Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa
File:                     655A393E89DB11EEA4226580C4F9AE02.roa (raw, json)
Hash identifier:          kyuwITnCrV/7OslAcxHEt6U0tDgeDueH4OHFnOX9UbQ=
Subject key identifier:   28:0C:55:D3:49:38:01:FA:8E:BA:2A:ED:00:3C:C3:33:B2:B4:E9:4D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6DC6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:24:41 +0000
ROA not before:           Fri 02 Oct 2026 15:24:41 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135938
IP address blocks:        103.111.244.0/22 maxlen: 24
                          2001:df4:9500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28102 (0x6dc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:24:41 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfccb9-a7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:18:62:03:79:f2:68:2d:da:90:ed:6f:64:
                    47:9b:fa:60:57:3b:d4:ca:58:b7:38:55:75:be:82:
                    01:95:62:0c:d6:af:e3:50:59:57:59:de:19:e0:4c:
                    fd:12:39:2a:5d:2e:79:a2:c8:a8:ab:ea:d2:72:8b:
                    c1:b9:f0:ae:b4:08:e4:9a:83:6f:26:ab:e8:3c:e9:
                    a6:4b:ed:6d:7e:b4:5f:2c:af:4d:3f:d7:d4:7d:f1:
                    ea:a5:fc:94:eb:78:c4:d7:9d:e6:eb:2c:87:59:1a:
                    31:0a:06:c7:b9:1c:ee:e8:29:00:2f:20:12:cc:09:
                    5d:6f:b8:a6:c6:42:c5:e4:29:b8:a1:d3:d1:07:1f:
                    c2:d9:8b:c2:1d:42:3d:29:9a:98:ba:5c:10:ff:66:
                    fc:2c:c5:8e:dd:27:b0:df:71:73:45:b6:8e:d5:db:
                    84:14:28:0e:18:39:98:65:ae:a6:d3:b4:4d:d9:c3:
                    c8:80:1f:a5:f4:1e:92:94:af:c1:26:e0:c8:a8:a5:
                    f7:5d:9e:64:ba:14:a7:49:e2:07:9c:0d:3a:11:a3:
                    ad:da:59:b3:5c:e4:fc:8c:ec:a8:4a:e8:0f:97:ef:
                    67:e8:1a:2f:28:58:a3:66:0d:52:6d:86:27:ea:59:
                    9c:86:77:f3:89:ad:00:a4:e0:fb:4b:e4:08:ef:e6:
                    0a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0C:55:D3:49:38:01:FA:8E:BA:2A:ED:00:3C:C3:33:B2:B4:E9:4D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.244.0/22
                IPv6:
                  2001:df4:9500::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:fd:eb:2d:52:6f:8a:c8:8a:b3:e9:6a:09:ab:9b:6c:24:a7:
         9e:92:56:be:1e:1c:ed:2d:61:86:a2:3f:fc:6b:0a:ea:cf:b2:
         85:cc:ae:a7:d6:c7:fb:c2:e5:f2:ef:10:86:b0:2d:dd:4d:08:
         9d:78:5f:0d:93:5e:72:37:d8:2f:a3:2b:b1:54:3d:81:ae:73:
         52:3d:ef:d6:e0:4d:7b:00:a0:9e:59:8a:e3:3c:73:6f:c2:fa:
         ce:50:aa:37:75:2d:61:4a:12:47:32:57:d9:0b:b6:9c:cf:67:
         47:10:41:39:d7:0c:8a:5c:42:7a:40:75:fb:48:43:3f:43:e7:
         a3:e7:90:24:f3:03:1f:8c:d0:31:87:7a:9e:f8:9c:78:96:22:
         fb:08:8d:47:e5:46:81:2c:bf:81:4d:2c:38:d3:e3:bc:e0:92:
         a0:f8:18:ee:07:c3:e2:b0:57:82:76:6f:83:b9:02:a2:2f:c0:
         20:b9:fb:b5:d8:b2:5a:f1:2a:23:af:a1:44:91:a2:80:3a:4b:
         d9:91:3f:38:56:2d:87:e9:ed:25:d1:a7:7e:c5:39:03:5e:09:
         b2:b2:29:a9:fb:91:6c:fa:52:d0:5f:95:86:cc:d6:14:58:49:
         53:5f:87:3d:17:26:0f:85:30:94:7c:e6:0c:14:7d:47:cc:f7:
         b1:a0:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:39 2026 by rpki-client