Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4FC8108A295B11EF8A0CF149C4F9AE02.roa
File:                     4FC8108A295B11EF8A0CF149C4F9AE02.roa (raw, json)
Hash identifier:          1Pwt5Op8YT6KAkQ0B85NdjGmFYBRSVmb6aPrIwdb+vs=
Subject key identifier:   62:16:8A:AB:8E:43:76:6F:68:73:B6:96:E3:DB:78:CA:EE:59:87:9C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6DD2
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4FC8108A295B11EF8A0CF149C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:25:03 +0000
ROA not before:           Fri 02 Oct 2026 15:25:03 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135956
IP address blocks:        103.124.60.0/22 maxlen: 24
                          2001:df7:1700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28114 (0x6dd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:25:03 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcccf-896d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:10:7c:cb:b2:c4:5a:a4:62:4d:9d:b9:41:
                    5a:80:b3:4c:53:5a:eb:96:b3:1a:89:c4:e6:4f:c5:
                    ec:8c:b5:d6:44:cc:38:9b:2c:a4:04:07:f8:95:e8:
                    ac:46:4a:a0:7c:01:a4:86:4a:5a:80:75:56:63:03:
                    6f:77:4a:02:6a:12:2e:3f:4f:03:4c:23:04:79:7f:
                    28:b5:0b:91:45:c5:e2:06:bc:b5:16:56:3b:b9:ea:
                    ed:2e:84:bd:3f:ec:1f:47:5f:04:8a:87:ca:20:94:
                    92:fa:86:f5:02:1d:13:dd:a3:f2:20:f8:d1:f2:71:
                    07:cf:d3:be:00:6a:c7:06:b9:2d:51:bb:21:69:18:
                    50:89:40:b6:ef:bc:53:b6:c0:5a:b7:6c:d3:5a:92:
                    bc:dc:95:b3:63:43:b5:36:3c:64:f3:89:51:d4:63:
                    41:32:cd:f8:83:86:67:19:a4:9b:22:69:4f:19:70:
                    aa:82:d8:f5:c1:14:b0:a6:70:84:19:5e:70:e2:45:
                    09:89:6f:6b:79:2b:25:e0:d0:b4:89:d9:d2:21:15:
                    be:8b:5b:c7:b6:23:59:98:80:15:ba:8b:b3:d9:b3:
                    53:c6:7f:31:01:6f:cf:b2:a2:03:6d:96:65:2e:04:
                    77:ad:d7:d4:83:69:01:e6:69:b6:1a:1b:6d:93:ec:
                    0e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:16:8A:AB:8E:43:76:6F:68:73:B6:96:E3:DB:78:CA:EE:59:87:9C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4FC8108A295B11EF8A0CF149C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.60.0/22
                IPv6:
                  2001:df7:1700::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:a8:d1:ed:37:c6:b1:16:68:72:bb:bd:b7:f9:aa:02:5c:8b:
         44:4d:cc:ff:f5:0a:65:50:dc:c1:2d:e0:2b:b9:4f:20:d4:d2:
         3e:8a:8b:45:8e:86:db:69:ec:a1:fd:01:b0:b1:b2:86:28:f9:
         16:20:29:74:ba:7a:0c:97:d8:c3:5b:5e:03:2d:70:ca:62:09:
         d5:36:3a:6e:70:bd:98:75:99:f2:2e:9c:20:f2:a4:b5:22:92:
         ce:f5:41:eb:4d:f8:de:fb:78:85:1f:a5:cf:c0:04:48:60:bd:
         d7:cb:89:47:69:a7:74:90:03:70:d9:fd:72:26:a4:b4:11:ba:
         b3:51:38:c0:b2:8b:9a:cd:87:bd:f9:24:c2:a0:81:93:2a:fd:
         f7:42:00:a8:ac:80:bd:9e:4a:7c:f2:ee:a7:f4:8e:4a:2d:05:
         22:f7:54:63:08:72:0d:ad:84:d3:dd:a0:7d:a7:24:1f:98:de:
         34:83:8e:63:11:80:b5:8f:6a:af:6c:37:40:46:aa:d3:70:36:
         e6:ea:71:68:5f:46:79:a3:ae:39:62:9b:c8:af:c8:ee:bc:31:
         db:48:ef:f0:ae:37:62:aa:7d:93:99:7a:7c:0a:b9:63:b4:fc:
         94:6b:d3:60:b6:60:3e:30:4f:ea:1a:15:53:b4:6b:8f:44:21:
         b5:96:75:99
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICbdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyNTAzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2NjZi04OTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApUIQfMuyxFqkYk2duUFagLNMU1rrlrMaicTmT8XsjLXWRMw4myykBAf4leis
RkqgfAGkhkpagHVWYwNvd0oCahIuP08DTCMEeX8otQuRRcXiBry1FlY7uertLoS9
P+wfR18EiofKIJSS+ob1Ah0T3aPyIPjR8nEHz9O+AGrHBrktUbshaRhQiUC277xT
tsBat2zTWpK83JWzY0O1Njxk84lR1GNBMs34g4ZnGaSbImlPGXCqgtj1wRSwpnCE
GV5w4kUJiW9reSsl4NC0idnSIRW+i1vHtiNZmIAVuouz2bNTxn8xAW/PsqIDbZZl
LgR3rdfUg2kB5mm2Ghttk+wOUQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGIWiquO
Q3ZvaHO2luPbeMruWYecMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNEZDODEwOEEy
OTVCMTFFRjhBMENGMTQ5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQCZ3w8MA8EAgACMAkDBwAgAQ33FwAwDQYJKoZIhvcNAQELBQADggEB
AImo0e03xrEWaHK7vbf5qgJci0RNzP/1CmVQ3MEt4Cu5TyDU0j6Ki0WOhttp7KH9
AbCxsoYo+RYgKXS6egyX2MNbXgMtcMpiCdU2Om5wvZh1mfIunCDypLUiks71QetN
+N77eIUfpc/ABEhgvdfLiUdpp3SQA3DZ/XImpLQRurNROMCyi5rNh735JMKggZMq
/fdCAKisgL2eSnzy7qf0jkotBSL3VGMIcg2thNPdoH2nJB+Y3jSDjmMRgLWPaq9s
N0BGqtNwNubqcWhfRnmjrjlim8ivyO68MdtI7/CuN2KqfZOZenwKuWO0/JRr02C2
YD4wT+oaFVO0a49EIbWWdZk=
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:45 2026 by rpki-client