Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa
File:                     28CED806EA5811EF90C1D323C4F9AE02.roa (raw, json)
Hash identifier:          j/YHH/K/Kh5UqIUt8e4iPYirw44Jbqb0nzoDKeXMVwU=
Subject key identifier:   E3:85:23:92:28:A8:39:FF:5A:68:F5:EC:40:55:2C:CD:A7:6D:C4:48
Certificate issuer:       /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Certificate serial:       012A
Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa
Signing time:             Mon 17 Aug 2026 06:55:30 +0000
ROA not before:           Mon 17 Aug 2026 06:55:30 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     134829
IP address blocks:        103.92.137.0/24 maxlen: 24
                          103.92.138.0/24 maxlen: 24
                          103.92.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
                          rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
        Validity
            Not Before: Aug 17 06:55:30 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a82b062-c6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:fb:e7:f9:c9:2c:72:55:46:43:36:11:e2:
                    16:ab:96:ab:35:7c:ea:e2:c3:46:06:8b:70:80:6f:
                    41:c1:e4:38:d6:92:a2:67:1b:ad:85:a6:60:55:ec:
                    f7:4e:2d:5d:f3:7f:da:1a:91:53:83:53:3a:53:94:
                    79:36:31:e6:32:68:d4:74:84:86:f5:f3:c1:5d:60:
                    7d:6f:56:77:f5:3e:32:e4:42:da:ce:94:de:bf:3d:
                    4b:e3:75:4f:32:42:c5:1b:c5:28:eb:ba:48:f9:af:
                    34:6d:0f:50:ff:1b:5d:7a:ca:c7:5b:3d:b1:45:bf:
                    72:60:9f:46:7b:1c:63:7f:5e:fb:5d:2c:47:8e:7e:
                    03:12:34:22:1e:4d:99:9c:c5:9d:77:9e:47:85:b5:
                    5c:4e:b3:e1:c0:47:c7:29:5f:33:b7:37:73:06:81:
                    bb:0a:a0:ab:67:99:72:78:e0:a0:30:10:d1:0d:e3:
                    3e:a8:aa:d8:a9:33:b9:83:b7:94:84:66:64:50:5f:
                    cd:d3:be:33:be:ac:a9:67:eb:5a:d5:29:94:0f:cd:
                    b0:a8:3c:10:2f:bd:d8:63:9a:0b:11:53:a6:80:f5:
                    55:dc:64:e1:56:97:f9:6c:a9:3a:f8:4a:bd:33:e0:
                    e3:66:14:d2:84:33:92:c7:cd:97:40:06:f2:c6:9a:
                    33:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:85:23:92:28:A8:39:FF:5A:68:F5:EC:40:55:2C:CD:A7:6D:C4:48
            X509v3 Authority Key Identifier:
                keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.137.0-103.92.139.255

    Signature Algorithm: sha256WithRSAEncryption
         7c:ab:77:ec:4d:74:9b:f3:1e:f6:71:76:96:bb:72:05:f2:9e:
         e4:39:e6:e6:9e:79:fe:fa:9a:7b:7f:2e:c7:5a:d4:45:11:93:
         c7:39:6e:fc:5c:7e:85:99:ae:55:c6:75:86:b5:33:b8:6b:5b:
         cb:18:69:4a:bd:ca:f5:fd:7f:fd:8b:be:92:e5:be:44:5a:d9:
         29:e9:ca:dd:65:d1:50:a8:ce:2d:86:21:0b:3e:c2:2d:f7:63:
         62:d5:3f:ac:33:10:5c:1e:ba:3a:89:c0:b4:0b:40:61:7a:cc:
         31:96:32:0e:e8:38:aa:5d:f5:d0:fc:32:69:59:33:9a:8a:de:
         fc:b7:34:3b:bb:90:66:55:a5:02:a5:fb:7b:0d:47:ad:d6:8c:
         c5:21:b6:d2:97:9e:f4:2e:1c:4f:75:ce:3b:7a:21:d6:8c:63:
         12:30:c6:a1:c0:51:76:b0:0b:d0:2c:1e:2f:b0:0c:44:00:6c:
         a6:2f:38:64:55:ea:70:c8:a6:8d:1b:eb:54:6c:7c:39:ee:25:
         7f:28:93:0d:73:53:2f:fd:4e:45:4f:4d:4e:c9:ef:61:16:94:
         0f:57:50:51:7c:9c:b3:74:e1:fb:aa:24:37:53:48:c9:d1:a9:
         e3:7b:b3:24:a4:f5:32:cc:44:f9:6f:50:ef:55:e2:2d:e1:db:
         30:4e:e7:9c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjk3NjYxMTAvBgNVBAUTKEM5MjQ2MDE0MjU3RUVGRkZGRTgwQ0QzRUFCRkVENjdB
ODk4RDZGNTcwHhcNMjYwODE3MDY1NTMwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTgyYjA2Mi1jNmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0mn75/nJLHJVRkM2EeIWq5arNXzq4sNGBotwgG9BweQ41pKiZxuthaZgVez3
Ti1d83/aGpFTg1M6U5R5NjHmMmjUdISG9fPBXWB9b1Z39T4y5ELazpTevz1L43VP
MkLFG8Uo67pI+a80bQ9Q/xtdesrHWz2xRb9yYJ9Gexxjf177XSxHjn4DEjQiHk2Z
nMWdd55HhbVcTrPhwEfHKV8ztzdzBoG7CqCrZ5lyeOCgMBDRDeM+qKrYqTO5g7eU
hGZkUF/N074zvqypZ+ta1SmUD82wqDwQL73YY5oLEVOmgPVV3GThVpf5bKk6+Eq9
M+DjZhTShDOSx82XQAbyxpozMQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFOOFI5Io
qDn/Wmj17EBVLM2nbcRIMB8GA1UdIwQYMBaAFMkkYBQlfu///oDNPqv+1nqJjW9X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc2Ni84MEY1OUU5NEVB
NTcxMUVGQjQyQ0IyODVDNEY5QUUwMi95U1JnRkNWLTdfXy1nTTAtcV83V2VvbU5i
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjk3NjYvODBGNTlFOTRFQTU3MTFFRkI0MkNCMjg1QzRGOUFFMDIvMjhDRUQ4MDZF
QTU4MTFFRjkwQzFEMzIzQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABnXIkDBAJnXIgwDQYJKoZIhvcNAQELBQADggEBAHyrd+xNdJvz
HvZxdpa7cgXynuQ55uaeef76mnt/Lsda1EURk8c5bvxcfoWZrlXGdYa1M7hrW8sY
aUq9yvX9f/2LvpLlvkRa2Snpyt1l0VCozi2GIQs+wi33Y2LVP6wzEFweujqJwLQL
QGF6zDGWMg7oOKpd9dD8MmlZM5qK3vy3NDu7kGZVpQKl+3sNR63WjMUhttKXnvQu
HE91zjt6IdaMYxIwxqHAUXawC9AsHi+wDEQAbKYvOGRV6nDIpo0b61RsfDnuJX8o
kw1zUy/9TkVPTU7J72EWlA9XUFF8nLN04fuqJDdTSMnRqeN7sySk9TLMRPlvUO9V
4i3h2zBO55w=
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:51:54 2026 by rpki-client