Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/578A0E0E957211EE8C422C45C4F9AE02.roa
File:                     578A0E0E957211EE8C422C45C4F9AE02.roa (raw, json)
Hash identifier:          mb2hhV/xCnl6K6rCey/syhBYAavoIyTBJaUzuADA2q8=
Subject key identifier:   E4:3B:71:04:73:FD:44:01:14:09:72:ED:55:B7:BF:8D:5F:F7:15:8D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6DDA
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/578A0E0E957211EE8C422C45C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:25:18 +0000
ROA not before:           Fri 02 Oct 2026 15:25:18 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135972
IP address blocks:        103.139.14.0/23 maxlen: 24
                          2001:df0:6380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28122 (0x6dda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:25:18 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfccde-b0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:e6:cb:e3:b2:55:b4:8e:0b:08:76:08:4c:
                    84:8b:18:5e:3c:1d:44:b3:87:cc:0e:95:67:e7:59:
                    d9:89:82:81:36:16:15:3f:ee:94:a3:25:27:f2:40:
                    0a:0f:9a:9a:2d:3d:ae:5d:91:f1:a9:89:d6:22:7f:
                    8d:a6:cd:36:4f:db:18:d8:08:5f:42:24:dc:d4:34:
                    88:67:2b:bd:dc:fa:58:72:e4:64:6f:f8:28:bb:41:
                    cf:ae:69:91:46:3f:3d:96:01:a5:6a:ca:84:7a:cd:
                    2f:e3:0b:9b:ee:3a:90:74:c9:85:2e:90:27:c6:0d:
                    de:25:a3:d7:73:d1:e5:a5:2f:91:9b:39:9e:e3:88:
                    36:ff:d5:30:8c:53:08:8c:df:7f:12:4e:89:2c:09:
                    28:8f:ab:8d:a3:c9:5b:22:0a:98:48:ff:a5:8e:27:
                    9b:be:2a:15:2a:cd:5c:49:16:d9:e4:19:cc:3b:59:
                    51:eb:90:4e:56:a5:b0:48:dd:6d:9c:84:5c:fa:e9:
                    0d:c2:fc:05:42:92:25:4f:c4:3e:63:37:29:9d:bd:
                    d4:76:21:95:4b:a7:64:6a:fb:63:d4:45:2e:a3:cc:
                    ab:6d:6e:6c:32:21:43:96:2c:02:b3:09:85:57:17:
                    b7:09:74:12:3d:ef:7e:49:a0:4f:f6:8b:74:7c:b6:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3B:71:04:73:FD:44:01:14:09:72:ED:55:B7:BF:8D:5F:F7:15:8D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/578A0E0E957211EE8C422C45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.14.0/23
                IPv6:
                  2001:df0:6380::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:46:b2:32:f1:64:26:ce:dd:bd:00:30:23:47:24:eb:5f:e5:
         61:15:a7:d3:70:11:86:68:8f:14:bc:73:39:c2:e5:fe:1c:ac:
         b9:f6:12:b0:d3:7e:9e:39:d9:28:2b:8a:da:a3:cf:16:20:d7:
         7d:ed:0d:c1:ee:c2:01:3b:19:18:fb:21:17:9f:a3:83:db:0d:
         5c:5a:73:22:f7:2c:47:35:54:65:0a:7e:da:33:2e:ba:78:12:
         b0:cc:2b:3f:be:63:76:21:e9:a2:69:29:74:a8:ed:76:9a:e3:
         e0:6a:8a:68:22:e7:da:88:81:34:a5:d0:2d:e2:a4:f9:55:0d:
         df:4a:d8:e4:72:0e:20:90:76:0e:ed:b2:45:ec:00:e9:90:13:
         81:8f:cb:2e:c6:84:b7:44:83:7c:8c:8f:d0:8d:3c:68:ba:c8:
         5d:6e:0b:15:e1:9f:58:44:35:b6:32:5e:7c:05:aa:4d:a3:08:
         0d:26:be:7b:70:f4:34:98:20:82:10:d8:71:42:6e:af:30:79:
         64:a7:4f:0c:30:af:8e:eb:4c:6f:d1:97:91:0d:d5:98:92:34:
         1f:2a:59:03:82:9b:c2:a3:59:7b:dc:77:a3:5c:1f:d0:7f:9b:
         08:96:ad:ee:19:23:85:08:ad:7c:7e:4e:7c:e7:4a:34:1c:5e:
         11:67:24:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:55:27 2026 by rpki-client