op+ui34U9+P5wd
25ElcgYIqQmOdCL4lL2lSQOy5kxBBBEpeq5IcPDV75BiFpq8WbRICDeASN0cW/Tv
eCPwxnZlVHTaKUdxRNG+vGq+n/5eQx1Phi8IW7NII3pg2X/b7R2nue4xX+lPxCWy
72Lvm1o+SgA37T/nDvH0yX5I1qlbOCFd8kHg01WHi+/qs+GoYzORyKH2Q71X+zZC
JBVhSm5QGVCnBGGGiQkSnGLS199vGf1rKC2Q1BCsIAyhMiMPqR5nCVv6UTWV3RLx
dTIlzMoQ
-----END CERTIFICATE-----
Generated at Fri Mar 13 00:31:23 2026 by rpki-client