Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/C4CA725C687011EFA523204EC4F9AE02.roa
File:                     C4CA725C687011EFA523204EC4F9AE02.roa (raw, json)
Hash identifier:          bpWSduLsJ+bNrVqj6EUtZuCEBbM1lTJcE6awQ1r5bxY=
Subject key identifier:   E2:38:8F:CD:03:D1:D2:5F:1D:20:0F:A7:57:39:A3:D7:2F:8F:4E:2D
Certificate issuer:       /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Certificate serial:       0276
Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/C4CA725C687011EFA523204EC4F9AE02.roa
Signing time:             Tue 13 Oct 2026 10:03:50 +0000
ROA not before:           Tue 13 Oct 2026 10:03:50 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137967
IP address blocks:        103.233.176.0/23 maxlen: 23
                          103.233.176.0/24 maxlen: 24
                          103.233.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl
                          rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
        Validity
            Not Before: Oct 13 10:03:50 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ace0206-f807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:e6:15:a0:bf:27:cc:4b:0a:d4:40:4f:03:
                    ca:ac:be:94:71:71:dc:c2:21:d2:c8:eb:94:c4:c7:
                    6f:87:79:61:7d:30:c4:f8:7e:87:6e:d0:3c:ea:2b:
                    cc:9d:5d:b9:b0:51:ff:c6:35:26:11:7a:6a:9d:88:
                    3c:be:a8:06:69:03:68:1b:7a:73:6b:08:3f:d2:9f:
                    ad:a1:46:6e:f8:3a:c9:6a:c9:d4:02:f7:e7:d3:cd:
                    28:31:07:cc:21:3a:a7:58:9b:fc:8d:13:61:c2:0d:
                    0f:fa:bc:21:43:ee:83:d0:5d:02:7e:c7:b2:a2:f9:
                    d1:f3:7c:97:1c:0b:aa:94:7d:44:e3:db:d7:7c:01:
                    31:42:4d:b7:09:18:96:90:2d:1c:ee:23:30:ac:05:
                    1a:12:be:eb:e8:16:8c:f3:22:56:16:f5:a5:2c:a2:
                    9d:1a:83:08:f3:dc:6f:48:ba:31:e2:f1:1f:cc:b3:
                    d7:61:96:71:32:94:fa:f6:26:54:49:fb:91:60:72:
                    3c:8b:b7:c5:2d:23:bd:fb:cb:a1:6d:24:5a:a4:56:
                    79:d0:92:24:c1:b8:28:dc:2f:58:93:e0:6a:f7:ee:
                    b3:24:f5:4c:44:71:e1:d2:19:5c:5b:60:73:36:44:
                    91:3a:43:5c:b6:a2:25:11:cc:03:3b:2b:16:42:c6:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:38:8F:CD:03:D1:D2:5F:1D:20:0F:A7:57:39:A3:D7:2F:8F:4E:2D
            X509v3 Authority Key Identifier:
                keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/C4CA725C687011EFA523204EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:14:08:e1:e4:05:a2:1e:38:b9:ff:0f:74:c3:c0:77:f5:5d:
         da:a1:3c:63:8f:8e:e4:48:c3:ff:ba:a0:e4:9f:82:0f:67:38:
         9e:44:4b:3f:83:9a:11:b2:ff:15:1b:9b:c6:fc:dc:bd:da:18:
         2f:2f:69:85:e9:46:0c:d2:f6:1e:01:d5:a9:06:e0:f3:cf:bd:
         39:61:21:f5:ed:d3:26:56:0e:b6:fd:8f:a7:0e:02:2c:69:c7:
         b1:fc:5c:2f:16:b5:29:97:e9:04:b7:c7:46:42:9b:03:f1:28:
         d2:34:30:57:e9:75:4b:fb:17:e5:a0:06:7d:11:7f:cf:60:73:
         e1:1e:32:98:97:2f:0d:09:73:1a:26:e7:c3:2d:6f:04:42:72:
         1f:57:26:fa:be:27:eb:0a:62:45:96:5f:9d:7b:4a:06:1b:50:
         c5:c0:d4:85:65:7f:b7:21:b6:1b:bd:b2:b8:bb:5f:1e:f5:6c:
         a7:71:42:26:40:eb:a7:10:dd:ee:80:dd:77:4a:e0:a3:d8:13:
         1a:36:ed:b4:e6:3a:29:16:88:96:e6:83:1c:f0:cb:63:e5:5b:
         6f:0f:54:43:12:2f:06:e5:85:8e:e0:10:a3:6b:8d:35:76:dd:
         ac:d1:f2:cd:a6:b0:e1:ce:29:16:00:17:fd:1f:7d:08:b5:03:
         e9:b3:ed:49
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx
OTcxODAwNkYwHhcNMjYxMDEzMTAwMzUwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNlMDIwNi1mODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzLvmFaC/J8xLCtRATwPKrL6UcXHcwiHSyOuUxMdvh3lhfTDE+H6HbtA86ivM
nV25sFH/xjUmEXpqnYg8vqgGaQNoG3pzawg/0p+toUZu+DrJasnUAvfn080oMQfM
ITqnWJv8jRNhwg0P+rwhQ+6D0F0CfseyovnR83yXHAuqlH1E49vXfAExQk23CRiW
kC0c7iMwrAUaEr7r6BaM8yJWFvWlLKKdGoMI89xvSLox4vEfzLPXYZZxMpT69iZU
SfuRYHI8i7fFLSO9+8uhbSRapFZ50JIkwbgo3C9Yk+Bq9+6zJPVMRHHh0hlcW2Bz
NkSROkNctqIlEcwDOysWQsZk8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOI4j80D
0dJfHSAPp1c5o9cvj04tMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC
ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkFDODQvREQ1QzlFQkMyQjg2MTFFRUE2OUY0QjE3QzRGOUFFMDIvQzRDQTcyNUM2
ODcwMTFFRkE1MjMyMDRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ+mwMA0GCSqGSIb3DQEBCwUAA4IBAQCZFAjh5AWiHji5/w90w8B3
9V3aoTxjj47kSMP/uqDkn4IPZzieREs/g5oRsv8VG5vG/Ny92hgvL2mF6UYM0vYe
AdWpBuDzz705YSH17dMmVg62/Y+nDgIsacex/FwvFrUpl+kEt8dGQpsD8SjSNDBX
6XVL+xfloAZ9EX/PYHPhHjKYly8NCXMaJufDLW8EQnIfVyb6vifrCmJFll+de0oG
G1DFwNSFZX+3IbYbvbK4u18e9WyncUImQOunEN3ugN13SuCj2BMaNu205jopFoiW
5oMc8Mtj5VtvD1RDEi8G5YWO4BCja401dt2s0fLNprDhzikWABf9H30ItQPps+1J
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:30 2026 by rpki-client