Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27691222639111EFB1DD9C4AC4F9AE02.roa
File:                     27691222639111EFB1DD9C4AC4F9AE02.roa (raw, json)
Hash identifier:          iBjxxqTPqNk8JrX4TXn/Ahi7u5c/BjyB59/aFMkaxz4=
Subject key identifier:   15:34:3E:1D:55:F7:28:13:67:45:EF:0B:54:CD:A5:A7:6F:CD:F2:97
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E5D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27691222639111EFB1DD9C4AC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:29:29 +0000
ROA not before:           Fri 02 Oct 2026 15:29:29 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150846
IP address blocks:        103.110.128.0/23 maxlen: 23
                          2401:4e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28253 (0x6e5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:29:29 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcdd9-bdee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:10:5b:cc:64:85:64:65:ee:2f:77:63:c9:
                    da:d3:8f:e8:c0:05:0e:1c:15:2f:65:df:3d:5b:a5:
                    3d:d1:15:d9:03:e7:44:73:e7:1d:2c:e8:11:9e:02:
                    2f:a6:ca:76:65:e6:89:c0:2a:14:44:5e:72:28:66:
                    3c:a9:1b:85:0e:0a:3f:cb:33:40:83:5b:8d:69:e4:
                    78:97:b7:1f:6f:fa:82:41:fb:cc:66:88:03:9c:a9:
                    88:68:f9:c9:57:99:fa:a7:ee:17:4a:31:ec:8d:93:
                    ff:fd:2e:28:af:d4:cd:b1:35:e1:49:91:d0:21:cf:
                    e5:b9:c1:48:34:52:ec:3b:ed:06:60:21:e0:1d:99:
                    4a:fe:ac:95:24:2d:ea:89:51:a4:c5:14:96:05:6e:
                    bc:6a:c9:90:23:1f:33:e1:81:b7:1a:09:4a:5b:ef:
                    5a:0c:88:4e:79:9b:e9:b3:0d:73:55:65:d0:b3:12:
                    ad:f8:8d:d4:a3:fb:6d:a5:11:6b:62:8f:1e:26:99:
                    8d:3c:a2:8a:88:82:49:40:5e:d6:a4:a2:79:ee:d1:
                    3c:5e:19:d1:6c:9d:69:53:a2:0f:5f:a2:22:22:35:
                    cd:53:05:3c:de:b7:81:24:a0:21:54:cb:b7:b0:e1:
                    b0:4d:10:0a:29:19:da:84:a6:13:81:50:2d:aa:ed:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:34:3E:1D:55:F7:28:13:67:45:EF:0B:54:CD:A5:A7:6F:CD:F2:97
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27691222639111EFB1DD9C4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.128.0/23
                IPv6:
                  2401:4e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:33:e5:53:6a:b4:12:f8:66:0f:c1:b6:ff:23:20:5b:45:
         35:5f:02:55:85:67:fe:be:34:d6:b9:71:63:5d:dd:dd:51:68:
         ea:e0:bb:c5:3e:dc:a2:b3:03:59:6e:b0:71:b8:6c:d1:b8:97:
         20:a5:7e:cc:78:da:2e:87:3f:49:c3:c8:f7:41:bb:c6:3c:23:
         db:fb:27:9e:0b:34:f6:ea:db:df:ab:83:13:3e:62:c0:26:09:
         25:ad:19:d7:9f:c0:04:8d:31:a2:68:af:1c:10:88:fe:ac:8b:
         a2:ee:d0:c9:f7:10:da:61:ee:72:41:6b:b8:0b:70:6e:9e:09:
         e8:9a:67:bf:44:e8:7f:23:0e:d8:cc:02:49:0a:fc:98:7f:fa:
         5a:0f:ba:5b:d2:6b:dd:2a:4f:42:ce:82:d3:93:9d:11:86:51:
         bd:d1:a7:31:fb:66:fe:4f:b8:ca:12:de:52:b7:32:cf:e7:fc:
         b0:fa:39:c5:84:a3:29:fb:62:85:52:60:24:50:06:14:a7:58:
         dc:9f:ae:47:0e:25:27:a4:fe:4c:00:e0:9d:39:db:33:a8:57:
         a1:cd:54:84:fe:90:e0:c6:d9:81:12:56:d5:f3:14:5c:20:4f:
         c0:7f:91:d8:f9:45:9e:55:7e:95:47:a2:12:e7:e9:b8:60:e2:
         50:d1:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:51 2026 by rpki-client