Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42F648D0065011EC810A267BC4F9AE02.roa
File:                     42F648D0065011EC810A267BC4F9AE02.roa (raw, json)
Hash identifier:          djBIFtRf/8MVqPHWh4aMOYDdyRRta2BVE3UIMR3TUQA=
Subject key identifier:   26:30:2A:79:37:ED:85:F2:E8:DC:66:93:53:5C:3B:98:64:3F:BB:B5
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E0C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42F648D0065011EC810A267BC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:26:49 +0000
ROA not before:           Fri 02 Oct 2026 15:26:49 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140823
IP address blocks:        103.171.216.0/23 maxlen: 24
                          2407:c840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28172 (0x6e0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:26:49 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd39-0fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0a:ba:31:5d:36:4c:59:5e:a2:53:37:db:68:
                    2f:e0:31:56:96:80:e5:b6:93:38:ce:5f:a3:63:f9:
                    8e:a3:4a:34:6c:76:3d:84:1e:d7:1c:c0:fe:dc:37:
                    74:f4:06:72:37:df:ca:6b:00:f7:6f:5d:85:77:87:
                    86:09:e4:eb:52:cf:3f:d8:32:8a:8b:f5:f0:6c:b5:
                    fb:19:2e:da:5b:90:bd:08:32:5f:d1:51:6b:5c:dd:
                    8b:1f:5c:10:d2:a1:ee:a9:41:66:2c:92:11:43:67:
                    bc:2b:ea:4f:5e:c3:8d:32:84:dc:23:c0:a2:72:19:
                    fd:bd:0d:34:f7:a6:fb:d1:87:5e:25:49:c9:0f:82:
                    e1:53:7b:18:74:51:b7:7b:c3:9a:a7:5c:c4:f5:05:
                    d6:92:1a:5e:8d:1c:78:57:9a:05:53:36:7d:d1:fe:
                    c5:ce:98:0b:ef:d3:d8:50:bf:44:6b:c4:53:08:5f:
                    44:80:6e:f0:bd:cd:d2:ed:c3:9f:49:fb:07:26:f5:
                    f7:30:d3:1f:9a:4d:27:05:d9:82:3d:d5:cc:bc:28:
                    75:6e:f3:7c:d8:c0:d9:4a:56:40:9a:96:dd:b4:2a:
                    94:69:08:06:6c:27:c0:bc:7b:9d:be:60:75:23:bb:
                    4d:f6:c2:80:cf:6f:bc:be:1e:c3:e4:3e:55:5b:ab:
                    a6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:30:2A:79:37:ED:85:F2:E8:DC:66:93:53:5C:3B:98:64:3F:BB:B5
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42F648D0065011EC810A267BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.216.0/23
                IPv6:
                  2407:c840::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:a0:7e:b6:b6:28:57:1b:29:52:87:01:e3:95:b3:0d:1a:1d:
         28:18:b0:15:79:cd:0f:0c:15:0a:5c:69:c4:a8:0e:2b:19:6e:
         2c:51:ab:86:a9:da:81:07:1d:05:32:d0:f4:8f:49:1b:80:e2:
         f0:34:82:9a:1e:2e:81:83:2c:67:e4:3a:f3:87:33:70:00:85:
         97:b8:ab:a0:8b:4a:9f:16:99:01:3b:4e:45:72:82:09:76:c8:
         ff:3f:d2:41:1f:f1:ff:d9:f4:10:2c:c9:01:90:77:97:e2:36:
         c7:dd:22:c7:4a:75:ae:fd:c5:a9:8d:f8:a8:1d:88:3d:0d:1a:
         b8:b8:70:51:c8:6c:e5:b4:3f:b1:fd:ef:1c:26:fc:49:ab:88:
         c8:63:b7:a5:e1:fc:8d:fe:ca:38:be:b2:0b:01:44:ea:d2:01:
         8d:97:ea:71:12:11:75:f8:92:7a:88:a4:8b:a9:80:2c:34:dd:
         b7:37:f2:15:b4:53:88:f1:5e:25:c8:0e:be:a0:d5:42:e3:53:
         11:f7:47:ba:ac:04:1f:b4:f0:2c:51:6a:4c:63:80:d7:e9:bd:
         cb:1b:ce:41:9c:a3:03:01:11:e0:66:82:7b:34:bc:dc:ab:8c:
         0d:67:11:6c:56:b9:5d:12:a4:b0:f4:72:1e:98:bf:95:4f:6b:
         b4:89:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:15 2026 by rpki-client