Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/363488288FE911EC93CC6910C4F9AE02.roa
File:                     363488288FE911EC93CC6910C4F9AE02.roa (raw, json)
Hash identifier:          gDDWQzvXfeDIftckklZzGOxiEyw7BKUx5ny/YmkEik8=
Subject key identifier:   3D:3E:C0:96:9F:60:B2:51:52:6A:FF:F1:F4:C5:3B:88:A8:A8:0F:7C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6D8F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/363488288FE911EC93CC6910C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:22:49 +0000
ROA not before:           Fri 02 Oct 2026 15:22:49 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     131403
IP address blocks:        45.119.108.0/22 maxlen: 24
                          103.254.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28047 (0x6d8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:22:49 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc49-8593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:8b:83:3c:14:d7:d9:d7:78:d3:57:10:08:
                    15:c3:61:02:85:68:1a:82:56:71:76:42:08:25:38:
                    7d:dd:78:b1:9b:1d:c8:de:52:b2:59:0c:3a:a6:b4:
                    db:a8:d0:42:05:1f:38:c6:56:7f:97:e2:fc:ff:52:
                    59:cf:13:e7:0d:57:aa:a8:11:04:ea:ce:22:58:96:
                    21:5a:a2:4c:6a:eb:f3:27:81:7b:88:13:04:68:69:
                    d7:87:d8:39:15:96:04:32:4b:7f:76:ef:4e:2b:b4:
                    cd:59:26:ac:8b:96:b2:de:6c:16:ce:48:b3:3e:b8:
                    44:c3:9c:0b:55:95:a1:9f:37:f7:3d:8c:f4:ac:8b:
                    c0:8a:78:ed:42:97:9b:b9:de:d0:61:1e:07:a1:d3:
                    e0:62:35:74:5b:07:48:ae:09:f4:38:5c:da:2e:c3:
                    3a:d3:63:d5:75:c2:90:c3:4a:32:15:64:ef:bf:a2:
                    64:ae:eb:f7:0a:d2:db:1b:e2:6c:61:1a:12:33:99:
                    c9:ee:6f:a9:bc:26:47:a1:56:c7:e3:2b:78:eb:0d:
                    7c:00:0b:5c:97:ed:d2:c9:4a:4d:62:51:6f:7c:ac:
                    c4:15:b4:2b:7c:a2:4e:f4:03:99:cf:49:4f:8d:9a:
                    55:8e:f8:d9:8a:8d:d5:93:00:02:e0:67:c4:c8:df:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3E:C0:96:9F:60:B2:51:52:6A:FF:F1:F4:C5:3B:88:A8:A8:0F:7C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/363488288FE911EC93CC6910C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.119.108.0/22
                  103.254.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:66:bc:03:5e:a0:f9:6e:e3:e0:62:63:9c:e6:a0:5a:1f:7d:
         39:5e:02:9d:78:a4:88:04:1d:c9:23:ab:8f:d7:61:07:bc:6c:
         cb:82:70:e0:1f:81:01:bc:fd:06:b8:f0:53:1d:fb:64:91:3b:
         b9:ad:47:13:a6:ba:ba:e7:d6:81:41:59:4c:57:e5:13:86:b2:
         91:ea:62:46:17:fc:bd:be:05:4d:62:3d:4a:40:ea:3f:94:b8:
         e9:26:05:4c:03:c1:0f:50:6a:1e:5e:d5:23:6c:22:8e:51:12:
         3b:dc:9e:40:11:b0:e6:8d:61:12:ac:dd:8b:02:8f:fc:e1:6f:
         43:89:f7:71:25:97:db:d9:38:e0:25:9a:12:63:18:08:5e:87:
         05:ff:0b:99:68:5e:4b:c6:33:e7:6c:cd:eb:bf:e7:98:21:ca:
         f5:26:db:2c:d0:10:56:16:91:33:c4:8f:03:d4:10:10:7c:cc:
         6f:d4:ac:bd:a6:8c:19:ed:86:f2:0d:5c:a9:00:4a:1e:48:7e:
         43:67:72:4d:7a:a9:0b:06:eb:a4:35:6f:9a:4d:48:9e:46:34:
         d8:17:ea:a6:f3:fa:6f:0f:0a:72:93:6e:cb:d1:6d:fd:13:c1:
         74:d1:df:fd:46:29:76:c0:5d:a9:5c:21:e9:d4:0c:35:5f:40:
         1d:29:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:32:54 2026 by rpki-client