Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/69949320ADF611EE8DB5921FC4F9AE02.roa
File:                     69949320ADF611EE8DB5921FC4F9AE02.roa (raw, json)
Hash identifier:          NZKryRQVqYsWCU9nyHyRcbLe/iFATLp3waVAlDFgZzw=
Subject key identifier:   03:6C:C6:50:A5:F8:C9:A3:D7:64:5E:A2:3A:B2:D1:DA:C1:F2:4B:59
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E7E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/69949320ADF611EE8DB5921FC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:30:38 +0000
ROA not before:           Fri 02 Oct 2026 15:30:38 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150905
IP address blocks:        103.78.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28286 (0x6e7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:30:38 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfce1e-e79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:d3:fb:6d:bb:ef:6d:3e:44:81:3e:9a:cf:
                    d0:62:79:71:f5:03:62:ee:d9:15:25:f8:96:99:f6:
                    52:25:52:27:db:13:99:88:7b:c0:9b:80:e6:15:3c:
                    72:f6:4a:67:76:f3:68:ad:b5:f1:c7:13:76:8f:16:
                    d7:02:2d:2b:c2:cd:e4:e2:77:d6:52:68:d9:b9:28:
                    1c:56:65:73:4b:c3:12:2b:de:b5:54:e1:57:86:b2:
                    47:ec:79:75:2d:84:12:99:cb:ee:4f:aa:52:75:b9:
                    1a:fb:16:28:07:3b:09:c2:d5:8e:c4:d0:8d:a2:b7:
                    8e:fe:fe:4e:80:bd:28:12:56:17:5a:79:2e:b0:4f:
                    25:0e:c4:ac:c6:b0:3d:9b:d6:ff:7d:dd:bb:66:85:
                    0e:da:15:93:84:43:10:f7:b5:4a:3c:94:c1:2d:60:
                    2c:e6:ca:10:c1:f5:ca:f0:39:44:fe:44:d5:f7:e3:
                    19:c0:b7:e5:76:e6:93:a7:93:66:7f:f7:a4:b4:3e:
                    f1:bd:8e:46:af:2c:25:1d:72:e7:5f:77:9e:88:73:
                    5f:3c:5d:d9:fc:7e:cb:ae:f0:36:31:83:48:47:62:
                    23:0c:6b:f6:ad:33:87:f3:ba:ce:86:2b:38:dc:81:
                    08:97:4b:fb:48:80:1a:fd:09:52:be:87:bc:3b:5c:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6C:C6:50:A5:F8:C9:A3:D7:64:5E:A2:3A:B2:D1:DA:C1:F2:4B:59
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/69949320ADF611EE8DB5921FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:67:12:40:ae:cd:cf:6a:2e:89:14:a1:95:f3:51:a4:db:ed:
         1d:2d:85:34:9f:e6:00:c0:c1:7c:31:3b:a8:c8:f8:57:7a:1d:
         d2:cf:89:55:61:77:58:21:ca:14:dc:bf:2f:55:36:bd:16:78:
         e4:82:8c:0a:ab:ad:9f:fc:23:b8:e2:91:d2:c7:4c:60:95:a5:
         ac:f2:4c:c8:45:a8:25:79:51:65:3e:8f:35:35:ed:84:ff:73:
         9e:f3:2b:16:5f:1c:b6:75:0e:cc:a0:25:db:a8:f3:90:c5:89:
         07:81:03:bf:8c:a5:0b:c7:2e:40:ea:cd:33:35:92:1c:7c:14:
         36:f3:00:cd:b3:75:33:a8:a9:02:87:a1:ef:2f:c4:67:1b:e6:
         ae:49:10:48:8b:67:85:52:43:65:9c:ca:5b:bc:0a:f5:2d:75:
         85:ef:c3:e0:07:f6:a8:e0:b3:53:c5:de:90:4c:65:9a:21:1f:
         b9:1b:87:c0:dd:17:9a:ea:2d:3d:ae:f6:1f:82:ee:df:0a:d7:
         f6:90:70:cd:b4:c8:af:53:11:c4:29:6e:d9:8f:ef:09:0d:49:
         91:e3:3f:e6:3a:f0:51:3b:cc:5e:77:b5:41:87:c3:89:90:d8:
         a4:77:c0:3b:b6:10:84:5c:00:7c:0c:0d:6e:11:46:e1:47:e7:
         f6:12:96:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:57 2026 by rpki-client