Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/14C244C85B0B11F0BA703652C4F9AE02.roa
File:                     14C244C85B0B11F0BA703652C4F9AE02.roa (raw, json)
Hash identifier:          o8tcOenmaczmgWPn6kevpkK0/PmpQ9Rjyoo3wi2qniU=
Subject key identifier:   98:89:13:57:2C:0D:80:68:54:E0:EB:BC:1C:26:4D:91:F9:76:9A:DF
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6D32
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/14C244C85B0B11F0BA703652C4F9AE02.roa
Signing time:             Thu 27 Aug 2026 09:53:39 +0000
ROA not before:           Thu 27 Aug 2026 09:53:39 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150837
IP address blocks:        103.122.160.0/23 maxlen: 24
                          202.83.0.0/23 maxlen: 23
                          202.83.0.0/24 maxlen: 24
                          202.83.1.0/24 maxlen: 24
                          2400:f0a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27954 (0x6d32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 27 09:53:39 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a900923-1933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:a0:f9:81:72:dd:e7:ee:db:85:91:5c:87:
                    4d:01:98:ea:d2:15:bf:76:12:1a:e6:55:ee:98:b5:
                    5a:29:e3:ed:cc:4d:b9:48:fd:a1:3a:44:bb:08:49:
                    b4:72:98:5b:1b:82:91:4b:93:b5:56:15:f0:e8:18:
                    17:c6:bd:c3:8b:89:08:de:5e:57:cb:66:a6:96:46:
                    37:39:70:db:13:87:c1:db:61:66:36:68:88:03:87:
                    d6:a2:a8:a1:a7:08:06:bb:6b:4e:eb:87:e9:09:02:
                    87:e8:5f:1a:7e:2a:3e:39:74:23:d8:f3:81:07:04:
                    ad:b0:3e:17:23:b5:a3:be:27:7d:0d:80:55:0e:20:
                    80:8a:fb:bb:0d:b5:c0:1b:3a:4c:76:c7:d3:ec:6d:
                    7d:80:6e:fc:5b:8b:28:5e:ef:b4:0a:67:d4:a5:e7:
                    33:33:dc:df:f7:94:1e:9e:c6:18:c8:99:d9:b2:69:
                    38:16:50:17:c8:a1:9f:f3:0b:27:b4:c0:d5:57:fa:
                    61:76:42:7d:24:6d:2e:ae:3e:71:14:78:f8:ea:27:
                    cc:88:fa:e9:fe:a0:2c:fc:f8:82:da:89:be:6f:87:
                    41:ee:0d:d9:da:39:8c:29:07:d2:2e:19:2d:d0:88:
                    8e:43:25:6c:48:51:a5:2a:32:52:db:ad:ae:0b:e8:
                    1d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:89:13:57:2C:0D:80:68:54:E0:EB:BC:1C:26:4D:91:F9:76:9A:DF
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/14C244C85B0B11F0BA703652C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.160.0/23
                  202.83.0.0/23
                IPv6:
                  2400:f0a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:4a:10:0f:cc:30:3b:24:6f:d4:c4:94:4f:e9:77:af:ba:
         6f:f6:ac:42:03:24:c7:6e:6d:df:86:99:55:b3:27:1f:84:4a:
         48:fe:a3:3a:84:f5:79:82:2d:bb:96:1a:0b:6b:3f:0c:1f:8d:
         2c:53:1c:63:59:2d:35:9f:12:50:10:af:9d:50:a2:43:2d:8d:
         e2:06:26:1a:21:50:6c:ac:24:bf:8b:d5:02:8a:c3:11:3d:ef:
         2b:76:3b:4a:6f:b8:53:ab:34:56:32:3c:ac:45:d9:06:00:48:
         3b:9b:12:cf:9c:4b:07:e7:d6:c7:52:86:77:6e:d9:6b:4a:6f:
         8b:64:9d:6f:0a:3d:3a:ad:ae:f7:00:9f:c8:36:d8:73:57:f4:
         02:00:4b:9a:98:1b:fc:8a:8c:3b:38:4b:6b:09:0c:c0:4c:0a:
         dc:f8:b3:06:4d:2d:d8:92:14:da:ab:47:ae:c3:3b:e5:48:ba:
         a7:34:94:db:36:ce:79:77:d7:d8:18:30:e0:1f:80:41:2f:04:
         40:39:7c:8d:f0:d9:bf:b3:8d:1d:50:3e:45:92:6a:09:35:21:
         42:01:93:02:0a:39:00:9c:02:db:78:28:f6:58:8d:d4:e8:2a:
         4c:8c:d1:19:7f:28:27:b5:c3:aa:74:82:b3:71:8d:5e:ce:bf:
         87:de:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:40:35 2026 by rpki-client