Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/803597528D5911F087734E0BC4F9AE02.roa
File:                     803597528D5911F087734E0BC4F9AE02.roa (raw, json)
Hash identifier:          qjwNHVxj8rh4p5dbVDJ7FmnGLRA0aF4pw1XtOGgQ9/I=
Subject key identifier:   A0:71:C6:6D:38:45:09:16:A8:37:3C:F5:2C:E3:9C:26:97:CD:C9:E6
Certificate issuer:       /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial:       0248
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/803597528D5911F087734E0BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:59:44 +0000
ROA not before:           Sun 01 Mar 2026 04:22:51 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     401783
IP address blocks:        103.83.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
                          rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 02:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
        Validity
            Not Before: Mar  1 04:22:51 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a41c20-2c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:45:54:04:73:80:05:d8:36:cc:ba:80:b3:
                    79:ce:19:6a:00:f8:13:70:cd:82:bc:27:76:cc:95:
                    74:5b:2e:38:b7:a6:fa:1c:3b:42:7b:26:30:00:35:
                    99:21:3c:61:5b:cb:de:5d:81:71:3c:51:6a:91:60:
                    d4:ad:bc:dc:5d:30:63:5f:58:4e:f7:4e:1d:3d:ba:
                    56:1e:10:ed:c5:0d:9b:3b:4a:ab:ac:d7:7a:cf:e0:
                    38:00:7d:f8:ab:22:a0:8c:55:40:3c:49:22:27:e7:
                    56:20:c7:63:8b:8a:89:63:eb:95:0e:98:80:41:ec:
                    17:ab:e3:7a:58:84:b2:eb:01:34:44:88:f5:34:02:
                    c7:76:b6:89:80:05:bb:36:05:41:c2:39:f9:0c:f5:
                    ce:61:4d:c2:ad:b3:08:fb:a2:4b:14:87:0a:f8:e2:
                    9a:05:f9:71:ab:ef:54:30:30:a3:48:8c:42:8e:ab:
                    ea:c5:f5:e3:bc:45:6f:d8:e6:54:ed:22:e4:c6:c1:
                    5e:2f:2c:bb:85:db:c2:13:89:22:ca:93:ca:c0:16:
                    3d:31:e6:39:bb:72:f0:66:bd:0b:07:c6:51:f6:6d:
                    cd:d6:7e:58:68:b9:4c:0a:a8:3a:5b:dd:b9:3e:76:
                    8e:ca:b8:76:9a:1b:b3:fc:fb:06:4e:0c:1d:81:85:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:71:C6:6D:38:45:09:16:A8:37:3C:F5:2C:E3:9C:26:97:CD:C9:E6
            X509v3 Authority Key Identifier:
                keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/803597528D5911F087734E0BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:12:32:0e:b1:62:35:a4:7a:77:98:92:e9:e2:37:c3:cb:50:
         58:2b:6d:dd:10:da:99:40:d8:a4:89:ac:c1:60:be:a4:ad:41:
         bb:45:8f:53:ed:0b:25:a7:79:61:7e:db:55:81:cc:b8:04:08:
         4b:96:41:b9:75:d9:4a:c0:54:e4:cd:84:e8:03:35:39:b3:53:
         b7:1c:5d:72:9d:a2:db:b4:6a:cc:29:5f:c3:67:fc:1c:5d:20:
         08:47:c6:eb:b6:3e:dc:dc:59:0d:d9:3c:e4:49:8c:e4:b8:e7:
         36:38:3a:89:5c:50:8d:bd:52:4c:02:d2:b5:8f:e9:e8:37:8d:
         19:8f:ca:07:00:13:81:60:73:8f:bc:f4:f9:c5:34:e2:42:52:
         80:e0:4a:8e:39:0a:d8:41:40:50:07:62:d2:a1:85:96:e9:4c:
         cc:f3:78:5f:16:77:83:d8:3e:7d:e0:f7:d7:f5:c9:19:d2:dc:
         a7:18:af:65:4a:9e:5f:9d:a9:82:fe:65:c6:92:3d:cd:94:04:
         af:04:11:8f:07:2e:32:ea:32:83:c1:7c:18:40:7b:c5:1e:cc:
         3a:64:42:97:25:05:dc:64:35:da:78:0e:f5:e6:62:2a:7e:ea:
         a4:0f:5f:7a:f3:07:13:2a:cb:e9:18:c3:c3:17:d8:05:8e:ec:
         d1:e8:87:04
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0
NkREMDI2NTcwHhcNMjYwMzAxMDQyMjUxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWMyMC0yYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw9JFVARzgAXYNsy6gLN5zhlqAPgTcM2CvCd2zJV0Wy44t6b6HDtCeyYwADWZ
ITxhW8veXYFxPFFqkWDUrbzcXTBjX1hO904dPbpWHhDtxQ2bO0qrrNd6z+A4AH34
qyKgjFVAPEkiJ+dWIMdji4qJY+uVDpiAQewXq+N6WISy6wE0RIj1NALHdraJgAW7
NgVBwjn5DPXOYU3CrbMI+6JLFIcK+OKaBflxq+9UMDCjSIxCjqvqxfXjvEVv2OZU
7SLkxsFeLyy7hdvCE4kiypPKwBY9MeY5u3LwZr0LB8ZR9m3N1n5YaLlMCqg6W925
PnaOyrh2mhuz/PsGTgwdgYUp3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKBxxm04
RQkWqDc89SzjnCaXzcnmMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB
NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkFBOTEvOTQyMEQyMTAwQTVBMTFFRUEzRjVCNDQxQzRGOUFFMDIvODAzNTk3NTI4
RDU5MTFGMDg3NzM0RTBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1MrMA0GCSqGSIb3DQEBCwUAA4IBAQBNEjIOsWI1pHp3mJLp4jfD
y1BYK23dENqZQNikiazBYL6krUG7RY9T7Qslp3lhfttVgcy4BAhLlkG5ddlKwFTk
zYToAzU5s1O3HF1ynaLbtGrMKV/DZ/wcXSAIR8brtj7c3FkN2TzkSYzkuOc2ODqJ
XFCNvVJMAtK1j+noN40Zj8oHABOBYHOPvPT5xTTiQlKA4EqOOQrYQUBQB2LSoYWW
6UzM83hfFneD2D594PfX9ckZ0tynGK9lSp5fnamC/mXGkj3NlASvBBGPBy4y6jKD
wXwYQHvFHsw6ZEKXJQXcZDXaeA715mIqfuqkD1968wcTKsvpGMPDF9gFjuzR6IcE
-----END CERTIFICATE-----
Generated at Thu Mar 5 14:03:37 2026 by rpki-client