Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DF86322294A11EDA3C3AB44C4F9AE02.roa
File:                     3DF86322294A11EDA3C3AB44C4F9AE02.roa (raw, json)
Hash identifier:          BSwtPHcfgPXsskbVanlecS6NHo2M/E1WKPBvR45CGco=
Subject key identifier:   00:91:8B:7D:31:6E:F6:62:CE:06:0B:E8:2F:F5:DC:91:8A:C5:51:27
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E32
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DF86322294A11EDA3C3AB44C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:28:00 +0000
ROA not before:           Fri 02 Oct 2026 15:28:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149118
IP address blocks:        103.157.218.0/23 maxlen: 24
                          2406:a6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28210 (0x6e32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:28:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd7f-fd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5f:f4:74:fc:ab:1a:44:58:84:f3:d5:f2:d9:
                    a5:5d:e3:e4:32:e0:7e:4a:fc:48:ce:62:37:c8:ce:
                    c6:13:85:56:24:e1:b5:e8:4c:96:0b:66:46:5a:01:
                    9e:d6:ce:8b:5a:23:50:b0:68:27:8f:3b:85:f3:1d:
                    60:be:5a:29:d3:c5:a8:33:8a:72:e8:c0:0f:78:fd:
                    f0:0d:5c:83:72:4f:5c:86:53:3d:ff:43:19:c3:6a:
                    cf:14:00:6d:1e:5e:2f:56:aa:9d:57:25:c0:5e:1e:
                    e3:de:1a:b2:0e:9f:ec:9f:dd:20:1a:e0:22:37:69:
                    c0:c4:cb:e8:18:2d:cf:bb:a5:7b:f7:47:2b:3b:77:
                    5b:ad:48:1d:33:f9:3f:bb:97:bf:ae:1e:6b:ea:64:
                    99:ec:1d:ac:73:67:f9:5b:31:fe:40:4e:73:d5:2a:
                    d7:58:ce:e2:34:c9:a6:7f:19:86:8d:0a:37:81:74:
                    4a:45:19:de:45:90:8d:a3:d8:fb:41:44:72:45:48:
                    35:21:bd:71:7d:19:97:f7:54:bd:8e:ea:48:8b:41:
                    7f:e8:6d:83:00:bb:40:d5:39:79:66:a5:8a:77:44:
                    4d:28:a2:4d:c0:d0:cb:e6:36:fa:c5:0a:50:fa:43:
                    0d:3b:e5:af:3a:8b:7a:c3:6c:83:2e:b1:f0:e0:11:
                    6c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:91:8B:7D:31:6E:F6:62:CE:06:0B:E8:2F:F5:DC:91:8A:C5:51:27
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DF86322294A11EDA3C3AB44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.218.0/23
                IPv6:
                  2406:a6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:31:14:7f:38:7b:97:52:c3:52:52:d6:38:14:fe:02:d0:d3:
         9b:49:d2:90:fc:41:d1:b7:18:92:1c:45:88:48:19:de:89:54:
         62:11:91:ec:2f:02:a8:6e:ca:8c:4d:66:91:e3:c3:5b:2a:9c:
         0e:de:4e:e3:76:ea:2e:4e:cf:5b:66:5d:35:a4:49:a3:58:cf:
         a6:fb:7c:1a:ed:e5:3c:73:43:02:b3:7a:41:c8:48:2d:73:0a:
         d8:1e:96:a7:73:65:ff:7c:fe:24:80:21:6a:23:dc:d9:89:39:
         63:82:83:9d:53:48:93:62:60:79:64:a4:d5:8f:f7:fb:71:16:
         ba:85:1f:aa:a1:a3:57:c9:ea:67:42:b2:70:11:15:69:57:8a:
         6c:09:5f:eb:21:60:0b:90:76:c2:70:3b:b5:f2:f9:e5:42:05:
         8a:db:d9:c8:c2:de:1b:07:1a:c1:51:84:ec:75:56:6b:2b:0b:
         98:fb:9c:ec:a9:6c:3d:23:5b:6b:c6:bb:22:cd:ff:3d:01:e2:
         53:9a:cf:77:d7:7a:61:8a:84:03:43:e7:2c:90:cb:30:71:95:
         ed:5e:62:26:e8:28:58:f5:f2:90:ac:6b:05:6b:2f:44:b6:83:
         48:f1:a0:e7:bf:03:7b:7d:7d:9c:16:21:85:21:f6:9c:43:00:
         94:d2:b5:5d
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICbjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyODAwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Q3Zi1mZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkl/0dPyrGkRYhPPV8tmlXePkMuB+SvxIzmI3yM7GE4VWJOG16EyWC2ZGWgGe
1s6LWiNQsGgnjzuF8x1gvlop08WoM4py6MAPeP3wDVyDck9chlM9/0MZw2rPFABt
Hl4vVqqdVyXAXh7j3hqyDp/sn90gGuAiN2nAxMvoGC3Pu6V790crO3dbrUgdM/k/
u5e/rh5r6mSZ7B2sc2f5WzH+QE5z1SrXWM7iNMmmfxmGjQo3gXRKRRneRZCNo9j7
QURyRUg1Ib1xfRmX91S9jupIi0F/6G2DALtA1Tl5ZqWKd0RNKKJNwNDL5jb6xQpQ
+kMNO+WvOot6w2yDLrHw4BFsHQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFACRi30x
bvZizgYL6C/13JGKxVEnMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0RGODYzMjIy
OTRBMTFFREEzQzNBQjQ0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ53aMA8EAgACMAkDBwAkBqbAAAAwDQYJKoZIhvcNAQELBQADggEB
AFMxFH84e5dSw1JS1jgU/gLQ05tJ0pD8QdG3GJIcRYhIGd6JVGIRkewvAqhuyoxN
ZpHjw1sqnA7eTuN26i5Oz1tmXTWkSaNYz6b7fBrt5TxzQwKzekHISC1zCtgelqdz
Zf98/iSAIWoj3NmJOWOCg51TSJNiYHlkpNWP9/txFrqFH6qho1fJ6mdCsnARFWlX
imwJX+shYAuQdsJwO7Xy+eVCBYrb2cjC3hsHGsFRhOx1VmsrC5j7nOypbD0jW2vG
uyLN/z0B4lOaz3fXemGKhAND5yyQyzBxle1eYiboKFj18pCsawVrL0S2g0jxoOe/
A3t9fZwWIYUh9pxDAJTStV0=
-----END CERTIFICATE-----
Generated at Sat Oct 24 17:31:10 2026 by rpki-client