Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31D2BFEE839311EE89CA110FC4F9AE02.roa
File:                     31D2BFEE839311EE89CA110FC4F9AE02.roa (raw, json)
Hash identifier:          p0mJjV49DXa702yJ09mdJEo2S3Wod2Sv4dQ8ax5BM2E=
Subject key identifier:   56:16:B5:7F:83:D0:78:84:74:FC:81:7C:9C:92:F7:5B:25:8E:5C:5F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E85
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31D2BFEE839311EE89CA110FC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:30:52 +0000
ROA not before:           Fri 02 Oct 2026 15:30:52 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151866
IP address blocks:        103.93.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28293 (0x6e85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:30:52 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfce2c-f1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:27:10:ba:f2:43:f9:93:74:22:51:72:cc:
                    fb:dc:ee:04:7a:f1:83:63:24:6e:af:3a:88:31:94:
                    65:40:ca:a4:f7:16:68:e9:af:d5:d4:fc:cf:dd:b6:
                    7a:1a:19:4c:e2:78:81:7a:30:59:b8:da:d8:fb:0f:
                    74:12:d4:03:de:2e:2d:28:37:f6:08:21:db:a6:d7:
                    59:21:4a:7b:10:77:30:e4:57:11:98:2e:60:ab:a3:
                    11:a2:d4:ea:13:98:28:bc:95:6b:c6:29:24:39:f3:
                    61:3b:da:50:0b:63:f3:68:fc:ad:cd:6f:bf:c5:2e:
                    b5:e0:5c:f5:db:02:e2:31:d6:e2:ec:47:b6:b9:b8:
                    f2:03:07:c7:f4:c0:b7:8b:6e:db:8f:8d:95:8b:b1:
                    a4:0c:bc:56:18:57:78:d4:25:ea:39:d5:a6:07:22:
                    94:cd:06:24:5c:54:cd:92:b9:81:bb:77:67:67:02:
                    6e:07:93:a9:b0:50:51:dc:d7:cf:90:16:63:b2:0c:
                    68:47:f5:9a:a4:d3:1c:a1:86:6d:3c:ee:e1:bd:ce:
                    42:85:6c:aa:a2:b0:04:3e:72:dc:9d:e6:21:74:c2:
                    4e:50:5e:9d:55:f7:c1:43:25:a4:00:3c:3c:29:2f:
                    00:bd:63:07:e0:60:fc:20:f8:7c:b4:c1:12:f8:7a:
                    91:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:16:B5:7F:83:D0:78:84:74:FC:81:7C:9C:92:F7:5B:25:8E:5C:5F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31D2BFEE839311EE89CA110FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:19:3d:be:34:50:1d:89:43:35:9d:49:dc:e5:12:d4:00:15:
         67:bf:57:18:9c:67:5e:a1:a1:91:16:13:5e:9e:7d:15:18:c8:
         a6:27:81:8e:f1:bf:a0:c1:cc:89:98:ac:90:55:3d:13:42:75:
         30:26:ef:f1:35:09:62:db:88:19:57:9a:a3:24:be:40:2c:0a:
         a5:b4:36:05:c5:e2:7e:98:14:32:e2:bb:7b:ab:41:e2:20:f8:
         65:8f:0c:a8:6e:33:60:80:56:17:f2:a9:38:ac:9c:af:35:24:
         94:53:b1:ee:a4:66:60:a7:4c:c5:9e:7b:11:6c:24:c7:70:a6:
         84:89:4f:24:d2:10:9d:30:e7:bd:c9:d3:cf:36:13:da:63:cc:
         54:61:98:96:24:8e:ed:f2:47:9b:19:2d:98:a5:6a:44:5c:a4:
         10:d3:c5:42:db:12:3e:ff:e9:e8:83:86:a1:73:00:d8:f0:89:
         e0:cc:f2:ff:c5:44:3a:ef:61:46:81:4f:da:5a:dc:63:9a:17:
         08:0f:dd:93:59:fa:82:ee:91:ce:94:0c:d4:3b:ab:10:18:a5:
         cb:f2:d8:1c:9e:b6:79:80:55:3d:24:cf:1d:22:0b:f4:d2:81:
         e2:8a:4b:c7:1e:da:e1:74:df:70:b6:b0:06:33:87:44:c7:b7:
         93:30:5c:d3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICboUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzMDUyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2UyYy1mMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqbonELryQ/mTdCJRcsz73O4EevGDYyRurzqIMZRlQMqk9xZo6a/V1PzP3bZ6
GhlM4niBejBZuNrY+w90EtQD3i4tKDf2CCHbptdZIUp7EHcw5FcRmC5gq6MRotTq
E5govJVrxikkOfNhO9pQC2PzaPytzW+/xS614Fz12wLiMdbi7Ee2ubjyAwfH9MC3
i27bj42Vi7GkDLxWGFd41CXqOdWmByKUzQYkXFTNkrmBu3dnZwJuB5OpsFBR3NfP
kBZjsgxoR/WapNMcoYZtPO7hvc5ChWyqorAEPnLcneYhdMJOUF6dVffBQyWkADw8
KS8AvWMH4GD8IPh8tMES+HqRAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFYWtX+D
0HiEdPyBfJyS91sljlxfMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzFEMkJGRUU4
MzkzMTFFRTg5Q0ExMTBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ11cMA0GCSqGSIb3DQEBCwUAA4IBAQBIGT2+NFAdiUM1nUnc5RLU
ABVnv1cYnGdeoaGRFhNenn0VGMimJ4GO8b+gwcyJmKyQVT0TQnUwJu/xNQli24gZ
V5qjJL5ALAqltDYFxeJ+mBQy4rt7q0HiIPhljwyobjNggFYX8qk4rJyvNSSUU7Hu
pGZgp0zFnnsRbCTHcKaEiU8k0hCdMOe9ydPPNhPaY8xUYZiWJI7t8kebGS2YpWpE
XKQQ08VC2xI+/+nog4ahcwDY8IngzPL/xUQ672FGgU/aWtxjmhcID92TWfqC7pHO
lAzUO6sQGKXL8tgcnrZ5gFU9JM8dIgv00oHiikvHHtrhdN9wtrAGM4dEx7eTMFzT
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:32 2026 by rpki-client