Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/DAEB24B0176111EFAB2AD122C4F9AE02.roa
File:                     DAEB24B0176111EFAB2AD122C4F9AE02.roa (raw, json)
Hash identifier:          jjyxXkjoR4/XkaNsD8CZdz9cmckxwBWxwGYafkhZs7E=
Subject key identifier:   81:36:D9:4E:D4:1B:E6:8C:D6:47:1D:01:DD:55:6B:84:A7:FC:16:8D
Certificate issuer:       /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial:       01FE
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/DAEB24B0176111EFAB2AD122C4F9AE02.roa
Signing time:             Mon 05 Oct 2026 04:52:32 +0000
ROA not before:           Mon 05 Oct 2026 04:52:32 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     140499
IP address blocks:        103.67.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 03:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
        Validity
            Not Before: Oct  5 04:52:32 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac32d10-b85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:e3:1d:dd:e6:f5:aa:f2:47:19:ca:56:f9:
                    e0:cf:56:7c:fc:52:1b:71:c1:a0:59:c9:57:96:80:
                    05:75:35:3f:15:13:73:34:5c:b8:05:ca:60:76:7b:
                    0e:4d:f6:e5:99:46:c6:c4:ca:45:98:a7:36:61:5c:
                    51:0d:fa:56:3b:db:13:41:04:25:86:1c:0e:6d:70:
                    71:52:6e:10:5b:a2:0f:5e:91:28:36:73:78:44:16:
                    e6:89:a1:86:9f:7d:37:24:b3:d1:c2:d8:26:e3:af:
                    4d:d9:27:f9:bd:30:5d:a6:0f:54:c5:b5:4c:3a:c1:
                    09:3c:7b:19:59:47:0a:2c:76:96:65:3c:15:ae:41:
                    22:c4:c3:5d:ab:6a:07:54:5b:e8:ff:4e:99:e5:ac:
                    e5:56:44:4c:c5:bd:23:c0:a1:67:39:45:5f:6b:13:
                    ce:22:f9:39:68:53:44:80:d2:e1:bf:11:c1:4f:57:
                    fb:d3:66:9a:99:d3:d9:5b:2d:19:fd:dc:80:8f:bf:
                    39:f5:29:be:07:47:16:ac:46:11:71:a4:f6:e0:4c:
                    58:41:38:19:46:b4:ba:a4:fb:18:b9:2e:4a:09:4d:
                    04:9b:6e:ea:4b:b1:be:fb:88:38:b2:5f:42:f4:29:
                    18:84:a7:0d:11:13:65:80:c8:03:3c:02:e4:42:e5:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:36:D9:4E:D4:1B:E6:8C:D6:47:1D:01:DD:55:6B:84:A7:FC:16:8D
            X509v3 Authority Key Identifier:
                keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/DAEB24B0176111EFAB2AD122C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:dc:f7:0e:a4:f6:6b:ff:34:a6:ef:ca:06:40:f1:2b:14:ed:
         98:65:bd:25:aa:a3:f3:c7:5c:c7:df:0e:aa:00:c4:15:9b:92:
         2b:a8:a0:1e:27:fb:a3:8b:c7:a5:c1:f1:32:3b:f5:0b:f2:86:
         e3:33:3a:d6:5d:7d:18:08:8a:68:9b:3d:b0:9f:83:39:2e:aa:
         36:67:4f:c1:15:f6:15:6a:9c:64:ca:6d:d0:3f:13:e5:f8:4b:
         cc:13:24:16:42:38:e2:df:16:81:9c:f5:24:e5:32:6e:4d:80:
         0d:9c:36:ce:f2:c6:01:70:00:94:85:ba:ac:f9:5d:fb:e3:d5:
         23:98:26:66:eb:0d:83:a7:11:5c:d4:8e:c6:e2:90:77:54:30:
         f4:46:3e:51:d7:8c:20:6a:61:d2:bd:e6:83:ba:f5:f2:de:84:
         ae:37:74:22:a2:54:e1:88:6a:7e:1f:45:4e:4e:69:62:9b:a6:
         ce:57:88:43:ff:90:17:c2:21:29:01:39:d9:f5:c0:08:14:6b:
         e0:4f:21:81:f2:d8:14:76:b7:ea:b5:fd:ad:46:a3:6f:65:c5:
         2f:1b:81:ea:00:f4:85:8a:d8:80:0e:a8:bb:79:36:76:f6:59:
         3e:a6:4a:b1:aa:eb:0e:e5:ed:c3:b1:41:9d:e5:5e:ea:79:7e:
         39:2b:a1:b4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG
QjJGMEYxNjIwHhcNMjYxMDA1MDQ1MjMyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMzMmQxMC1iODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxIXjHd3m9aryRxnKVvngz1Z8/FIbccGgWclXloAFdTU/FRNzNFy4BcpgdnsO
TfblmUbGxMpFmKc2YVxRDfpWO9sTQQQlhhwObXBxUm4QW6IPXpEoNnN4RBbmiaGG
n303JLPRwtgm469N2Sf5vTBdpg9UxbVMOsEJPHsZWUcKLHaWZTwVrkEixMNdq2oH
VFvo/06Z5azlVkRMxb0jwKFnOUVfaxPOIvk5aFNEgNLhvxHBT1f702aamdPZWy0Z
/dyAj7859Sm+B0cWrEYRcaT24ExYQTgZRrS6pPsYuS5KCU0Em27qS7G++4g4sl9C
9CkYhKcNERNlgMgDPALkQuW3aQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIE22U7U
G+aM1kcdAd1Va4Sn/BaNMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1
RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkQ4QkUvQzY4RUZGOUVFNUQ2MTFFRThCMzU2NzM5QzRGOUFFMDIvREFFQjI0QjAx
NzYxMTFFRkFCMkFEMTIyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0M3MA0GCSqGSIb3DQEBCwUAA4IBAQA53PcOpPZr/zSm78oGQPEr
FO2YZb0lqqPzx1zH3w6qAMQVm5IrqKAeJ/uji8elwfEyO/UL8objMzrWXX0YCIpo
mz2wn4M5Lqo2Z0/BFfYVapxkym3QPxPl+EvMEyQWQjji3xaBnPUk5TJuTYANnDbO
8sYBcACUhbqs+V3749UjmCZm6w2DpxFc1I7G4pB3VDD0Rj5R14wgamHSveaDuvXy
3oSuN3QiolThiGp+H0VOTmlim6bOV4hD/5AXwiEpATnZ9cAIFGvgTyGB8tgUdrfq
tf2tRqNvZcUvG4HqAPSFitiADqi7eTZ29lk+pkqxqusO5e3DsUGd5V7qeX45K6G0
-----END CERTIFICATE-----
Generated at Sat Oct 24 14:28:36 2026 by rpki-client