Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa
File:                     5A5F40627F5911ECA27EA93CC4F9AE02.roa (raw, json)
Hash identifier:          mPhcIZa2lEICyW/t4HwYMSZVAAggvod51Fn73MTa7zo=
Subject key identifier:   C2:BA:97:8E:B2:64:C5:9B:10:6D:7F:E0:30:66:67:E2:84:4D:1B:B6
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6DA8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:23:41 +0000
ROA not before:           Fri 02 Oct 2026 15:23:41 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     131440
IP address blocks:        103.245.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28072 (0x6da8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:23:41 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc7d-7de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:8b:cd:d6:f4:b8:8a:d8:0d:2c:f8:d9:39:
                    bf:51:df:72:d8:4d:fd:76:2d:a3:c2:5c:ef:ff:b1:
                    18:ba:88:96:68:10:90:c3:a8:9d:58:5a:d5:71:56:
                    4c:8f:c9:7e:74:06:0b:88:8b:87:eb:19:ff:ee:7d:
                    06:c4:87:db:b9:03:e6:dc:b6:04:e3:b1:bb:53:4c:
                    98:83:c5:2b:fd:4a:9c:f1:71:7e:7e:d0:cb:d6:23:
                    33:69:ad:f8:44:be:67:35:59:ba:7b:6b:6e:b7:d6:
                    b7:b1:e0:21:c1:ac:29:0c:c0:4e:18:bd:15:24:38:
                    5a:f3:67:18:b6:8c:dd:24:27:51:42:69:c5:64:ed:
                    ff:94:b4:c9:f7:8b:29:3f:97:3a:0e:a3:d2:74:f4:
                    5c:4b:48:34:2d:b4:da:1a:1f:45:04:90:58:19:59:
                    d8:5e:58:bd:b1:84:ea:c0:52:60:ef:85:bd:17:b0:
                    bc:a8:e4:e1:cb:9a:70:ba:0e:21:20:10:8d:61:1f:
                    0b:73:5a:71:1a:0b:37:89:bd:70:73:1a:39:7b:26:
                    05:87:51:0a:27:bd:1c:23:61:74:35:62:23:2b:00:
                    45:77:e0:11:ae:c2:b3:09:02:55:d3:c0:ba:a9:25:
                    03:96:63:48:3f:b6:d1:8f:d3:1a:5a:36:ae:31:c2:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BA:97:8E:B2:64:C5:9B:10:6D:7F:E0:30:66:67:E2:84:4D:1B:B6
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:99:bc:56:c5:b4:25:1e:9d:47:d9:de:69:4f:f9:c4:a5:2b:
         65:a4:52:4c:02:e6:9b:e7:a2:92:80:2b:91:1a:e5:2d:c1:27:
         d1:8f:57:da:d7:5e:92:82:23:cf:76:07:96:96:b4:4f:54:59:
         1a:81:8c:ae:08:93:23:66:db:e4:0e:bf:80:5b:58:a6:1e:81:
         4a:2d:2f:94:cc:53:62:66:98:07:89:c9:54:c3:68:02:1c:a7:
         3b:73:a0:6f:9c:84:c0:bc:f4:00:c9:e8:f1:f6:31:6c:e6:f2:
         61:9c:26:06:31:89:9a:19:5e:32:9e:7d:ef:ef:f9:47:a9:1b:
         0a:54:37:bf:f6:69:c9:47:66:d1:d7:cd:bb:50:31:ef:56:2a:
         be:b9:da:ca:15:e1:a1:b6:a2:2a:b4:87:61:5b:97:9b:fd:c6:
         f3:12:1e:7b:ca:eb:10:31:b6:af:19:4f:6a:27:ad:7e:ad:00:
         07:2f:f0:5d:f5:33:c1:44:8d:5c:34:f9:90:6b:c1:1f:fe:98:
         7c:43:3e:6d:4a:5b:33:3b:9b:3b:8b:e6:80:b9:30:ac:12:17:
         0f:a7:e9:c6:15:4b:f8:a1:11:bc:72:96:7d:03:fb:bb:13:2e:
         fc:ec:59:ab:b5:51:de:68:1b:fc:65:62:f2:cb:5e:2e:f9:77:
         d2:66:42:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:46:27 2026 by rpki-client