Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa
File:                     456D4CD41E0111ED858FE624C4F9AE02.roa (raw, json)
Hash identifier:          VHIH5b31Y721cRlcKfa5ppFOnblw16oK4BFMTYtIOJM=
Subject key identifier:   90:EC:5B:6B:CC:58:6D:54:0C:2F:2A:D4:8E:D8:67:CD:3B:CB:4A:DD
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6DB7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:24:11 +0000
ROA not before:           Fri 02 Oct 2026 15:24:10 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135916
IP address blocks:        103.94.16.0/24 maxlen: 24
                          103.94.17.0/24 maxlen: 24
                          103.94.18.0/24 maxlen: 24
                          103.94.19.0/24 maxlen: 24
                          202.47.87.0/24 maxlen: 24
                          202.56.57.0/24 maxlen: 24
                          202.94.82.0/24 maxlen: 24
                          203.8.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28087 (0x6db7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:24:10 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc9a-a27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:4e:be:87:b0:76:c8:18:a0:bc:fc:5e:85:
                    15:5b:0a:06:7d:a4:b5:16:14:3e:7b:54:03:46:94:
                    79:b1:60:63:19:a0:dd:7b:ee:14:e5:4f:8b:a3:7f:
                    95:94:75:c4:52:f7:15:67:89:31:f4:46:2f:c2:90:
                    38:88:da:73:6b:79:57:27:85:ef:f9:b2:70:a0:3b:
                    a8:28:78:7f:56:57:a7:ad:ef:e3:73:f5:f4:e5:c1:
                    d5:fe:76:28:10:97:32:e9:34:e0:be:48:6d:29:21:
                    08:29:55:41:3e:1d:67:c0:87:70:3f:eb:65:f6:06:
                    2c:db:e4:b1:53:9a:b0:b3:74:18:5f:23:89:66:30:
                    79:79:2a:6c:45:56:44:e7:c3:fc:c0:66:41:1f:0d:
                    c2:55:43:84:c3:3e:3d:ac:11:03:fd:c5:7f:99:5a:
                    08:b2:e0:03:f1:81:ff:9f:74:df:67:40:c8:9b:18:
                    2c:91:f4:1a:d7:84:c5:43:8b:ca:47:4e:db:ae:09:
                    c7:0a:b2:37:b6:e8:0c:36:95:02:f0:f9:e6:40:0b:
                    38:40:83:c8:13:43:fe:e2:e1:48:f7:02:e0:43:b6:
                    9e:09:7a:bf:21:ba:f4:06:f4:b4:36:52:f2:8f:c5:
                    de:18:cf:11:a1:35:ea:21:93:75:dd:05:67:04:76:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EC:5B:6B:CC:58:6D:54:0C:2F:2A:D4:8E:D8:67:CD:3B:CB:4A:DD
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.16.0/22
                  202.47.87.0/24
                  202.56.57.0/24
                  202.94.82.0/24
                  203.8.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:4c:d2:f2:10:99:80:3d:42:aa:86:0c:04:bb:01:b9:f8:4b:
         6c:e1:b5:16:15:20:e6:82:68:e4:97:17:ca:31:cf:a9:59:8a:
         1d:0e:20:72:a9:38:76:d4:54:c8:51:9d:72:4d:e6:85:20:9c:
         a4:7b:a6:51:5b:b9:e6:fd:68:73:e0:f8:55:3d:5e:df:53:7a:
         29:52:4f:64:e1:61:2a:b1:e5:46:11:e6:a7:5f:a0:6d:87:5a:
         c1:68:b0:87:69:32:c4:30:b2:ba:9e:d6:c5:97:af:c6:ff:a0:
         69:ca:a0:8a:cd:a2:58:5c:10:ce:f0:3c:3a:62:95:91:74:17:
         d1:02:61:fd:21:14:4c:25:c1:a3:4e:d7:cb:98:e1:7c:01:ff:
         5e:29:c1:a4:d4:07:a8:4f:68:e9:32:d7:68:05:08:da:f8:cc:
         49:96:10:be:b3:6e:2c:1d:d5:47:81:bf:57:4b:43:ef:95:42:
         fc:eb:a0:cf:bb:32:ce:d9:06:7d:32:0c:11:42:d6:9a:05:4b:
         31:e2:3c:d2:85:1e:c9:85:7f:cb:ad:c8:99:1f:ea:f5:12:f3:
         15:b6:44:10:37:26:e9:23:25:23:27:a0:41:38:f0:6c:85:35:
         b8:ff:74:c2:c2:93:2e:96:cc:df:ea:ad:3b:a6:dd:1b:f4:c0:
         cf:71:5b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:01:06 2026 by rpki-client