Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27691222639111EFB1DD9C4AC4F9AE02.roa
File:                     27691222639111EFB1DD9C4AC4F9AE02.roa (raw, json)
Hash identifier:          jL8JBllQSS7Lq3XCN7MF/IPrjlSKpUssawQHgCXNfGE=
Subject key identifier:   2B:6B:14:10:DA:29:75:0C:66:78:5C:BD:74:E2:E5:5B:A9:31:97:9C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E69
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27691222639111EFB1DD9C4AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:18:05 +0000
ROA not before:           Thu 28 Aug 2025 14:55:15 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150846
IP address blocks:        103.110.128.0/23 maxlen: 23
                          2401:4e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24169 (0x5e69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:15 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c9d-740d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:67:c0:9e:15:bf:89:0b:9e:11:4d:9e:ad:
                    e5:b7:48:4d:ae:26:d1:78:a2:d2:da:65:9e:eb:57:
                    76:ef:68:45:58:68:21:24:b9:fc:44:d0:7b:95:a6:
                    37:20:f6:59:97:46:ed:42:40:81:44:40:96:eb:66:
                    5a:70:08:fb:71:0d:8d:19:70:0b:f9:c2:20:02:4d:
                    c9:21:f8:7c:a1:de:50:f2:4b:01:be:52:0f:1c:e0:
                    78:46:44:42:64:1b:1a:fe:bb:ad:66:b1:89:ca:d8:
                    be:f9:da:79:db:8d:1e:55:bc:86:18:59:b8:6a:22:
                    7e:ff:cb:c1:b7:8b:89:41:cf:fc:d8:3f:4b:8d:89:
                    e6:d2:cf:b2:5f:49:f8:7d:ba:d3:a0:85:de:53:ab:
                    91:af:30:23:00:f8:66:0b:bd:16:df:4a:b4:1b:48:
                    c1:e1:fa:d7:e9:77:c7:ec:8a:db:75:92:73:be:43:
                    6b:bf:b1:5f:ca:95:38:32:05:3b:46:25:06:0f:97:
                    92:38:42:d5:ee:03:72:43:f5:05:ab:f3:58:8a:93:
                    6a:8f:da:1c:d6:dd:50:47:8f:ab:5c:29:c1:a8:cc:
                    b7:7a:8b:4f:87:a7:a4:ca:9d:b4:2b:5f:b2:c0:2b:
                    a2:93:fc:68:38:b3:50:7c:ba:01:d9:a1:ff:21:f4:
                    d6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6B:14:10:DA:29:75:0C:66:78:5C:BD:74:E2:E5:5B:A9:31:97:9C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/27691222639111EFB1DD9C4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.128.0/23
                IPv6:
                  2401:4e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:a3:a0:13:f2:f9:97:86:dd:d4:47:61:5c:6f:76:06:f5:
         b2:8f:96:f8:cb:7b:3a:aa:d4:3a:a2:c7:ee:ed:10:66:4f:c4:
         db:ed:16:3f:8a:58:d4:6d:98:7e:61:dc:2e:b3:c1:94:41:9c:
         98:fd:ab:53:4c:74:93:73:6d:06:a7:d7:4d:8a:ae:e8:ef:77:
         50:70:a3:1a:44:9f:8f:55:42:fe:62:a1:c8:15:dd:9d:6c:30:
         6a:be:35:1b:14:15:95:49:f4:18:20:73:b4:c7:92:bc:df:cf:
         1a:4a:f9:c6:c4:c3:a3:29:26:12:e4:f5:0d:4b:82:c2:2b:38:
         cf:a6:2c:ec:06:b4:51:f6:1d:c4:31:f9:ff:f4:81:ae:31:db:
         b7:75:71:e7:5e:47:ce:b3:56:76:09:08:89:99:ea:b4:82:a1:
         da:0f:bc:03:0c:df:7b:f0:ca:5e:9d:82:55:fa:17:85:5d:63:
         5a:d5:9f:e6:d0:28:c2:ee:53:86:4c:15:84:a4:66:c5:d4:d8:
         7a:23:8a:af:bf:a0:9c:bb:c6:12:6d:9e:8d:58:a7:fa:2c:3f:
         a4:47:72:8f:f2:d1:75:aa:bc:bf:b5:38:d5:9f:b1:06:6e:62:
         d3:2a:2c:ef:46:69:3b:79:b5:82:ca:59:39:52:b9:a1:51:4e:
         60:43:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:43 2026 by rpki-client