Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/74A64D6C784C11EC96A28137C4F9AE02.roa
File:                     74A64D6C784C11EC96A28137C4F9AE02.roa (raw, json)
Hash identifier:          BKeukvs+XB6GprJ3hFyFXNLFXDWiSEyXxlArMlcN05g=
Subject key identifier:   ED:8A:CB:25:77:DB:37:4C:6D:CE:4C:33:79:F0:8E:32:9F:0E:9E:F1
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6DCE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/74A64D6C784C11EC96A28137C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:24:56 +0000
ROA not before:           Fri 02 Oct 2026 15:24:56 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135949
IP address blocks:        103.129.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28110 (0x6dce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:24:56 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfccc8-6efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:96:74:4e:0c:bc:e4:01:62:17:38:24:ff:ca:
                    bd:a4:18:f8:c6:41:90:b7:ee:98:9d:65:7e:fa:39:
                    5e:cf:78:16:88:f3:a1:5a:1d:d6:31:ff:25:e6:b7:
                    48:62:25:5c:35:de:3d:dc:fa:ea:50:25:d8:a5:2d:
                    d3:60:4d:55:ad:f4:a8:3e:70:7f:0f:d3:2d:93:c5:
                    de:83:de:b3:6e:4b:86:62:7c:3a:14:bc:68:0c:91:
                    af:54:e0:78:c8:68:ac:1d:1c:86:22:ad:0b:2f:e4:
                    90:73:8c:f3:79:89:3b:82:39:07:75:62:e6:1e:c3:
                    98:64:f0:5f:a5:f9:89:05:04:48:f9:2b:b5:3d:c6:
                    6d:32:7d:7e:05:88:dc:df:ad:00:6a:d2:37:67:31:
                    94:e0:0f:e5:ed:44:95:84:9d:66:7e:7a:b4:30:d1:
                    30:41:83:2d:dd:13:ed:4e:34:4b:78:06:9a:52:e2:
                    d5:1f:c1:52:61:e6:e0:7b:76:95:a8:48:c4:96:92:
                    7e:98:f8:a2:ba:28:fb:5d:d7:d5:c8:fc:50:64:57:
                    ab:83:32:12:cd:5d:1e:56:80:a0:64:d0:39:2a:ef:
                    11:df:17:f3:24:35:71:14:5b:5a:1a:80:95:ba:9f:
                    b9:b4:68:e6:d1:39:6b:a9:d9:35:c8:6a:ce:57:d5:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8A:CB:25:77:DB:37:4C:6D:CE:4C:33:79:F0:8E:32:9F:0E:9E:F1
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/74A64D6C784C11EC96A28137C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:45:a2:12:15:60:eb:fc:17:31:79:ee:77:4c:ba:c3:cd:9b:
         33:70:39:91:ce:95:5d:d3:e6:8e:80:09:de:15:36:b6:21:b8:
         83:5d:74:69:75:3a:b4:c4:75:0c:6a:83:4c:d9:c5:6c:08:f1:
         b2:61:cb:d7:1c:12:ac:91:0c:65:06:e1:a7:8e:cb:be:9d:6d:
         ca:3f:04:f6:62:86:29:a5:00:81:27:7e:9b:cf:c6:1c:a3:e6:
         9c:97:0c:5a:8e:f9:78:64:76:c4:16:cd:3c:d2:df:cd:7c:c5:
         55:51:4b:c3:92:d4:2d:c6:78:f9:0a:34:a1:2d:aa:7f:a8:87:
         a8:14:29:7e:40:b3:e7:fa:48:0c:65:5e:c5:43:3d:12:11:87:
         39:70:c7:b2:aa:5c:04:52:be:57:2a:eb:e3:dd:ce:ea:24:c3:
         07:df:9f:5a:d2:ec:62:e4:dc:51:c6:51:b1:7e:e6:ea:00:b4:
         3c:5b:b4:47:4f:90:b3:74:23:63:3c:79:e1:a8:a6:83:8a:50:
         79:40:1a:c9:66:fd:1c:6b:af:b3:d4:14:72:a3:7f:14:0e:09:
         c7:32:1f:56:3f:83:b4:c5:08:f1:a1:af:87:db:6f:f3:b1:11:
         08:d8:08:42:f8:ef:0f:99:69:66:54:48:06:42:aa:b8:4b:52:
         6f:0b:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:14:45 2026 by rpki-client