Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa
File:                     F91B41A40C5811EFB9F63337C4F9AE02.roa (raw, json)
Hash identifier:          z0SpWhiQq8PZIb6gNqRYDPk3XAcQSbjGxmSYWbxSdVo=
Subject key identifier:   EE:6E:CE:F1:74:83:10:59:9E:BE:43:83:57:B2:14:22:87:CC:93:BC
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       0468
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:32:30 +0000
ROA not before:           Fri 03 Apr 2026 00:32:30 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     132601
IP address blocks:        103.181.180.0/24 maxlen: 24
                          2001:df0:7140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: Apr  3 00:32:30 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf0a9e-5ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:e3:94:92:b1:bf:e6:e4:bd:c3:a7:5a:f0:
                    a8:dd:29:19:2f:de:2d:93:e9:c8:7a:61:8f:72:0e:
                    5a:9f:79:cc:14:03:d9:32:d3:af:0a:db:60:6b:07:
                    73:f0:02:6b:1d:fc:47:f4:b0:49:04:08:09:dc:0c:
                    5e:53:b7:26:44:4f:d9:f5:16:b8:f8:f9:a1:08:f0:
                    0f:ef:ce:80:20:dc:40:d1:a7:5e:5a:68:7b:0d:4f:
                    1f:28:13:0b:6f:56:63:5b:f1:0e:34:99:15:0f:60:
                    a0:44:ee:74:57:23:b4:e8:08:12:83:d5:63:b3:0d:
                    01:95:57:06:1a:b6:0c:2e:63:2a:5d:f2:de:c3:2a:
                    42:25:b3:94:26:60:46:2f:55:81:19:84:82:0e:22:
                    85:7a:7c:7c:ee:82:aa:5d:3d:8c:d1:46:a0:5d:c6:
                    a8:7b:85:bc:19:b7:62:1b:6b:fc:3c:d8:b7:c2:9d:
                    0e:43:42:6b:d8:f3:3c:67:b4:63:d8:67:8d:fa:b1:
                    5d:ef:81:a7:82:db:70:fa:f5:b2:11:12:a2:d2:03:
                    01:62:9a:de:36:fd:30:7b:df:77:05:ff:68:ef:2f:
                    b6:68:85:96:d0:29:26:30:78:56:20:42:06:4f:6f:
                    07:96:13:8f:a8:ae:3b:9a:60:3d:bd:7d:c4:28:5f:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6E:CE:F1:74:83:10:59:9E:BE:43:83:57:B2:14:22:87:CC:93:BC
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.180.0/24
                IPv6:
                  2001:df0:7140::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:7e:9d:27:9d:77:3b:7c:32:3e:ef:e7:83:1b:00:81:5f:dc:
         53:e1:44:10:84:a8:87:0f:bc:6e:d8:26:ac:86:81:0e:fb:b8:
         3a:1f:b2:a2:2f:59:d3:c0:ed:2b:26:86:c6:25:ad:6d:8f:f7:
         4c:28:43:1e:6e:7e:15:ce:4e:e8:a9:0c:68:5d:d5:ce:e8:d2:
         b5:14:58:8e:4f:4c:ee:26:61:15:d1:c3:a5:bd:f6:87:07:31:
         40:dc:c1:d3:b7:ef:5b:9f:8e:43:50:dd:cf:53:aa:3b:72:9d:
         4e:5f:8f:ea:73:71:e9:cb:33:ff:f7:61:e6:02:42:ab:ad:21:
         c4:c7:40:c6:85:12:39:ac:c0:3c:bb:48:00:9a:4a:12:20:b3:
         56:c4:e6:31:0c:54:1e:92:a8:55:f1:44:5f:5b:5e:9e:ff:63:
         40:84:57:a9:0f:a6:73:a7:cb:26:a3:e3:1f:ba:61:a1:10:a1:
         a4:f7:7c:2d:cb:dc:eb:ae:2d:6e:87:f7:62:32:37:6a:74:04:
         e2:e6:d9:d6:ae:3e:0a:b7:d4:9f:09:b5:be:e9:c8:56:a2:61:
         54:e0:64:7c:d7:2e:bd:d0:1c:58:6c:f3:3b:f7:69:92:97:18:
         9f:eb:66:81:7e:5b:c9:a2:59:a4:51:6d:ae:96:5f:2b:96:9e:
         85:b6:31:5e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz
QkUyNUM2QTAwHhcNMjYwNDAzMDAzMjMwWhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmMGE5ZS01YWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsenjlJKxv+bkvcOnWvCo3SkZL94tk+nIemGPcg5an3nMFAPZMtOvCttgawdz
8AJrHfxH9LBJBAgJ3AxeU7cmRE/Z9Ra4+PmhCPAP786AINxA0adeWmh7DU8fKBML
b1ZjW/EONJkVD2CgRO50VyO06AgSg9Vjsw0BlVcGGrYMLmMqXfLewypCJbOUJmBG
L1WBGYSCDiKFenx87oKqXT2M0UagXcaoe4W8GbdiG2v8PNi3wp0OQ0Jr2PM8Z7Rj
2GeN+rFd74Gngttw+vWyERKi0gMBYpreNv0we993Bf9o7y+2aIWW0CkmMHhWIEIG
T28HlhOPqK47mmA9vX3EKF/eEQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFO5uzvF0
gxBZnr5Dg1eyFCKHzJO8MB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF
M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjk2REIvQTg2NEQwRUE4RTNEMTFFQ0E4N0FCRjE2QzRGOUFFMDIvRjkxQjQxQTQw
QzU4MTFFRkI5RjYzMzM3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ7W0MA8EAgACMAkDBwAgAQ3wcUAwDQYJKoZIhvcNAQELBQADggEB
AEV+nSeddzt8Mj7v54MbAIFf3FPhRBCEqIcPvG7YJqyGgQ77uDofsqIvWdPA7Ssm
hsYlrW2P90woQx5ufhXOTuipDGhd1c7o0rUUWI5PTO4mYRXRw6W99ocHMUDcwdO3
71ufjkNQ3c9TqjtynU5fj+pzcenLM//3YeYCQqutIcTHQMaFEjmswDy7SACaShIg
s1bE5jEMVB6SqFXxRF9bXp7/Y0CEV6kPpnOnyyaj4x+6YaEQoaT3fC3L3OuuLW6H
92IyN2p0BOLm2dauPgq31J8Jtb7pyFaiYVTgZHzXLr3QHFhs8zv3aZKXGJ/rZoF+
W8miWaRRba6WXyuWnoW2MV4=
-----END CERTIFICATE-----
Generated at Mon Apr 6 11:18:48 2026 by rpki-client