Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/2B47BA20752211F19949AC3074A30FBC.roa
File:                     2B47BA20752211F19949AC3074A30FBC.roa (raw, json)
Hash identifier:          8LBmQzW90mWnOYxo6pn9f5t8jglPxy4JlaD5C1JFAyQ=
Subject key identifier:   B0:29:9D:97:11:32:2E:94:50:C9:18:61:B4:C3:E6:07:70:32:D7:33
Certificate issuer:       /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Certificate serial:       0BFC
Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/2B47BA20752211F19949AC3074A30FBC.roa
Signing time:             Thu 02 Jul 2026 07:41:59 +0000
ROA not before:           Thu 02 Jul 2026 07:41:59 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136396
IP address blocks:        103.123.32.0/24 maxlen: 24
                          103.123.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 19:08:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3068 (0xbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
        Validity
            Not Before: Jul  2 07:41:59 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a461647-fa5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:09:31:ce:a5:9f:8d:ea:d1:e9:ea:da:ed:
                    61:fb:dd:9a:a0:ea:0d:44:a5:06:8e:5d:c9:a8:b2:
                    ae:b0:a1:39:3a:e7:77:4a:88:5b:10:35:33:5f:04:
                    e1:6b:aa:7c:50:6a:73:12:8f:89:4f:4f:74:27:83:
                    fa:54:b0:62:de:3d:d5:bf:ed:dc:d2:ff:c8:6e:b5:
                    8c:9c:87:32:69:c7:75:72:99:c9:66:8a:ba:09:63:
                    bf:43:85:37:85:48:9a:86:a3:a9:76:70:ff:b0:cc:
                    94:b5:17:bb:40:ce:2b:af:a1:a3:a3:c9:4e:9b:c8:
                    36:4c:8f:16:13:5c:71:11:02:1d:2f:2d:78:31:35:
                    b3:f1:17:3b:8e:d4:70:f0:29:c6:54:88:fa:06:25:
                    9f:1e:4f:03:82:3b:69:e3:f7:37:69:8e:d4:e2:c7:
                    83:05:48:a8:b1:7e:fb:3b:d4:e5:34:cb:8e:bd:de:
                    e7:93:9f:f3:a8:29:83:77:91:a9:df:0f:77:90:aa:
                    53:9f:71:ed:fe:35:b2:0d:a9:4f:1b:25:47:bf:67:
                    31:3e:90:02:dd:c5:08:9b:ad:8b:61:89:39:16:c9:
                    89:ff:90:47:db:63:55:4d:57:6f:d4:c2:b8:61:80:
                    db:fd:6c:0a:bd:31:a3:20:61:df:bb:07:85:a5:94:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:29:9D:97:11:32:2E:94:50:C9:18:61:B4:C3:E6:07:70:32:D7:33
            X509v3 Authority Key Identifier:
                keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/2B47BA20752211F19949AC3074A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.32.0/24
                  103.123.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:56:85:c1:2b:98:4f:44:3b:c7:cd:08:5e:74:a9:99:62:ac:
         e9:a0:76:9f:08:91:4e:bd:19:01:36:e1:b7:e4:e6:b0:4b:35:
         7c:ec:7c:9c:38:73:a1:35:2a:6f:6a:57:4b:99:b5:1a:c7:78:
         03:76:a7:c2:4d:b7:81:cf:4f:75:9c:56:75:2d:fa:be:79:2f:
         d3:bc:65:bd:63:e9:cb:5d:54:67:ff:b4:52:dd:a5:8f:6c:c0:
         b1:f9:6e:ca:9c:47:03:d1:b8:cf:3f:57:c3:90:77:3a:99:e2:
         89:07:92:bf:b9:82:eb:a8:d5:33:1e:5c:01:95:dc:04:ba:ce:
         36:3e:cc:4d:d4:a9:cc:11:79:c4:77:fe:47:a6:c6:96:d2:1e:
         a1:3c:19:e2:61:d7:db:5d:86:ea:e0:6d:3b:4a:74:a1:bf:95:
         1d:28:05:9e:ea:6b:87:9b:b6:6f:43:9d:b0:f6:85:2e:37:6b:
         71:72:2d:62:57:5b:6b:c2:17:f9:b2:97:8b:7f:2c:69:89:4a:
         93:25:d6:96:e4:41:e2:79:40:6e:ab:a0:ea:19:90:42:87:90:
         a5:6a:c1:a7:9c:f6:c7:11:bb:48:2e:50:30:44:e2:a4:0b:72:
         af:88:b3:86:24:81:fa:16:a2:6e:88:c2:f1:db:3f:d8:51:f9:
         6f:e1:db:c4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3REIxMTAvBgNVBAUTKEFFQkExOUI2RkNDMUQyMUFFNzEzMTc3MEU3QjFEQTNF
MTQ3NUVDOTAwHhcNMjYwNzAyMDc0MTU5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ2MTY0Ny1mYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtW0JMc6ln43q0enq2u1h+92aoOoNRKUGjl3JqLKusKE5Oud3SohbEDUzXwTh
a6p8UGpzEo+JT090J4P6VLBi3j3Vv+3c0v/IbrWMnIcyacd1cpnJZoq6CWO/Q4U3
hUiahqOpdnD/sMyUtRe7QM4rr6Gjo8lOm8g2TI8WE1xxEQIdLy14MTWz8Rc7jtRw
8CnGVIj6BiWfHk8Dgjtp4/c3aY7U4seDBUiosX77O9TlNMuOvd7nk5/zqCmDd5Gp
3w93kKpTn3Ht/jWyDalPGyVHv2cxPpAC3cUIm62LYYk5FsmJ/5BH22NVTVdv1MK4
YYDb/WwKvTGjIGHfuweFpZSD2QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLApnZcR
Mi6UUMkYYbTD5gdwMtczMB8GA1UdIwQYMBaAFK66Gbb8wdIa5xMXcOex2j4UdeyQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdEQi9COTUxRTI4QzNE
Q0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBocm5FeGR3NTdIYVBoUjE3
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Jyb1p0dnpCMGhybkV4ZHc1N0hhUGhSMTdKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3REIvQjk1MUUyOEMzRENBMTFFQTgxQjlEMzUyQzRGOUFFMDIvMkI0N0JBMjA3
NTIyMTFGMTk5NDlBQzMwNzRBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ3sgAwQAZ3siMA0GCSqGSIb3DQEBCwUAA4IBAQCIVoXBK5hPRDvH
zQhedKmZYqzpoHafCJFOvRkBNuG35OawSzV87HycOHOhNSpvaldLmbUax3gDdqfC
TbeBz091nFZ1Lfq+eS/TvGW9Y+nLXVRn/7RS3aWPbMCx+W7KnEcD0bjPP1fDkHc6
meKJB5K/uYLrqNUzHlwBldwEus42PsxN1KnMEXnEd/5HpsaW0h6hPBniYdfbXYbq
4G07SnShv5UdKAWe6muHm7ZvQ52w9oUuN2txci1iV1trwhf5speLfyxpiUqTJdaW
5EHieUBuq6DqGZBCh5ClasGnnPbHEbtILlAwROKkC3KviLOGJIH6FqJuiMLx2z/Y
Uflv4dvE
-----END CERTIFICATE-----
Generated at Fri Jul 10 23:38:26 2026 by rpki-client