Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1334DF726CBD11EF9B080847C4F9AE02.roa
File:                     1334DF726CBD11EF9B080847C4F9AE02.roa (raw, json)
Hash identifier:          iaAFYKvcHGzLi1p6g8/cfMsfmDdY6BDE6k6BFDFDrgs=
Subject key identifier:   3F:10:E2:B3:0E:AD:48:A9:63:5F:55:D6:23:6D:5F:53:D3:58:03:AF
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6D6C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1334DF726CBD11EF9B080847C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:21:37 +0000
ROA not before:           Fri 02 Oct 2026 15:21:37 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     131129
IP address blocks:        103.147.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28012 (0x6d6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:21:37 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc01-0586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:2a:9b:de:a1:5c:be:d3:53:fd:3a:3d:e0:
                    ba:15:84:ac:c4:4c:29:c5:dc:d4:4d:4b:fd:9e:31:
                    c4:27:db:74:17:d8:7a:cb:f0:6b:88:ed:37:6d:06:
                    7a:9b:f8:0f:01:81:c2:6c:ea:2d:fb:40:bb:30:99:
                    3f:fc:b1:a5:82:e5:fc:8b:25:41:cd:43:bb:cc:b1:
                    8b:50:f2:06:88:af:b4:04:76:75:9b:fb:1b:18:f2:
                    a4:c5:d6:e4:37:b6:e5:06:5a:14:40:aa:0a:8b:f2:
                    89:86:c2:de:c6:6b:2e:83:78:08:cd:ac:db:75:c6:
                    c3:13:97:a7:1a:2c:ab:2b:8e:52:fb:28:97:d7:c5:
                    b1:fe:2e:05:29:06:35:66:9c:c0:4f:0c:96:7f:c9:
                    d8:3e:73:5a:21:d6:bd:69:1f:a9:6a:6f:b7:25:22:
                    88:74:fb:f1:0e:16:c3:f9:14:54:6c:27:88:ec:06:
                    5a:f5:5c:e7:37:ed:db:0b:e8:a0:d3:c1:57:1d:93:
                    54:e9:83:80:99:2f:c7:f9:70:ff:2d:59:be:74:a9:
                    e1:cf:95:a6:f6:39:06:58:f0:a3:24:84:da:19:01:
                    e3:55:15:87:a1:6a:e6:8b:da:3f:67:4d:a4:8d:ed:
                    e4:52:bb:c1:3d:5a:ac:64:2d:e5:31:07:f6:98:f5:
                    e3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:10:E2:B3:0E:AD:48:A9:63:5F:55:D6:23:6D:5F:53:D3:58:03:AF
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1334DF726CBD11EF9B080847C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:9b:65:74:8a:7d:51:9a:e3:7f:4b:80:a9:5d:da:2c:19:b7:
         56:43:b7:53:f1:6b:04:c7:e3:39:83:13:f9:92:d2:96:2c:59:
         1b:d0:c2:7b:95:0a:9c:5f:08:87:45:f3:9d:06:ae:c8:d8:bd:
         06:07:c3:fe:3f:91:c5:aa:14:e7:9b:37:32:11:b9:dd:87:30:
         cc:52:4a:27:1c:6c:ff:56:c9:c6:24:5c:4c:02:4a:09:97:c8:
         e1:69:72:c6:4e:bd:4e:4d:88:b0:a7:6c:87:68:c1:68:8c:95:
         7a:ea:76:99:5b:8c:11:9f:8c:87:21:4f:26:91:80:70:70:ca:
         06:42:8e:bb:53:55:0f:32:35:be:56:06:23:e2:5c:c2:c4:b7:
         ab:40:45:e7:18:3c:3f:3a:d9:c8:52:7d:b1:ce:8b:34:13:f8:
         72:10:da:56:9c:de:3b:d0:5d:cd:77:84:f5:ab:6a:aa:34:d1:
         1f:9c:1a:53:07:26:23:c6:2d:11:20:2d:49:52:a0:2f:c9:0c:
         e4:19:39:5b:e6:a2:a5:6a:c8:b5:e0:59:9b:c8:3a:bc:ae:c5:
         c0:e0:f7:05:e8:af:31:fc:60:5b:99:31:16:96:d8:b3:55:9b:
         cf:8b:03:76:c3:33:3a:a4:37:87:bb:40:b2:bf:31:ce:5a:30:
         a4:1a:f8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 16:36:14 2026 by rpki-client