Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa
File:                     416EB4022F6111EE8C156634C4F9AE02.roa (raw, json)
Hash identifier:          l6WlraQHSFxD5ZzijjCLvs/ztCHDvT/RfDgDzcuuDws=
Subject key identifier:   C9:8F:39:A4:7D:31:E0:2B:64:F9:80:78:D6:0D:72:F7:C5:20:B1:AA
Certificate issuer:       /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial:       025F
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa
Signing time:             Mon 05 Oct 2026 02:51:30 +0000
ROA not before:           Mon 05 Oct 2026 02:51:30 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        103.170.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 02:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
        Validity
            Not Before: Oct  5 02:51:30 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac310b2-5453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:6c:82:49:63:03:ec:a1:1d:19:05:11:31:
                    47:cd:ca:10:5a:2a:d5:8c:76:f7:ec:0d:bb:46:45:
                    94:cd:e3:76:bb:2a:95:77:73:b5:dc:6d:c3:e1:22:
                    0b:2f:27:a1:d7:0d:22:80:73:72:19:4f:04:4c:6e:
                    85:09:36:fc:48:a2:f4:02:68:13:b0:59:eb:a9:59:
                    97:27:47:51:d2:9d:17:8f:29:64:50:a6:8f:2b:d0:
                    ed:0a:ed:0c:78:56:ed:79:74:db:78:10:b2:8e:19:
                    39:f2:98:1c:c8:9f:29:b7:cc:09:03:aa:b2:3f:67:
                    41:b7:7a:93:4c:c1:c3:69:d3:37:1a:7a:6e:9c:c1:
                    d8:83:01:10:0f:a3:50:6a:3b:0e:4f:0c:a3:f8:35:
                    ec:45:f3:f5:df:a2:76:82:85:b3:e7:f1:20:bc:1f:
                    54:8c:2b:56:fc:06:7a:ba:12:2b:ea:6f:d5:9a:e7:
                    b8:05:6c:df:ff:f8:a3:b8:ce:da:0d:18:68:93:29:
                    ec:a2:f4:95:63:8f:df:02:e1:a1:57:a1:ec:4c:bd:
                    53:5e:1e:b9:a4:9d:32:58:eb:7e:96:cc:07:cf:6e:
                    1f:62:43:a4:84:62:6d:68:91:c4:56:55:c3:3e:62:
                    f9:1e:11:76:97:72:66:31:d0:e8:c6:43:9c:60:a4:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8F:39:A4:7D:31:E0:2B:64:F9:80:78:D6:0D:72:F7:C5:20:B1:AA
            X509v3 Authority Key Identifier:
                keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:77:89:cc:74:a5:6b:ea:e0:23:87:4c:13:8d:4d:23:0d:7b:
         9b:a9:54:4b:dc:48:b5:37:e5:8f:bc:6f:2f:f5:5c:96:9e:d8:
         b1:6f:58:80:e9:3e:e1:5e:23:65:af:bd:cf:15:82:d8:8f:33:
         81:87:c4:44:48:ac:e5:f7:9a:27:d6:dc:23:6b:02:c1:01:73:
         3e:7a:15:a6:72:c3:b7:64:6e:07:89:06:90:d3:69:ba:82:7e:
         ee:f7:db:80:39:ac:fc:b7:9d:f4:f3:97:c1:23:da:5c:ff:f2:
         89:d5:a7:c1:ae:79:d0:1d:9a:96:df:19:6b:39:5f:32:84:94:
         f5:23:bf:7c:38:d5:20:7a:4f:8e:75:6a:ac:20:1f:9b:6a:db:
         c2:93:d5:19:dd:9f:fa:0e:2d:0c:dc:4d:8b:01:1c:f5:72:3f:
         a2:3e:9f:9a:84:bd:3b:e3:ba:a9:51:31:6e:7c:91:00:3e:65:
         67:ea:a8:81:b3:8e:20:fb:22:e2:ff:75:88:a8:d0:5f:f9:68:
         2e:d7:6c:41:41:75:b2:05:3e:36:23:21:ac:d9:8f:56:5c:2b:
         d6:b2:ce:0e:06:c8:4e:3f:f2:87:32:22:f4:a1:3b:1a:a5:68:
         02:eb:ac:70:f4:02:61:f6:f5:a8:cc:b9:6a:4b:fc:0f:db:d6:
         8e:2f:c8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 18:21:40 2026 by rpki-client