Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
File:                     42823846037411EEB6D5D751C4F9AE02.roa (raw, json)
Hash identifier:          q1Bn8WUxq4a+2QAKNTZo0RllanLGFsjVSRncqUjv1MU=
Subject key identifier:   E3:4E:4D:86:84:96:67:77:C1:1C:7C:51:07:77:B8:11:F7:70:23:1D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E2B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:27:45 +0000
ROA not before:           Fri 02 Oct 2026 15:27:45 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149105
IP address blocks:        103.145.2.0/23 maxlen: 24
                          103.188.80.0/23 maxlen: 24
                          220.158.134.0/23 maxlen: 24
                          2400:8160::/48 maxlen: 48
                          2405:73c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28203 (0x6e2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:27:45 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd71-20ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:e3:2f:4a:ef:26:bf:99:a1:91:3e:5c:95:
                    26:50:99:8d:f2:c1:48:d7:08:d2:84:4e:51:1b:97:
                    6e:b5:d9:e4:b5:4d:d8:bd:92:36:98:1d:92:93:d1:
                    da:d3:20:21:5d:a9:3b:81:18:4b:40:9e:98:bf:d7:
                    e4:a4:e6:cb:4c:13:50:f7:ed:8e:7f:3a:da:b2:f6:
                    f0:bf:b7:a6:42:47:64:1a:2c:17:03:df:1f:bb:b7:
                    f5:a4:ad:54:62:06:d6:d0:29:b8:16:6b:96:e0:00:
                    c7:f1:b2:8a:e7:96:97:a8:42:bc:55:1c:ac:60:ee:
                    e2:a7:b1:05:70:8e:d4:87:38:bc:97:00:0d:ac:c5:
                    95:05:36:a5:02:87:76:62:5d:7b:1b:76:b7:75:9d:
                    ee:5d:85:ce:03:ba:66:f1:c9:a8:62:dd:ac:4d:ec:
                    f9:da:56:2c:d5:81:49:10:5c:7f:cc:98:28:fb:db:
                    3b:ce:05:9a:16:54:17:9d:e2:d1:bb:b3:74:4a:ad:
                    3d:27:28:78:cc:3f:54:d6:60:2b:e3:5a:5d:95:b5:
                    98:b0:74:95:ed:12:e0:9e:83:27:58:01:9a:ee:12:
                    01:0f:db:a9:0f:42:e9:95:9f:ad:7f:27:15:94:33:
                    57:db:ed:b4:d5:53:0f:eb:4d:54:f0:3b:5c:db:05:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4E:4D:86:84:96:67:77:C1:1C:7C:51:07:77:B8:11:F7:70:23:1D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.2.0/23
                  103.188.80.0/23
                  220.158.134.0/23
                IPv6:
                  2400:8160::/48
                  2405:73c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:d0:71:ec:58:60:af:34:8f:59:ed:2f:53:19:bd:15:87:61:
         49:20:a5:5e:8b:49:54:78:6f:71:a2:ba:39:e4:9d:9f:c7:b8:
         c5:4d:b7:bf:bf:b2:e2:25:ee:cf:4d:01:2b:37:56:a3:47:a2:
         f9:b2:22:69:ea:0c:54:a0:c8:d1:d4:19:e4:8c:ce:c1:ba:a9:
         2f:65:8e:d9:f0:18:7e:e3:78:7b:ba:0c:c0:91:fb:28:cd:50:
         b3:02:74:ab:29:6e:8d:b5:79:a1:d9:08:ed:87:a6:00:b9:7a:
         01:49:ed:a2:bb:88:16:87:a8:ec:4f:9d:9e:d9:54:d3:f0:bc:
         a3:1e:d6:8f:9a:c2:d5:82:41:60:3c:f8:fb:e7:20:0c:4d:17:
         4a:0a:84:ce:38:ff:b3:d4:be:3a:9a:01:7a:9d:e7:39:b2:26:
         68:33:c9:de:4d:ce:39:ec:39:a2:dc:02:6a:7a:c4:aa:4f:dc:
         66:f6:8f:2e:11:06:bc:eb:7c:da:14:34:5d:80:58:94:4d:58:
         2c:36:9e:f8:6e:ae:d5:2f:81:87:80:7e:2a:c4:6f:aa:7c:eb:
         2f:4e:eb:b3:19:82:3d:f0:21:f3:72:9d:0d:a3:71:0c:76:32:
         b9:7f:2a:a8:cc:66:3d:12:b5:d4:de:08:c5:7f:16:5e:19:a1:
         af:b3:c1:78
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgICbiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyNzQ1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Q3MS0yMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArIjjL0rvJr+ZoZE+XJUmUJmN8sFI1wjShE5RG5dutdnktU3YvZI2mB2Sk9Ha
0yAhXak7gRhLQJ6Yv9fkpObLTBNQ9+2Ofzrasvbwv7emQkdkGiwXA98fu7f1pK1U
YgbW0Cm4FmuW4ADH8bKK55aXqEK8VRysYO7ip7EFcI7Uhzi8lwANrMWVBTalAod2
Yl17G3a3dZ3uXYXOA7pm8cmoYt2sTez52lYs1YFJEFx/zJgo+9s7zgWaFlQXneLR
u7N0Sq09Jyh4zD9U1mAr41pdlbWYsHSV7RLgnoMnWAGa7hIBD9upD0LplZ+tfycV
lDNX2+201VMP601U8Dtc2wVI5wIDAQABo4IChjCCAoIwHQYDVR0OBBYEFONOTYaE
lmd3wRx8UQd3uBH3cCMdMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDI4MjM4NDYw
Mzc0MTFFRUI2RDVENzUxQzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAY
BAIAATASAwQBZ5ECAwQBZ7xQAwQB3J6GMBgEAgACMBIDBwAkAIFgAAADBwAkBXPA
AAAwDQYJKoZIhvcNAQELBQADggEBAKLQcexYYK80j1ntL1MZvRWHYUkgpV6LSVR4
b3GiujnknZ/HuMVNt7+/suIl7s9NASs3VqNHovmyImnqDFSgyNHUGeSMzsG6qS9l
jtnwGH7jeHu6DMCR+yjNULMCdKspbo21eaHZCO2HpgC5egFJ7aK7iBaHqOxPnZ7Z
VNPwvKMe1o+awtWCQWA8+PvnIAxNF0oKhM44/7PUvjqaAXqd5zmyJmgzyd5Nzjns
OaLcAmp6xKpP3Gb2jy4RBrzrfNoUNF2AWJRNWCw2nvhurtUvgYeAfirEb6p86y9O
67MZgj3wIfNynQ2jcQx2Mrl/KqjMZj0StdTeCMV/Fl4Zoa+zwXg=
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:27:09 2026 by rpki-client