Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa
File:                     3442C35A995711ECA076C26CC4F9AE02.roa (raw, json)
Hash identifier:          zHJXuAqro19EEJQjqg2Rka+Yhm1gOEVR0ACBvww2Y1Y=
Subject key identifier:   F8:D2:9D:5E:98:4D:C3:2D:AD:37:19:5B:4D:FC:E1:3B:F7:F9:CD:B2
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6D6F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:21:43 +0000
ROA not before:           Fri 02 Oct 2026 15:21:43 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     131345
IP address blocks:        103.5.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28015 (0x6d6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:21:43 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc07-7565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:32:f1:62:8d:b1:2f:d2:d0:d2:60:17:61:
                    c1:28:32:62:60:a6:a9:4c:ca:66:98:e4:da:1a:44:
                    2e:d2:bc:38:48:0b:a1:c7:fc:aa:d2:1b:b5:fb:71:
                    88:08:3c:7f:78:4b:b1:59:bd:9a:9f:69:a7:7e:2d:
                    54:68:5d:49:6c:60:f1:64:51:d1:d3:73:9f:70:a9:
                    cf:7e:49:35:b9:ef:e1:e3:64:a0:e8:5d:f8:f3:8a:
                    64:74:6f:58:64:26:fd:5f:0b:48:45:32:10:8f:be:
                    53:75:45:b9:67:4e:fa:8e:6e:77:af:6d:e5:45:1d:
                    eb:31:a3:ae:1c:9a:b3:94:95:91:37:71:c1:0d:a4:
                    1a:ea:0e:1b:06:6f:e6:e0:51:e0:10:70:f5:ef:e0:
                    c8:d9:a0:1f:74:ba:99:ef:70:a4:8c:37:04:cc:02:
                    02:99:55:07:bd:90:6c:98:02:6d:11:c0:13:76:c1:
                    7c:a6:98:7e:7b:79:fe:3f:07:d0:0d:d7:78:a0:f4:
                    66:a7:dd:5a:51:e4:8a:43:64:a6:66:01:ae:4c:bb:
                    92:e1:7d:f7:ff:9c:0b:66:bb:fb:ed:4a:06:96:cb:
                    5c:27:4d:a0:2a:48:70:c4:e9:e3:b1:00:ab:3d:0a:
                    a3:94:51:cf:e6:29:70:0e:97:f7:20:f5:f4:1b:2e:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D2:9D:5E:98:4D:C3:2D:AD:37:19:5B:4D:FC:E1:3B:F7:F9:CD:B2
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:49:61:58:97:5c:1a:aa:e7:8c:fd:c5:f8:2f:6d:7d:6d:f0:
         5d:a5:fa:e3:25:97:15:c6:d6:06:cf:1e:23:64:03:07:f8:69:
         d9:90:06:fa:4f:53:5b:cd:7d:66:e9:5d:27:fa:b9:a7:37:b0:
         e0:6a:1c:5b:8a:d5:10:f3:6b:30:cd:07:54:59:00:ea:e2:fa:
         1d:65:5e:4c:6f:f9:5d:d3:49:68:c6:24:db:82:ef:16:79:ab:
         79:2b:a9:5e:8f:da:0a:12:55:a4:07:4f:23:40:ca:85:17:cc:
         cd:2d:13:fb:8a:09:07:8f:77:3a:04:37:30:20:8c:2a:f1:b6:
         10:fc:6b:29:6f:8b:7f:27:14:76:d8:4b:5e:0b:77:3e:36:fa:
         b2:c8:fb:07:f2:b9:58:e5:3a:93:8a:27:0f:9e:80:7d:ff:c2:
         2f:82:24:38:2d:f8:ef:e5:7c:5e:88:6c:49:d0:64:70:58:db:
         d1:73:34:e5:b8:de:d8:41:4e:0b:3a:fc:da:24:ad:85:f8:d4:
         a6:da:a9:56:5e:b7:d6:f9:cb:d9:82:ee:77:f1:5d:94:4e:95:
         72:fd:2c:fd:2e:de:95:8e:35:7d:a4:ed:20:76:e7:8a:6d:5e:
         0b:d3:aa:78:87:e8:b0:1d:2e:bb:ba:95:20:d3:1b:81:56:61:
         a6:5f:7c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:41 2026 by rpki-client