Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/33521546B7EB11ED9CF6A63EC4F9AE02.roa
File:                     33521546B7EB11ED9CF6A63EC4F9AE02.roa (raw, json)
Hash identifier:          pDVBdboR0oSKmT8nY3BqILxPwuejSum5XIGGuRys77o=
Subject key identifier:   F5:F3:41:ED:68:9B:32:38:CD:E1:15:3E:B3:5F:60:D6:70:9B:FB:3B
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E53
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/33521546B7EB11ED9CF6A63EC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:29:08 +0000
ROA not before:           Fri 02 Oct 2026 15:29:08 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150823
IP address blocks:        103.91.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28243 (0x6e53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:29:08 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcdc3-6632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:f9:eb:f7:7b:76:de:c1:31:12:ae:2c:b2:
                    51:ab:38:7d:ee:b6:99:16:65:ec:55:ad:30:a0:db:
                    65:a6:b2:31:26:00:f2:85:a0:8c:2b:31:0c:28:10:
                    0d:9f:6f:56:7a:61:1a:c3:a7:bc:0b:fd:84:4d:4b:
                    8a:5f:c9:1b:d5:16:86:74:b8:c1:c6:29:17:16:3e:
                    d6:61:1e:72:4f:1d:32:ee:09:27:23:7b:e0:24:4a:
                    49:52:4b:83:3f:fd:4b:13:03:a7:4e:3a:0f:e8:c2:
                    64:71:a3:d4:48:c1:03:89:0e:d3:cb:99:c1:14:4c:
                    bd:63:c7:5e:5b:c3:0a:29:29:0f:8a:44:49:d6:1a:
                    44:1d:da:79:d5:81:02:e0:f8:d2:28:ed:d1:24:bf:
                    f2:a0:65:ae:fb:43:ae:17:95:9a:22:53:56:c3:cd:
                    4e:73:8c:43:b7:ae:5d:f5:51:1a:63:a8:92:c4:5c:
                    0c:e9:cc:f4:a3:0f:58:60:9e:86:19:3b:67:2c:97:
                    e8:ac:25:ef:69:e1:c0:f6:9d:82:62:b3:2a:f1:d5:
                    e8:86:89:9e:cc:6c:47:4d:1b:da:a2:3e:fb:a4:2a:
                    98:96:cd:4b:fc:30:62:84:cb:63:1f:8a:46:bc:a8:
                    fb:3c:4b:ba:d8:13:5a:ba:61:7a:c5:42:bf:69:01:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F3:41:ED:68:9B:32:38:CD:E1:15:3E:B3:5F:60:D6:70:9B:FB:3B
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/33521546B7EB11ED9CF6A63EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:af:ce:8b:38:bc:97:ad:d1:ed:2b:7b:bc:ce:a6:fa:04:
         41:45:13:f5:4e:9e:c4:90:ea:38:62:cf:08:65:eb:e6:23:3b:
         8c:9e:ab:46:3f:0f:13:99:06:f9:8f:b1:b8:50:8b:61:da:29:
         79:e8:2b:cc:b3:ef:1c:18:b1:80:60:90:48:61:d5:54:7a:bf:
         b6:4f:f4:90:12:08:43:17:2f:04:e4:48:62:47:31:7d:09:4c:
         e0:31:93:b0:d4:e2:88:e7:11:10:4d:85:59:65:32:86:1a:78:
         5f:58:d9:f6:2c:07:f6:f7:95:ba:b1:e3:b1:a1:c2:16:14:54:
         8d:6b:d1:7d:a2:3c:54:d1:49:a6:14:6f:19:d0:7d:0d:74:9f:
         58:58:c4:00:74:a4:cd:c8:03:f2:56:70:cc:9c:fa:20:3e:c5:
         4b:86:57:7d:83:d3:e9:ad:35:81:40:f5:b8:24:f5:de:40:dc:
         69:94:20:bf:6e:87:0f:14:83:2e:34:80:a4:c0:18:bf:d4:60:
         ef:0b:8e:5a:6e:f6:86:f6:87:b1:a8:fa:d1:c0:d6:84:4b:fc:
         e3:82:c2:06:54:c1:e7:1c:fa:9b:42:dd:a1:59:90:e9:aa:e7:
         ab:61:a2:27:c2:5d:47:d2:7e:de:19:87:1e:be:f4:8c:c2:a6:
         73:d6:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:43:51 2026 by rpki-client