Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6C4C9082B20D11F0BEEE9B24C4F9AE02.roa
File:                     6C4C9082B20D11F0BEEE9B24C4F9AE02.roa (raw, json)
Hash identifier:          uDa6kw6yohfHlCtt4oFT1wonCW5n4dqzkgkH1iaMeH8=
Subject key identifier:   60:21:9C:9C:DB:00:6C:5B:8A:F8:26:AE:4E:8B:C4:8D:1C:91:C9:9F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E11
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6C4C9082B20D11F0BEEE9B24C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:26:58 +0000
ROA not before:           Fri 02 Oct 2026 15:26:58 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140834
IP address blocks:        103.175.248.0/23 maxlen: 23
                          2400:1da0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28177 (0x6e11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:26:58 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd42-c12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:42:c0:a8:45:15:bc:f8:8a:8a:fe:82:b1:d9:
                    54:ce:29:77:67:6e:cd:1b:03:8b:6c:6f:19:f0:cc:
                    95:1e:af:9c:f0:99:6e:ae:7a:8b:f9:9e:8b:b4:71:
                    f2:69:e5:03:2a:bc:64:4c:5f:8a:f9:f6:a4:f4:99:
                    19:6f:8b:b7:3e:e0:26:0d:9a:ae:58:5e:91:96:43:
                    2b:12:03:f3:17:3e:1b:27:62:58:3a:c9:d4:6e:bd:
                    30:c1:78:87:b8:1a:b0:f3:d0:36:73:5c:14:46:5f:
                    23:84:a3:22:f9:f6:c6:7c:d9:e7:73:e6:e0:90:42:
                    87:b6:1b:33:11:10:41:1f:1c:50:1f:e2:b7:1b:41:
                    6c:d2:71:19:a9:5f:5a:d6:93:38:6f:89:df:9e:d8:
                    61:79:86:7a:c1:41:e4:f8:c3:48:96:cb:70:5c:5f:
                    73:22:bb:57:e1:db:18:11:c3:80:e8:8c:37:93:87:
                    8c:9c:75:ba:f3:7e:93:b4:a0:66:83:24:8c:c7:25:
                    5b:ac:6c:33:dd:47:0b:eb:0e:56:a6:f6:30:f1:27:
                    e9:6d:23:26:92:a7:2f:c8:e5:f6:11:96:e4:52:03:
                    7e:61:50:74:02:af:2c:cb:56:98:8c:89:1d:e8:d3:
                    8a:0c:95:8a:04:5c:db:c2:16:c9:8f:47:86:c8:5b:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:21:9C:9C:DB:00:6C:5B:8A:F8:26:AE:4E:8B:C4:8D:1C:91:C9:9F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6C4C9082B20D11F0BEEE9B24C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.248.0/23
                IPv6:
                  2400:1da0::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:35:09:91:f5:73:ee:18:a0:c2:ff:46:83:04:42:06:2a:6b:
         24:83:26:83:a4:d1:94:f6:fd:cf:6a:29:3d:d0:0a:f0:c9:03:
         6e:31:e6:21:44:c4:54:85:64:22:ca:a5:59:bf:25:4b:91:dd:
         91:fc:f3:0b:d7:5b:56:0b:a8:0d:ab:2a:06:85:1f:9b:52:1f:
         96:94:18:47:4d:82:80:02:d0:37:ba:ac:27:c6:88:93:95:ff:
         bf:2b:b3:f3:20:75:bc:03:fb:ef:9a:ab:84:22:4b:eb:88:7c:
         98:5d:de:11:85:c2:30:b6:4f:84:34:77:33:2d:69:98:7c:fb:
         fb:2f:0e:ad:32:27:8d:7a:84:d1:18:2d:e8:77:8d:aa:9d:d5:
         1c:f9:b4:4d:8a:52:12:b9:4e:9a:90:76:d7:36:2c:99:a7:8e:
         73:99:ec:1a:dc:fd:62:b3:7f:57:1f:ef:16:6e:0f:2a:35:0f:
         4e:23:95:1f:60:f5:f5:ff:7e:c9:c6:38:4b:ec:22:73:4e:03:
         43:43:ec:15:32:07:1f:66:c0:26:e2:7f:a3:fb:85:78:36:ca:
         5a:6c:3e:d8:04:0d:78:42:ac:41:3c:d7:39:86:d3:60:61:66:
         14:1b:b5:e8:5e:be:7c:03:c2:57:f1:41:e8:d2:3d:3b:e2:59:
         3d:86:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:42:45 2026 by rpki-client