Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F400B883FFE11EEBFDFCF4CC4F9AE02.roa
File:                     8F400B883FFE11EEBFDFCF4CC4F9AE02.roa (raw, json)
Hash identifier:          YFPViE8bRiIQwgAPuIFF8rHqCX+it83dex3BHMA5C9k=
Subject key identifier:   B3:00:C8:67:37:EE:BB:E3:B3:97:74:34:B8:E3:6D:2B:7E:A6:EB:86
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E67
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F400B883FFE11EEBFDFCF4CC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:29:49 +0000
ROA not before:           Fri 02 Oct 2026 15:29:49 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150861
IP address blocks:        103.68.248.0/22 maxlen: 22
                          103.147.188.0/23 maxlen: 23
                          103.182.20.0/23 maxlen: 23
                          2001:df0:74c0::/48 maxlen: 48
                          2405:10c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28263 (0x6e67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:29:49 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcdec-dbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:25:c0:b7:9d:4b:11:d2:de:aa:76:f2:23:
                    32:29:3f:84:5d:fb:d4:5b:88:78:54:24:b4:8c:93:
                    86:f6:78:33:47:56:13:ca:a9:12:40:9e:2d:62:cb:
                    3a:84:b5:c8:a8:eb:ff:e8:92:c7:44:5a:d7:b3:27:
                    6a:52:a0:ae:fc:6b:91:ba:fe:84:e5:f1:34:20:d0:
                    4c:6d:e6:6c:5d:65:58:12:10:11:97:45:a8:78:74:
                    46:fc:03:a9:3c:14:44:4b:8f:f3:fe:7a:be:7d:e8:
                    e6:eb:5a:02:13:ed:e6:6c:af:7e:37:a3:26:a7:d7:
                    fe:0b:67:64:e6:93:97:b9:15:01:c2:cb:9a:80:08:
                    10:67:8c:95:b7:60:ba:e7:9c:f6:cb:e9:46:47:60:
                    c4:03:6f:f2:f3:ed:36:5d:9c:b7:5a:65:4b:8f:d2:
                    99:fc:d6:40:fa:14:a3:ee:7d:85:ee:06:8d:5e:a3:
                    e8:80:dc:4e:59:7e:a9:6d:f3:df:04:ad:7f:04:77:
                    b5:a3:b2:cd:8d:1e:62:11:27:fe:ae:29:d6:38:4d:
                    89:6b:72:53:07:23:84:22:32:b6:95:a8:b8:e5:18:
                    78:f9:53:28:3e:88:ea:80:bd:b5:a0:ba:67:20:11:
                    6d:d1:76:b4:20:25:83:7c:73:20:29:0c:63:18:4f:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:00:C8:67:37:EE:BB:E3:B3:97:74:34:B8:E3:6D:2B:7E:A6:EB:86
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F400B883FFE11EEBFDFCF4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.248.0/22
                  103.147.188.0/23
                  103.182.20.0/23
                IPv6:
                  2001:df0:74c0::/48
                  2405:10c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:8e:c8:12:00:1e:2d:fe:ec:f5:94:37:da:d7:9f:96:7d:23:
         8b:6e:9b:ea:27:6a:a1:8b:34:40:a0:7d:d6:f9:7e:54:9e:91:
         c3:86:2d:6b:e2:b1:81:fa:14:1a:82:c8:b3:ff:e0:ca:61:94:
         d2:d7:cd:b3:a7:81:9d:b2:12:92:63:6b:0f:62:07:ce:ab:a3:
         c4:43:92:7b:62:c4:68:27:ea:b8:5a:c7:ee:49:25:6b:65:4f:
         25:78:8d:97:9b:a4:9c:fa:27:d1:00:aa:24:0b:54:44:82:eb:
         e3:f2:87:de:77:9a:02:44:ab:b5:23:9f:b2:aa:e8:53:9b:7b:
         85:ad:c5:bc:f0:4c:45:93:27:96:c0:1e:d4:45:f3:b0:fa:2e:
         dd:3f:bb:ca:1e:e7:a3:35:21:f4:70:a4:a2:ea:03:77:83:69:
         31:e4:bb:da:53:c1:e7:d4:1d:6c:80:a5:4e:c0:9f:c4:d0:2c:
         83:58:5d:8e:67:73:9f:bd:0f:16:d7:d8:be:eb:bc:07:a5:e4:
         4b:39:85:a3:85:f6:d1:63:23:35:a1:ec:cd:47:5c:70:d7:f2:
         a1:3b:9f:be:61:25:9e:5c:66:9f:9c:73:2b:b2:cf:8c:8a:f3:
         79:a4:fa:63:26:df:bd:4c:fd:1f:71:f7:ad:6b:1d:8c:e9:e4:
         85:b3:52:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:36 2026 by rpki-client