Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6D5461FE142F11EE94A8E86DC4F9AE02.roa
File:                     6D5461FE142F11EE94A8E86DC4F9AE02.roa (raw, json)
Hash identifier:          NL3FMl8I+CY2zBH52o6SyVgIyzMBGU1njMXZORebUV4=
Subject key identifier:   A8:99:6B:8D:71:F5:A1:45:15:1C:E3:20:64:C6:5A:F2:6E:FE:EC:9E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E54
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6D5461FE142F11EE94A8E86DC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:29:10 +0000
ROA not before:           Fri 02 Oct 2026 15:29:10 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150824
IP address blocks:        103.198.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28244 (0x6e54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:29:10 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcdc6-5eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:c8:6a:d1:7f:b3:a4:5d:13:64:f9:1e:4f:
                    6c:c2:42:8a:92:97:0f:c6:04:c3:c2:84:ba:5e:99:
                    c3:f1:4a:fb:03:73:a1:21:6c:4d:c9:c7:46:6a:ea:
                    0b:ef:d0:95:92:0f:a5:da:22:21:7b:d9:dc:fb:0e:
                    3e:2b:a6:52:6e:b9:50:a8:9d:81:d6:8a:ee:70:70:
                    b3:22:1a:fc:59:3b:df:b5:ed:c8:22:ca:59:04:ea:
                    c2:4d:1f:34:5d:e1:d6:c2:ab:73:98:7c:f2:6a:0e:
                    65:9e:e1:b1:35:09:aa:eb:91:5e:b3:34:26:70:d6:
                    2c:25:b5:be:0b:14:1c:ba:b7:06:70:fc:34:0a:f6:
                    b8:07:90:41:44:0f:76:ff:b6:a9:3b:c7:f7:80:95:
                    47:38:9e:10:91:8a:fd:f9:da:5c:d2:3b:cb:01:21:
                    4a:c9:5e:2c:e6:79:f9:6f:8d:ec:20:9e:6b:0a:d0:
                    14:30:67:61:fc:04:92:60:99:c3:e5:d2:10:34:8d:
                    3f:74:bd:bc:6b:5a:58:47:0f:3d:bf:34:24:f4:14:
                    08:31:af:78:dd:0d:7a:68:a6:7f:29:5a:d1:f6:64:
                    80:a1:17:08:98:a4:9d:38:b7:b0:f6:1a:be:e8:92:
                    c2:99:5c:43:cd:dc:cb:55:81:f5:8d:71:a1:9c:b4:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:99:6B:8D:71:F5:A1:45:15:1C:E3:20:64:C6:5A:F2:6E:FE:EC:9E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6D5461FE142F11EE94A8E86DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:77:01:02:85:96:4a:53:f8:de:10:e8:0d:37:0e:73:26:bc:
         62:06:3d:e9:ae:1e:f4:0a:5a:17:31:d6:ab:8e:8d:82:ed:fd:
         b6:b1:22:30:c4:31:85:27:9b:8f:44:82:5a:a2:39:a0:fd:a9:
         99:1c:4c:93:9d:ad:7d:52:8b:9c:e6:3c:77:f6:58:7e:d8:fc:
         36:27:5b:d0:8d:63:63:0e:8b:41:c1:75:11:9b:3a:09:11:ab:
         19:ef:77:77:75:8c:6f:a6:91:3f:8a:8c:5d:9a:d0:4e:3c:d4:
         5b:21:5a:d9:00:05:b3:d7:ba:39:a6:c1:8e:f9:a4:54:8b:20:
         c9:49:67:7d:e1:09:90:e4:44:ed:39:6b:f3:e3:57:f2:66:da:
         26:43:26:32:7e:ce:99:eb:31:f7:5b:a2:a3:7e:f6:bf:4d:52:
         73:ce:33:b5:57:35:6f:50:4d:62:bc:01:ca:3f:ed:bd:98:5e:
         c1:fc:af:38:a2:e4:a9:10:40:4e:9d:64:3b:20:4a:ac:1c:a9:
         5e:95:55:58:05:e1:38:ad:03:3b:6d:7f:d5:bf:cc:4b:42:17:
         4e:9f:9d:19:47:08:6a:bf:12:65:22:d9:6a:e6:0f:91:8e:26:
         e7:50:2e:26:47:c0:79:ce:94:99:77:28:e0:30:d4:58:00:af:
         d8:fa:dc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:08:35 2026 by rpki-client