Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa
File:                     DC0965247F5A11F186F9402F5DA30FBC.roa (raw, json)
Hash identifier:          +7cgwn7hf2pYUWY8bN4oxoYjrwEAtujv7oFlabBFPdo=
Subject key identifier:   4C:BA:D6:91:F4:5D:7F:78:A6:C3:26:00:55:C8:84:2C:29:25:A7:A3
Certificate issuer:       /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial:       0E7B
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa
Signing time:             Tue 13 Oct 2026 08:40:59 +0000
ROA not before:           Tue 13 Oct 2026 08:40:59 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137967
IP address blocks:        103.117.192.0/22 maxlen: 22
                          103.117.192.0/23 maxlen: 23
                          103.117.192.0/24 maxlen: 24
                          103.117.193.0/24 maxlen: 24
                          103.117.194.0/23 maxlen: 23
                          103.117.194.0/24 maxlen: 24
                          103.117.195.0/24 maxlen: 24
                          2403:1e40::/32 maxlen: 32
                          2403:1e40::/34 maxlen: 34
                          2403:1e40::/48 maxlen: 48
                          2403:1e40:100::/48 maxlen: 48
                          2403:1e40:106::/48 maxlen: 48
                          2403:1e40:107::/48 maxlen: 48
                          2403:1e40:150::/48 maxlen: 48
                          2403:1e40:151::/48 maxlen: 48
                          2403:1e40:152::/48 maxlen: 48
                          2403:1e40:153::/48 maxlen: 48
                          2403:1e40:154::/48 maxlen: 48
                          2403:1e40:168::/48 maxlen: 48
                          2403:1e40:169::/48 maxlen: 48
                          2403:1e40:207::/48 maxlen: 48
                          2403:1e40:1205::/48 maxlen: 48
                          2403:1e40:1206::/48 maxlen: 48
                          2403:1e40:1207::/48 maxlen: 48
                          2403:1e40:1208::/48 maxlen: 48
                          2403:1e40:1209::/48 maxlen: 48
                          2403:1e40:120a::/48 maxlen: 48
                          2403:1e40:1210::/48 maxlen: 48
                          2403:1e40:1211::/48 maxlen: 48
                          2403:1e40:1212::/48 maxlen: 48
                          2403:1e40:1213::/48 maxlen: 48
                          2403:1e40:1214::/48 maxlen: 48
                          2403:1e40:1215::/48 maxlen: 48
                          2403:1e40:1216::/48 maxlen: 48
                          2403:1e40:1217::/48 maxlen: 48
                          2403:1e40:1218::/48 maxlen: 48
                          2403:1e40:1219::/48 maxlen: 48
                          2403:1e40:121a::/48 maxlen: 48
                          2403:1e40:121b::/48 maxlen: 48
                          2403:1e40:121c::/48 maxlen: 48
                          2403:1e40:121d::/48 maxlen: 48
                          2403:1e40:121e::/48 maxlen: 48
                          2403:1e40:121f::/48 maxlen: 48
                          2403:1e40:1220::/48 maxlen: 48
                          2403:1e40:1221::/48 maxlen: 48
                          2403:1e40:1222::/48 maxlen: 48
                          2403:1e40:1223::/48 maxlen: 48
                          2403:1e40:1224::/48 maxlen: 48
                          2403:1e40:1225::/48 maxlen: 48
                          2403:1e40:1226::/48 maxlen: 48
                          2403:1e40:1227::/48 maxlen: 48
                          2403:1e40:1228::/48 maxlen: 48
                          2403:1e40:1229::/48 maxlen: 48
                          2403:1e40:122a::/48 maxlen: 48
                          2403:1e40:122b::/48 maxlen: 48
                          2403:1e40:122c::/48 maxlen: 48
                          2403:1e40:122d::/48 maxlen: 48
                          2403:1e40:122e::/48 maxlen: 48
                          2403:1e40:122f::/48 maxlen: 48
                          2403:1e40:1241::/48 maxlen: 48
                          2403:1e40:1242::/48 maxlen: 48
                          2403:1e40:1244::/48 maxlen: 48
                          2403:1e40:1245::/48 maxlen: 48
                          2403:1e40:1246::/48 maxlen: 48
                          2403:1e40:1247::/48 maxlen: 48
                          2403:1e40:1248::/48 maxlen: 48
                          2403:1e40:1249::/48 maxlen: 48
                          2403:1e40:124a::/48 maxlen: 48
                          2403:1e40:124c::/48 maxlen: 48
                          2403:1e40:124d::/48 maxlen: 48
                          2403:1e40:124e::/48 maxlen: 48
                          2403:1e40:3205::/48 maxlen: 48
                          2403:1e40:3206::/48 maxlen: 48
                          2403:1e40:3207::/48 maxlen: 48
                          2403:1e40:3208::/48 maxlen: 48
                          2403:1e40:3209::/48 maxlen: 48
                          2403:1e40:320a::/48 maxlen: 48
                          2403:1e40:3c05::/48 maxlen: 48
                          2403:1e40:3c06::/48 maxlen: 48
                          2403:1e40:3c07::/48 maxlen: 48
                          2403:1e40:3c08::/48 maxlen: 48
                          2403:1e40:4000::/34 maxlen: 34
                          2403:1e40:5704::/48 maxlen: 48
                          2403:1e40:5705::/48 maxlen: 48
                          2403:1e40:5706::/48 maxlen: 48
                          2403:1e40:5804::/48 maxlen: 48
                          2403:1e40:5805::/48 maxlen: 48
                          2403:1e40:5806::/48 maxlen: 48
                          2403:1e40:580a::/48 maxlen: 48
                          2403:1e40:580b::/48 maxlen: 48
                          2403:1e40:5905::/48 maxlen: 48
                          2403:1e40:70ff::/48 maxlen: 48
                          2403:1e40:7205::/48 maxlen: 48
                          2403:1e40:7206::/48 maxlen: 48
                          2403:1e40:7207::/48 maxlen: 48
                          2403:1e40:7208::/48 maxlen: 48
                          2403:1e40:8000::/34 maxlen: 34
                          2403:1e40:80ff::/48 maxlen: 48
                          2403:1e40:90ff::/48 maxlen: 48
                          2403:1e40:97ff::/48 maxlen: 48
                          2403:1e40:c000::/34 maxlen: 34
                          2403:1e40:c305::/48 maxlen: 48
                          2403:1e40:c306::/48 maxlen: 48
                          2403:1e40:fffc::/48 maxlen: 48
                          2403:1e40:fffd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
                          rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 17:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3707 (0xe7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
        Validity
            Not Before: Oct 13 08:40:59 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6acdee9b-86ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:d9:59:53:4a:02:1b:f3:70:37:c1:11:90:
                    ee:6f:97:7f:9b:b8:d8:0e:38:f9:28:d0:e9:af:5b:
                    a8:2f:dc:f0:1b:00:f3:49:fa:a1:04:de:32:92:6a:
                    3e:3f:ba:70:e1:e5:9e:ff:19:63:05:59:03:68:40:
                    ae:7b:96:d1:02:1a:f1:c3:0d:7f:36:ce:4d:f6:19:
                    1c:f9:57:0d:78:29:e6:26:bd:87:bf:9c:e0:b7:97:
                    30:1f:80:e8:fd:94:cb:62:07:ad:38:f5:85:b4:3c:
                    b3:be:80:97:ee:8d:b5:04:81:d4:68:ed:40:b8:e9:
                    61:7f:15:80:26:21:76:af:72:d7:78:82:97:a3:3b:
                    15:29:60:77:3d:8b:72:94:fb:1d:d3:5a:7e:33:20:
                    41:7e:46:83:fb:40:3e:6b:2f:e0:4a:df:bf:a3:24:
                    20:a8:54:c0:a5:23:4a:a5:93:9e:27:8a:51:ba:d0:
                    a5:76:c9:1d:30:bb:70:7f:2a:a2:5e:10:a1:e3:2f:
                    7a:57:08:12:e7:2a:2e:29:7d:6a:ab:15:92:c1:4d:
                    a4:a2:d6:d0:88:8f:22:a0:2e:f1:8d:98:de:b3:93:
                    40:35:6d:ec:02:f1:ce:a7:9f:43:46:d7:17:65:93:
                    d2:0a:fa:33:87:85:1a:97:80:3b:a2:36:34:84:c8:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BA:D6:91:F4:5D:7F:78:A6:C3:26:00:55:C8:84:2C:29:25:A7:A3
            X509v3 Authority Key Identifier:
                keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.192.0/22
                IPv6:
                  2403:1e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:c2:60:96:51:f8:3b:a8:40:b7:e9:3d:c2:d9:8e:12:ca:e0:
         f1:b2:56:d9:ae:f3:70:c2:63:22:21:b9:08:3e:c4:85:f1:75:
         5c:24:be:33:1a:49:cc:5d:dd:29:b3:29:65:e1:6b:d4:c7:88:
         99:01:6d:37:cf:34:4b:e8:62:b3:e1:71:fa:37:b7:3a:e1:61:
         a3:ad:b6:8a:95:b5:14:60:92:58:d6:7b:75:be:fe:e1:91:b8:
         ee:fc:6f:80:91:52:61:0a:1f:dc:71:f6:14:45:32:88:4c:0f:
         75:0d:41:ce:d3:e9:94:45:e6:0c:7b:cf:c0:a0:b3:cb:fe:16:
         ec:b9:d7:61:de:8c:64:7b:68:41:a5:85:4c:05:66:17:af:2f:
         75:b9:61:da:0c:6c:ee:d7:3b:09:f0:6c:02:b3:28:c6:1c:fb:
         9e:62:26:de:e2:1c:d5:87:d3:97:1b:c2:6c:0b:12:e6:c7:cb:
         69:e8:f3:f8:d9:89:ee:af:58:4b:4c:33:37:f5:82:70:93:e0:
         e5:16:90:3b:87:f0:c3:99:b8:d7:3e:d7:03:d2:b5:42:5a:71:
         17:19:59:3e:be:e2:a6:cd:5b:b6:cf:5c:61:b1:22:7c:51:2e:
         48:21:fc:e4:ab:8e:1a:9f:b7:bd:12:8a:61:03:6f:78:11:f9:
         dd:fe:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:22 2026 by rpki-client