Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F3FB8286A2F11F1898CC5537847A888.roa
File:                     8F3FB8286A2F11F1898CC5537847A888.roa (raw, json)
Hash identifier:          2brcgd+L1sjXvGuzzp2Groll/MAhGs8bYtoHE2jLPcE=
Subject key identifier:   3D:43:C7:58:A4:F7:ED:39:77:1F:95:42:39:3B:1D:0A:34:C0:10:85
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6CB4
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F3FB8286A2F11F1898CC5537847A888.roa
Signing time:             Wed 17 Jun 2026 09:33:12 +0000
ROA not before:           Wed 17 Jun 2026 09:33:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154706
IP address blocks:        103.125.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 04:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27828 (0x6cb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jun 17 09:33:12 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a3269d8-3791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5c:be:2a:43:d3:a1:c3:98:d8:d2:ef:d3:27:
                    7f:84:04:cb:f8:28:73:b3:75:60:ee:f9:c5:51:8e:
                    d1:75:b0:22:15:27:96:50:17:49:12:ef:ed:88:0a:
                    67:bf:d3:4a:ac:8c:49:c9:10:eb:98:99:bc:b9:f7:
                    aa:9f:79:8f:62:9e:fd:9f:e6:bf:a6:fe:3a:66:47:
                    4d:02:bf:5c:80:a9:35:81:7c:18:28:bb:78:8a:9a:
                    c2:66:f5:47:00:ec:34:54:79:fa:e4:b1:7a:06:a8:
                    af:6f:c9:2e:a1:5c:00:29:6f:f4:bc:72:33:56:57:
                    34:3f:1c:65:c5:3d:05:a9:94:8f:df:8f:fd:51:17:
                    13:3b:cb:7c:a2:cb:e8:e5:15:0a:51:f8:f1:d7:d0:
                    01:24:4c:c7:41:0b:6a:67:23:9c:ae:66:ad:37:47:
                    1a:55:21:65:5e:fd:79:34:43:ee:b6:cd:48:90:8c:
                    18:b8:7b:94:88:f2:f0:3d:be:6b:fe:3f:2a:4a:95:
                    8f:75:62:4b:c2:48:65:90:ca:f4:e9:c2:c2:a4:99:
                    94:3e:49:ad:04:a1:d6:f0:7e:b4:5a:d3:61:10:5a:
                    51:ba:44:34:35:33:79:6f:99:c0:57:35:c7:4e:03:
                    47:d3:27:56:11:ba:cb:3c:f3:e5:57:68:0e:2e:67:
                    82:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:43:C7:58:A4:F7:ED:39:77:1F:95:42:39:3B:1D:0A:34:C0:10:85
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F3FB8286A2F11F1898CC5537847A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:2c:2f:26:2f:f7:9d:fa:85:79:45:3d:2d:be:15:08:c0:05:
         70:68:ad:e5:17:4c:9f:79:5d:e1:10:82:a3:15:6e:dd:06:80:
         2f:00:30:24:a8:bf:aa:5b:47:a0:c8:ba:45:9d:ab:98:11:62:
         37:b6:12:c3:29:5d:62:36:62:51:f5:00:98:aa:69:eb:a2:6d:
         bc:f3:b3:3f:3a:81:bd:d0:a4:ae:f6:56:12:01:ff:9a:d2:b3:
         ce:2c:1d:11:77:8c:f1:cf:47:d4:b0:73:78:9b:bd:14:06:db:
         7c:4e:20:f0:95:8a:0b:6a:09:49:6c:2a:7b:f6:3f:b6:09:8b:
         a8:8c:91:34:81:f4:71:9d:46:68:0b:b2:bd:30:33:4b:cd:0c:
         00:ce:ed:c8:d5:37:1e:3b:0c:19:74:9d:80:ba:08:82:2c:84:
         da:96:bd:84:db:62:3f:73:37:84:24:f2:5a:58:0f:00:61:a5:
         c2:3f:0a:d7:ba:30:3d:a3:36:bc:04:ad:dc:99:07:4d:c8:38:
         f3:13:57:9b:89:b5:39:08:40:8b:ac:bb:4f:6e:e8:b7:1b:ef:
         d1:90:bf:47:0d:47:d9:35:b0:2d:20:f9:49:29:cf:2c:34:e4:
         ab:05:8a:0f:b2:a1:e7:ac:f9:02:ee:9e:83:35:4f:b9:6e:63:
         eb:be:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:43 2026 by rpki-client