Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1794D7BE59F011EFB54F044AC4F9AE02.roa
File:                     1794D7BE59F011EFB54F044AC4F9AE02.roa (raw, json)
Hash identifier:          WcNZKBQEZM1geAocNxhU5bmfcFrI4ioc5U33gvZXSP4=
Subject key identifier:   5E:20:A3:A5:52:C3:9B:09:2A:99:47:FA:C5:79:16:88:54:B6:CB:5B
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6D84
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1794D7BE59F011EFB54F044AC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:22:26 +0000
ROA not before:           Fri 02 Oct 2026 15:22:26 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     131383
IP address blocks:        103.26.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28036 (0x6d84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:22:26 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc32-cdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:38:d1:9d:0d:03:ac:5b:49:48:04:ae:9e:
                    11:41:58:19:df:62:f9:1a:7d:56:08:e8:ed:2b:73:
                    d0:30:a6:bd:72:cb:f7:11:e2:c0:16:53:b8:8c:79:
                    71:1a:b9:08:b4:2e:64:56:c7:c1:90:6c:fa:c5:4e:
                    5c:15:15:99:57:13:2e:73:68:78:bc:0c:14:ed:72:
                    64:65:39:ad:e4:5c:79:39:77:90:26:d4:f4:05:39:
                    ee:10:26:09:78:59:fd:b2:1e:79:81:87:ae:e5:50:
                    fe:c7:54:7d:0f:ef:5d:d1:ac:2b:48:09:57:60:3e:
                    e5:b4:7f:27:a0:08:21:ac:ec:01:12:89:2b:98:c8:
                    8b:d8:5e:8a:c0:30:d3:a7:30:b0:c0:2c:67:7a:65:
                    9a:8d:3b:2c:97:df:16:fe:00:e9:81:cb:b4:a9:c2:
                    f2:64:4f:63:16:c9:c5:94:3f:e1:92:96:24:91:e4:
                    8a:f8:6a:b9:7a:b6:6a:9e:b2:b1:d6:a9:9d:32:0a:
                    ed:77:83:18:2d:60:34:c4:39:ab:6d:8e:13:ba:3e:
                    8c:7f:13:e9:4d:dd:e1:40:20:af:ef:59:90:35:8e:
                    fc:48:41:56:89:96:fd:3f:fc:49:0f:ba:80:be:a6:
                    39:13:2b:7a:75:f6:19:8d:5c:02:4f:c5:ce:16:40:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:20:A3:A5:52:C3:9B:09:2A:99:47:FA:C5:79:16:88:54:B6:CB:5B
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1794D7BE59F011EFB54F044AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:e3:c6:1a:35:55:10:c9:82:19:4a:dc:84:04:d2:c3:4c:75:
         98:d4:28:99:37:01:80:d1:36:1c:ce:48:5c:82:52:37:cd:5c:
         08:c1:95:f9:a3:20:23:46:2e:50:ff:fd:1c:00:78:e8:22:dc:
         ce:f4:67:43:d2:0e:84:83:c7:a8:f2:07:47:6c:b6:98:8f:6b:
         7a:33:7c:b8:2a:67:c4:14:8f:62:04:49:80:b7:1b:c5:d8:a7:
         38:6b:a3:e2:34:63:14:b1:1b:c7:c0:b6:03:7d:52:80:7d:6a:
         a7:71:bf:8a:13:ab:ec:fe:2a:28:12:28:27:1b:cf:ab:ac:67:
         45:0b:4e:17:7a:16:ce:94:4c:7b:f9:5c:fb:33:d1:86:bb:a4:
         e4:75:cf:8c:48:31:2d:35:b0:08:a5:a5:40:0d:c4:4c:cc:08:
         8c:bb:cd:2a:d0:2a:7b:69:4f:81:30:c3:06:7a:c9:30:bb:eb:
         07:a1:10:66:85:8b:6a:0d:7d:da:33:c2:02:30:04:ca:82:d4:
         73:9f:c1:1c:ac:ba:4a:22:76:b6:8c:f8:c0:61:96:c4:eb:e6:
         1b:00:a2:a6:d7:b7:7d:57:59:79:22:24:69:7e:d1:af:75:90:
         d7:b0:96:20:a4:41:05:97:0d:84:76:a7:65:38:8b:2e:97:8c:
         20:e1:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:53:00 2026 by rpki-client