Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/779A69DAF82D11F0A8764CFD386F56BC.roa
File:                     779A69DAF82D11F0A8764CFD386F56BC.roa (raw, json)
Hash identifier:          Yo36IR+B62hikbfGHGv8a8DkzL24KH+e30yOmwbQXhw=
Subject key identifier:   E4:CB:6C:D8:65:C4:EC:9D:67:F7:0C:43:45:7A:5E:F4:B0:45:5E:10
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6D9C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/779A69DAF82D11F0A8764CFD386F56BC.roa
Signing time:             Fri 02 Oct 2026 15:23:16 +0000
ROA not before:           Fri 02 Oct 2026 15:23:16 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     131419
IP address blocks:        103.239.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28060 (0x6d9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:23:16 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc63-9d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:a3:fc:05:e1:cf:4a:86:d7:8a:97:34:f0:
                    86:72:10:e6:71:4e:78:56:2a:85:e1:bb:c9:ec:7b:
                    cc:d6:41:18:80:e3:d4:f9:bb:85:d0:c9:8b:a8:df:
                    58:47:83:5c:a4:62:d4:47:c7:b0:4d:35:77:e9:c4:
                    b9:2c:93:14:42:be:e9:d6:1d:59:11:28:78:57:4e:
                    a9:96:6e:43:1d:ea:54:43:4d:be:5d:0b:ca:85:55:
                    e1:e6:e5:f6:60:e9:9a:a2:64:dc:d7:5c:25:b3:8f:
                    56:20:f9:4d:af:5f:68:37:f0:ea:3c:66:fc:31:e7:
                    50:4e:ea:f6:f0:e8:17:1d:ab:f4:64:e3:44:ec:54:
                    55:80:40:9c:67:fd:09:ba:b5:2e:96:3c:5a:f0:81:
                    fb:42:2a:5c:3e:ec:48:d7:2d:32:81:26:a1:0d:ec:
                    1a:84:f3:ff:74:71:53:52:66:7c:06:57:ae:ad:4e:
                    f8:d5:b7:c9:af:6d:4b:a6:61:4d:e8:73:81:32:37:
                    da:f9:eb:5d:7a:7d:01:34:55:e3:38:99:61:b1:a4:
                    14:35:ca:95:c9:4c:50:eb:f4:ac:56:32:30:c5:83:
                    df:36:af:7b:4f:e9:15:d3:55:e4:44:d3:de:1b:d4:
                    76:6a:d4:5c:11:94:16:9e:6b:9f:ce:08:4b:06:d8:
                    fb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CB:6C:D8:65:C4:EC:9D:67:F7:0C:43:45:7A:5E:F4:B0:45:5E:10
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/779A69DAF82D11F0A8764CFD386F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:89:8a:94:2f:04:8b:b2:e9:77:d6:80:1f:e4:94:3a:fd:c3:
         c1:27:2b:50:99:06:3f:46:0d:87:47:3e:9c:fe:66:ce:0b:0b:
         21:52:c8:2c:81:55:e5:e2:5f:06:97:23:f9:6f:f4:b7:7f:3d:
         d0:b2:23:fc:f1:fb:28:79:62:93:b3:de:78:14:5c:34:c9:27:
         b5:1a:dd:05:8b:b1:d2:68:be:19:b6:9d:dc:74:59:3a:5d:cd:
         e6:2d:7a:74:1f:2f:6b:f8:8c:93:d8:6c:d3:b6:04:f6:bb:c8:
         ec:e3:af:75:ae:5c:32:23:37:87:90:48:72:60:72:70:1b:e1:
         4e:0f:51:cf:7e:91:a1:22:94:ab:b2:ce:64:51:08:6a:fa:c4:
         fc:8e:1c:4f:95:96:56:c0:c6:33:3a:cf:fe:0b:96:eb:14:d2:
         1d:86:5b:de:c8:03:72:f9:65:99:e7:91:dd:c2:13:30:5a:ed:
         c9:ba:ae:fd:c6:39:92:a8:a7:a6:c1:49:03:e2:be:d2:f4:ac:
         21:54:5d:e9:4e:a3:08:41:cc:3e:72:1e:c9:24:93:02:9f:2a:
         57:0b:df:6d:6d:89:57:78:2a:1e:67:99:74:5b:84:05:9d:b5:
         fd:b3:39:34:f4:76:27:8e:93:51:cc:bc:45:6b:84:b6:76:45:
         62:3b:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:53 2026 by rpki-client