Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5EEDB5FC79E411EC99DA1B51C4F9AE02.roa
File:                     5EEDB5FC79E411EC99DA1B51C4F9AE02.roa (raw, json)
Hash identifier:          U//PRpLua0c2bHo6ZxSCTm3aGWHCIpRO4AM5jkNmsRk=
Subject key identifier:   C0:39:12:69:B0:23:64:AB:58:DE:93:53:BF:E8:EC:4E:36:53:58:86
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F46
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5EEDB5FC79E411EC99DA1B51C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:37:52 +0000
ROA not before:           Fri 02 Oct 2026 15:37:52 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     63754
IP address blocks:        103.68.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28486 (0x6f46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:37:52 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcfd0-b498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3f:f4:34:61:96:5a:34:ce:31:6b:01:d4:e3:
                    32:c1:3e:fa:7f:ba:15:99:d0:ad:58:50:3a:73:60:
                    b6:df:89:37:9f:97:c3:69:dd:a4:69:21:90:9e:03:
                    d4:6a:73:d4:1f:25:ef:54:29:4e:81:e2:77:f0:be:
                    99:15:55:19:33:28:bc:cf:8e:d2:4b:af:7f:6b:1f:
                    18:56:c0:5c:86:f8:51:2c:70:85:21:67:30:f7:97:
                    28:d2:00:5c:7f:9c:23:0f:29:4a:0a:d6:47:ad:f4:
                    d7:69:24:02:54:bf:91:fd:fc:3c:64:fd:33:c1:b8:
                    52:00:fa:99:4b:7f:66:b3:9b:4f:ed:d7:e9:81:46:
                    5c:96:6c:c9:94:e8:50:64:7e:1f:95:76:6b:b6:b5:
                    1a:0a:a5:ea:59:c0:d9:16:de:6d:85:a4:32:f6:4b:
                    d5:0e:6a:73:16:c8:4e:4a:ae:8f:12:8a:a3:84:c8:
                    59:53:5b:f0:81:a2:61:54:66:60:7c:9f:30:42:e0:
                    0d:85:59:13:42:99:3b:51:2e:af:e6:0e:b8:f1:ad:
                    6b:16:d8:44:19:ea:b1:4f:70:ad:cf:e7:43:9c:e4:
                    3b:c0:70:6e:1c:53:90:fe:3f:07:2a:7a:c2:22:3c:
                    c7:98:35:2c:ba:f6:26:ee:08:a3:39:6e:2e:0f:fc:
                    d5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:39:12:69:B0:23:64:AB:58:DE:93:53:BF:E8:EC:4E:36:53:58:86
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5EEDB5FC79E411EC99DA1B51C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:dc:67:ab:8f:5c:7c:7d:c1:75:2d:9f:72:5a:ba:8e:2a:07:
         c5:06:39:dd:5e:98:e7:77:fe:27:ae:30:f3:a3:88:97:da:6b:
         6b:29:14:a3:c8:2a:43:b2:7b:04:98:c7:b6:f0:87:88:59:3b:
         f1:5b:ea:d5:0b:60:57:d0:ca:f1:4a:2f:14:a7:59:4d:2e:2e:
         23:5d:98:33:c7:1e:b9:93:d5:c7:da:25:d9:98:4b:f1:c3:97:
         38:1c:b8:4e:32:f8:d6:c8:7a:64:ba:07:eb:86:82:40:a3:fa:
         1c:66:24:d6:93:44:70:6b:d5:9c:23:23:a5:56:a2:4d:f5:32:
         85:fc:22:04:25:35:2c:e7:46:3e:c2:09:f5:16:15:2d:00:cd:
         20:ab:9f:88:70:59:1b:7e:f2:5f:d5:ff:71:87:12:67:63:ff:
         18:5c:7a:56:3b:b8:8b:11:f4:12:86:c0:04:7d:9f:4d:68:b5:
         3a:b8:2d:ff:d9:00:6b:7d:eb:57:90:61:ed:29:48:dc:fc:18:
         25:c3:fc:10:04:ed:33:56:06:cf:65:6d:10:ce:ac:a6:23:59:
         e8:5b:00:7e:6e:f7:00:ea:f4:04:e1:2c:85:c2:d9:28:f8:23:
         d1:97:40:46:40:04:9f:0a:bd:5d:ea:b7:6a:48:ee:a1:63:ca:
         3e:f9:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:40:18 2026 by rpki-client