Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0E45DCD68C0A11EDBDC1360BC4F9AE02.roa
File:                     0E45DCD68C0A11EDBDC1360BC4F9AE02.roa (raw, json)
Hash identifier:          ADlmd9f1NDfNr6xc5LrSn1N1kfsrc8QW7kdGCpOH2lM=
Subject key identifier:   CA:8D:20:57:BC:C1:ED:BE:92:C4:52:49:70:EE:35:C0:50:90:64:EA
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6DEE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0E45DCD68C0A11EDBDC1360BC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:25:54 +0000
ROA not before:           Fri 02 Oct 2026 15:25:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140751
IP address blocks:        103.155.230.0/23 maxlen: 23
                          2001:df4:e180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28142 (0x6dee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:25:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd02-5cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d5:5c:58:2c:1b:23:fd:a0:4f:c4:dd:d0:df:
                    23:65:fa:ba:09:cf:2f:0e:3d:df:35:0a:b9:fd:d5:
                    e9:ac:d6:88:0f:ca:d2:87:36:ff:ab:d2:1b:87:85:
                    6c:b5:b4:4b:8a:df:fd:ad:9f:7a:7b:2f:ce:82:32:
                    f6:d8:35:2b:91:31:57:f5:24:70:8b:33:2b:12:2d:
                    91:0d:c6:dc:cb:f4:d3:8c:11:cb:a0:27:78:60:b2:
                    e0:e9:4e:e0:19:e9:75:47:7e:5d:f8:bc:b6:f7:b4:
                    4a:75:b6:c8:a4:b5:f4:ec:d9:52:5d:d2:7d:c4:03:
                    52:cb:25:46:c7:42:7f:b9:38:b4:8b:0c:dc:76:2d:
                    cd:0b:bd:d5:68:bf:d6:e6:06:b1:c8:15:ac:b6:d5:
                    01:ca:26:a0:c1:15:06:35:93:0c:83:b0:be:31:95:
                    67:62:d9:28:d4:48:ec:ff:8b:98:9f:1c:db:f9:59:
                    44:68:8e:e8:7f:13:f2:34:ed:1b:f5:09:96:f8:ee:
                    0a:ed:24:1c:da:54:09:47:22:d2:7f:d5:7e:b3:30:
                    73:ee:da:78:05:dc:3c:aa:a4:07:2c:50:2d:ba:fd:
                    f0:df:e3:c1:86:6c:c7:e9:09:7b:13:a1:7c:3c:f2:
                    bd:86:c3:b8:69:83:41:31:89:5b:94:67:b3:8b:7d:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8D:20:57:BC:C1:ED:BE:92:C4:52:49:70:EE:35:C0:50:90:64:EA
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0E45DCD68C0A11EDBDC1360BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.230.0/23
                IPv6:
                  2001:df4:e180::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:8d:26:5e:ae:58:51:0a:78:5f:73:fd:79:6b:58:74:00:
         2f:23:3b:83:5c:1b:a6:ab:5a:e4:86:0c:52:bc:68:f3:50:c1:
         cf:ad:35:34:21:fe:54:c9:2e:0e:f0:5a:07:0a:c9:bc:a9:88:
         fb:7e:2f:9a:65:ba:3c:27:70:ab:e9:49:12:2b:6f:0c:00:fd:
         15:d1:80:e8:52:5e:8c:b7:9a:91:86:7f:da:36:ca:8e:94:de:
         ed:55:89:e0:2c:3d:39:87:25:a0:94:91:59:eb:af:13:a0:3e:
         b2:e4:fc:2c:ae:8d:df:a7:5a:a8:65:c2:92:5b:14:7c:69:74:
         9d:a6:89:21:31:ac:a6:01:96:81:f4:14:34:80:1f:b5:aa:59:
         73:8d:d3:43:e9:03:b3:27:a9:f6:cf:d1:a4:46:11:e2:01:4f:
         c4:35:6c:34:73:ed:cd:92:3d:9b:97:ff:a4:8f:78:09:d1:7f:
         03:24:d5:2c:6d:25:5f:af:27:6a:ea:e2:59:3c:b1:c3:89:8c:
         a3:01:f1:78:78:37:94:b3:65:36:e7:ec:01:53:69:0a:a8:40:
         f6:a0:62:9b:32:80:4a:75:0e:db:e2:14:5b:46:35:c2:48:16:
         ca:df:6c:9f:4d:18:ec:6c:3e:8b:71:dc:2c:9b:e5:1b:c1:d3:
         0c:53:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:51:05 2026 by rpki-client