Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/834040BA2F5011EDB527A61BC4F9AE02.roa
File:                     834040BA2F5011EDB527A61BC4F9AE02.roa (raw, json)
Hash identifier:          E/tytBp3ntZdwCEnYhtq7lpnJ4BKMWQUgFWgbD0KzVI=
Subject key identifier:   F7:3E:0C:2E:ED:69:91:F1:A8:4B:08:6D:F5:22:8F:C1:41:92:8F:8C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E38
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/834040BA2F5011EDB527A61BC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:28:12 +0000
ROA not before:           Fri 02 Oct 2026 15:28:12 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149129
IP address blocks:        103.1.200.0/22 maxlen: 24
                          2001:df4:da00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28216 (0x6e38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:28:12 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd8c-cb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:aa:34:a1:95:bc:96:65:62:93:ff:58:0c:
                    8b:9d:03:d3:bd:75:e6:de:8a:a6:8a:5a:e0:f3:a5:
                    9c:d3:0f:3d:32:a8:60:40:9d:c9:ba:d6:1a:ee:61:
                    e6:29:0d:a1:0c:c5:15:7e:b1:5f:3b:d1:47:93:08:
                    18:f8:75:65:b4:cc:44:61:93:74:f1:cf:c8:62:99:
                    f9:cd:2b:0f:5e:a3:57:34:1c:81:b4:e4:a1:1c:8a:
                    93:30:9b:fd:65:4a:17:3b:db:25:c3:73:b0:b8:2b:
                    cd:47:3f:b2:45:79:92:d1:b7:02:fc:05:4d:93:e3:
                    16:ab:ac:0a:61:05:79:9c:98:30:f4:5a:83:ca:c3:
                    f9:f0:7f:8b:3c:75:d4:73:ae:d0:db:2a:c5:de:87:
                    f2:81:a0:37:fa:a1:64:2d:f6:79:b7:f6:d0:bd:a9:
                    d6:23:99:69:10:80:c1:10:db:ba:38:94:86:77:67:
                    02:ad:22:a5:17:72:e0:45:9b:2f:27:ce:ce:d1:31:
                    c4:b9:89:03:fc:28:7d:54:d2:61:3d:39:5c:92:df:
                    11:c1:48:c6:ea:03:90:9b:6e:07:64:9a:3a:ed:eb:
                    1f:23:e0:8b:b5:24:0d:5a:31:f3:83:e4:1b:19:96:
                    88:77:63:c6:b5:f3:5b:b9:5f:d2:8e:22:1e:23:1b:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3E:0C:2E:ED:69:91:F1:A8:4B:08:6D:F5:22:8F:C1:41:92:8F:8C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/834040BA2F5011EDB527A61BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.200.0/22
                IPv6:
                  2001:df4:da00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:d1:62:60:24:82:f2:8e:e2:cc:51:16:c2:3a:01:aa:5e:9a:
         d1:ac:74:b3:67:45:f2:bc:7c:ad:ef:ab:0c:17:7c:59:15:bc:
         3a:8c:d8:ab:f5:12:e3:92:37:d3:dd:75:6c:b2:21:b8:4d:0b:
         e6:5c:5b:af:00:db:f0:35:eb:58:ec:eb:8c:8d:96:dd:15:4c:
         e8:f9:77:1f:1c:a0:3e:62:48:39:7d:2c:03:ec:7b:fe:c5:b7:
         73:ab:8d:a3:cf:28:68:15:2e:83:d0:ff:8b:b8:03:6e:f2:58:
         38:7b:87:b1:c1:fd:74:64:5a:fb:6e:4f:9c:cf:8b:a3:8b:4b:
         5c:61:96:10:80:bf:9f:89:2b:46:2e:b0:6f:af:db:71:68:37:
         ff:ef:67:ca:66:21:44:ee:b5:7c:af:a4:eb:39:c8:6e:90:40:
         6b:21:0c:81:b3:c7:49:b8:03:fa:1d:03:cb:3c:51:c5:c5:7d:
         1a:c0:ae:b8:75:8c:e6:ee:4b:43:71:52:10:84:36:6a:0a:68:
         ac:37:8d:71:b5:31:c3:e8:88:07:eb:d1:1c:6f:5e:19:88:cc:
         cc:9d:80:c0:37:50:4c:e2:6f:7e:79:bc:3f:92:5b:23:bd:ac:
         0d:0c:f9:f6:0b:0a:fa:88:5a:a3:65:35:ff:58:0b:7e:dc:f6:
         6e:3c:e9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:02:25 2026 by rpki-client