Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55F31770736F11F0A16F9258C4F9AE02.roa
File:                     55F31770736F11F0A16F9258C4F9AE02.roa (raw, json)
Hash identifier:          fFD7t6gMpkq6h9Bq01zSX9usIk0A5sb4mzrf8sqxnH4=
Subject key identifier:   DD:05:4A:6A:8A:D2:60:3E:D5:F2:07:AD:1F:01:12:17:F5:BB:F2:0E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E2F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55F31770736F11F0A16F9258C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:27:54 +0000
ROA not before:           Fri 02 Oct 2026 15:27:53 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149113
IP address blocks:        103.190.38.0/23 maxlen: 24
                          2001:df4:a240::/48 maxlen: 48
                          2400:8c60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28207 (0x6e2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:27:53 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd79-6713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:57:15:c3:10:8c:56:43:31:52:07:79:e6:
                    47:8e:70:4f:d7:f5:9c:4b:ef:db:72:83:d0:4f:56:
                    bf:29:71:65:5e:f6:57:dc:db:19:ba:6b:2e:06:62:
                    79:a1:37:50:d1:ed:6a:fe:0a:01:a4:d1:11:7c:6d:
                    ff:12:be:4e:d9:65:d0:c2:46:32:68:a4:45:bf:cd:
                    37:df:17:47:49:d2:54:4e:59:26:07:4f:2e:ae:c8:
                    b7:e1:3e:24:af:60:43:27:9a:a1:8d:73:23:6c:9e:
                    c3:6a:39:d8:b0:39:e5:6c:3c:a4:dc:96:57:89:c7:
                    d7:97:07:7a:cf:0d:d4:2d:1f:e8:8c:99:a8:f0:50:
                    fd:6f:58:73:b0:0b:9d:36:2f:aa:c3:36:ea:01:19:
                    41:c3:d3:05:33:4c:18:5b:7b:16:b6:85:03:93:64:
                    c8:ae:4c:55:d9:98:2f:94:da:9a:a8:f0:fc:6f:c3:
                    97:28:c6:ac:bd:69:1f:b5:d9:42:1a:4a:9b:0c:d7:
                    f3:67:88:f9:e7:73:94:6a:a5:6a:39:d6:e2:f5:f3:
                    2d:e8:49:9d:19:4d:c3:89:46:68:60:39:2b:6f:8b:
                    56:8b:5a:8e:a3:9e:95:0d:2e:9a:80:7d:72:a0:16:
                    1b:cc:1b:3a:a5:73:6a:a1:14:f0:00:f8:e9:0a:69:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:05:4A:6A:8A:D2:60:3E:D5:F2:07:AD:1F:01:12:17:F5:BB:F2:0E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55F31770736F11F0A16F9258C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.38.0/23
                IPv6:
                  2001:df4:a240::/48
                  2400:8c60::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:ba:d4:48:87:9c:be:5c:c1:d1:e7:e8:f5:a9:7f:2c:79:d6:
         35:0e:fe:86:f0:69:d5:83:b7:3b:09:ea:29:c3:eb:72:85:af:
         eb:eb:d7:fa:95:8e:63:16:e9:a6:96:5a:38:b2:4a:82:56:6f:
         d5:99:6b:28:7c:03:50:59:6f:d7:98:ba:12:cb:8d:10:00:99:
         cb:1d:6b:21:0d:55:df:26:17:8a:8a:c2:1b:1e:9f:79:b4:b0:
         45:e2:70:ac:11:a6:75:e2:8e:ca:d3:b3:17:19:95:c3:32:9f:
         32:21:00:1e:24:4b:92:b1:64:d3:52:11:ee:f6:d4:f5:17:c1:
         7a:d0:3e:16:3e:c5:21:20:db:8c:0f:d4:13:ee:c4:4b:d8:1a:
         72:83:5d:01:84:87:04:f1:46:ca:d8:b7:1a:12:6a:90:64:aa:
         f7:05:17:14:07:21:0e:d8:b9:6e:be:7a:13:2c:4b:1b:dc:7a:
         04:37:1f:b4:90:0f:00:f5:d5:d4:5d:31:81:14:1c:16:ad:8e:
         a7:3f:71:bf:c9:22:55:2b:83:a9:17:e5:3f:bf:7d:6b:dc:90:
         18:83:b6:fd:ce:ee:a8:18:d7:c2:85:d9:9a:bf:17:3f:cc:65:
         d9:7e:ff:f2:87:96:e6:30:97:5c:c9:3f:8e:20:a4:e8:ff:f7:
         2c:9d:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:25 2026 by rpki-client