Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/327A1D78812611F1838CF11F75A30FBC.roa
File:                     327A1D78812611F1838CF11F75A30FBC.roa (raw, json)
Hash identifier:          FvqWeM6LlMJjRB/iVFhQBIYJZAyS/8nD82Sg5Jmq8PE=
Subject key identifier:   51:D4:AA:66:24:1A:58:DB:28:57:DF:7F:73:2C:D5:0B:F2:BB:40:26
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E8E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/327A1D78812611F1838CF11F75A30FBC.roa
Signing time:             Fri 02 Oct 2026 15:31:19 +0000
ROA not before:           Fri 02 Oct 2026 15:31:19 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151898
IP address blocks:        103.162.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28302 (0x6e8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:31:19 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfce47-5dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:95:bb:d7:b4:7d:7f:18:93:83:d5:6b:74:
                    83:47:ef:3c:97:f2:f4:d8:71:2f:2b:84:09:12:47:
                    02:29:95:44:3f:af:8d:7e:7f:90:6b:3c:37:a5:3e:
                    01:fe:2a:67:86:1d:ed:bc:90:81:d0:e0:f2:4f:f7:
                    26:59:12:cd:f1:69:51:c4:6d:79:96:ac:cc:d7:1e:
                    ae:a7:ce:57:bc:bc:22:07:71:73:cf:95:d9:91:da:
                    5d:89:68:8a:2e:f9:cf:44:47:74:8f:8c:3b:c7:b7:
                    4b:ac:ba:01:80:4b:3e:ec:5a:22:f1:1b:4f:7f:47:
                    9e:56:01:ce:48:a2:92:54:bb:d7:bc:66:a0:63:9a:
                    0d:a0:2a:b2:ec:05:39:4b:13:c5:5a:e7:21:54:30:
                    3a:98:54:35:1b:be:01:60:f8:51:5d:80:65:c8:53:
                    2e:e0:0b:da:b4:5a:02:34:6f:5d:30:dd:d3:1d:9a:
                    00:8a:33:7e:1c:a0:71:88:f3:21:6a:ba:a1:2a:2a:
                    d2:a6:0b:fb:26:9c:0c:87:70:d2:a3:f5:86:b0:91:
                    fe:71:b9:11:ca:12:c9:5a:09:9f:79:61:45:c3:b3:
                    bf:5e:c9:a3:3d:15:fd:7d:05:15:ea:b1:9c:ad:c7:
                    87:27:73:b9:68:93:a3:17:0a:82:cc:30:28:79:6b:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D4:AA:66:24:1A:58:DB:28:57:DF:7F:73:2C:D5:0B:F2:BB:40:26
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/327A1D78812611F1838CF11F75A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:04:df:ab:6a:f3:e2:be:80:fc:b1:cd:db:23:8d:93:04:64:
         6a:6e:68:27:9d:a1:3f:f3:f3:a4:94:bc:43:ee:43:f0:64:ab:
         68:56:75:2c:ce:bf:40:ba:bd:2b:b8:ec:17:e7:d4:d2:e1:40:
         7b:68:93:8d:f7:a5:18:35:d3:e7:44:94:03:67:85:92:69:9b:
         a0:19:db:b3:39:d9:a0:77:80:42:81:20:32:50:86:13:e3:21:
         d1:30:8c:78:61:7e:ec:14:a9:03:da:42:b5:04:60:82:eb:0f:
         9c:f9:30:32:f7:92:fa:cb:34:d1:d4:e7:b0:90:5e:0f:c8:b2:
         20:9a:e0:45:b7:b6:95:db:c2:f3:c3:9e:dc:03:04:a2:65:67:
         5c:91:c4:6e:c1:54:49:42:50:48:87:6f:ba:da:2c:2d:7f:81:
         a8:75:b2:28:e5:8e:0e:fa:38:7c:b5:ac:5f:ac:d1:79:06:be:
         e6:8c:f3:6a:5c:2c:39:58:a8:64:9e:5e:e2:81:0f:0c:e2:3f:
         ac:54:90:e2:44:59:83:69:35:91:88:4e:1d:50:9f:0a:99:bc:
         e5:36:a6:71:91:53:35:02:ad:dc:da:38:77:ad:d5:a6:62:2c:
         23:bb:9f:94:44:7e:d5:40:53:27:d0:bd:b2:1b:67:2d:56:76:
         f7:d9:a5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:54:57 2026 by rpki-client