Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CF9929A779411ECA4A8DC5BC4F9AE02.roa
File:                     0CF9929A779411ECA4A8DC5BC4F9AE02.roa (raw, json)
Hash identifier:          dt1/UHk1MEblocWrZgVpKXTbWs2pe3d6Tm1+NJ/MuwI=
Subject key identifier:   BD:6B:61:9E:35:59:11:5C:92:68:E7:66:D1:CC:32:7D:2B:51:A4:B3
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F1C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CF9929A779411ECA4A8DC5BC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:36:19 +0000
ROA not before:           Fri 02 Oct 2026 15:36:19 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55305
IP address blocks:        103.133.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28444 (0x6f1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:36:19 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf73-0308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:0b:f2:6c:60:c8:2a:b8:81:22:ac:a5:45:
                    05:0d:88:7f:a8:b8:14:8c:e3:af:cd:8f:b8:26:7f:
                    31:d5:ab:ee:04:6e:d8:19:14:60:11:fe:07:77:c0:
                    77:8e:1c:ae:c1:08:d8:a6:5f:dd:bb:85:ee:42:a6:
                    1b:37:94:9b:aa:a2:7b:65:11:2d:9d:e2:24:4b:28:
                    f5:06:6c:93:e7:6c:ad:cf:77:08:26:dc:46:04:4e:
                    2b:55:14:cc:eb:17:43:95:66:1d:7c:e1:8b:d6:df:
                    55:33:51:73:4e:70:c1:b1:46:b4:89:14:b4:6f:05:
                    05:3a:49:24:3c:65:01:18:54:52:04:fd:91:4b:d4:
                    94:19:af:40:e2:5f:d4:38:7d:fb:1d:04:e2:31:e3:
                    bc:50:4d:d1:df:6c:ee:78:08:07:97:c8:88:ad:e6:
                    c2:ff:79:a3:1e:1c:da:62:0f:c3:dc:5a:b0:83:6e:
                    77:99:dd:98:66:06:cc:b4:54:06:61:85:32:41:21:
                    cf:2e:b8:17:29:38:b7:c6:27:a1:08:28:0f:8b:4c:
                    dd:d6:41:46:3e:5d:3d:89:4e:20:c5:48:f6:39:b9:
                    5b:24:a2:33:f8:95:2a:2f:b2:f1:24:ed:23:ee:36:
                    d3:d6:0e:d9:a5:f0:9d:3f:cf:f9:65:81:06:e2:b7:
                    09:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6B:61:9E:35:59:11:5C:92:68:E7:66:D1:CC:32:7D:2B:51:A4:B3
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0CF9929A779411ECA4A8DC5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:9f:e1:e5:a9:1f:23:0b:fd:7f:3c:e5:bd:77:43:c0:c2:
         dc:54:dc:fd:56:01:18:04:f5:48:27:4c:ce:fb:85:95:68:6a:
         69:05:e3:62:b8:bd:a7:f1:65:ed:bd:a2:c3:74:06:6a:03:ae:
         b6:39:8d:88:63:26:c9:b8:bf:a4:97:82:1a:87:9a:00:46:8a:
         36:1f:f5:b0:97:4f:cd:f0:7f:74:2b:be:de:b3:80:45:0c:e4:
         4e:de:ad:24:c6:ec:49:2a:d6:ce:5f:0e:07:ef:4a:a2:4f:90:
         3d:f2:9f:2c:19:ec:f4:5c:f5:61:9a:5d:cb:a9:49:1d:2f:1b:
         54:cc:6d:46:e9:87:6a:30:b0:c8:e0:b7:c0:77:5c:77:16:65:
         45:69:76:3f:b4:4e:13:01:ba:a6:c9:49:40:6d:56:13:8f:01:
         be:2f:97:9c:86:6e:43:88:c0:3b:2c:7c:2e:b7:b3:fe:58:17:
         21:32:30:b9:f9:aa:fa:09:0f:97:47:11:72:67:1f:de:d7:81:
         f0:a5:29:8c:fe:5f:31:23:93:9f:c8:18:00:04:90:04:7a:0c:
         b0:a3:ae:2b:53:6d:08:84:4d:e7:8b:96:06:bd:1f:c0:77:f4:
         cf:a5:1b:2e:ed:0e:23:6e:10:5c:77:ed:93:d6:c4:69:db:81:
         01:61:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:42:36 2026 by rpki-client