Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8FDF050AAE0511EF8576005AC4F9AE02.roa
File:                     8FDF050AAE0511EF8576005AC4F9AE02.roa (raw, json)
Hash identifier:          wzS4brwEUO1MENyouygFMeMvX3IN1Tlxox+Df0wRPds=
Subject key identifier:   F0:84:59:2A:CE:DD:E0:56:A5:9C:0D:24:81:CC:E0:7B:81:A5:2D:AB
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E61
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8FDF050AAE0511EF8576005AC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:29:37 +0000
ROA not before:           Fri 02 Oct 2026 15:29:37 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150854
IP address blocks:        103.112.208.0/23 maxlen: 24
                          2401:10a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28257 (0x6e61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:29:37 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcde1-e957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:27:27:79:9a:ee:58:83:b0:b2:b6:b5:99:
                    06:fa:f5:5f:9e:c4:bb:48:e3:57:42:83:0e:4c:c4:
                    00:4e:4e:82:88:87:f9:5e:0b:73:5e:d7:64:06:3f:
                    a7:0b:9e:f2:3b:81:fb:92:2c:a1:b7:69:2a:c7:9e:
                    89:d0:92:c9:b3:e0:5a:ab:b2:25:d0:85:0e:e9:a4:
                    5f:a4:e3:de:6e:f6:54:f1:cc:17:13:9a:d7:fe:09:
                    e1:64:5b:66:a4:07:04:f4:16:65:84:bf:9a:b7:dd:
                    18:fb:b6:f1:32:5c:ff:24:98:aa:31:78:3f:21:14:
                    6b:31:f2:2c:8a:d2:c2:db:34:47:12:1d:08:16:65:
                    0d:e2:81:ba:74:37:59:f3:f3:a9:7e:a3:bd:2e:4a:
                    da:9f:05:8e:97:1d:d6:2f:81:43:86:2d:ea:22:49:
                    d3:bd:ea:17:3e:2c:36:87:a5:87:e8:64:d1:94:48:
                    90:3d:46:13:59:40:36:3f:88:f6:1c:01:b1:2f:eb:
                    e4:fb:83:46:31:a9:33:46:7e:f3:7e:79:39:21:d1:
                    18:a8:a4:cb:e4:3f:e7:a1:f9:16:6f:20:97:c2:39:
                    51:7f:6e:df:78:5a:37:d2:2a:28:8e:0c:20:8e:bb:
                    37:2e:0f:d4:98:28:61:43:2b:1d:4e:cf:ea:82:2b:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:84:59:2A:CE:DD:E0:56:A5:9C:0D:24:81:CC:E0:7B:81:A5:2D:AB
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8FDF050AAE0511EF8576005AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.208.0/23
                IPv6:
                  2401:10a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:42:73:8c:7c:25:37:e8:3d:62:e2:69:a5:97:3b:f7:3e:e9:
         c9:a5:c2:08:75:42:98:81:ec:91:08:ba:c3:be:67:be:b4:2d:
         05:b1:ec:6f:75:13:b9:b1:a8:76:f1:0c:15:6c:1b:57:e5:49:
         bf:e2:b3:4d:74:e4:5d:42:3c:c4:7e:86:61:ab:34:90:ef:12:
         8c:d4:fb:29:5a:6f:e0:db:cb:11:80:4b:03:a0:a6:c2:b9:47:
         2b:b9:ae:e7:ad:21:9a:47:aa:e9:52:41:47:d8:61:52:3a:da:
         c5:6b:86:53:75:6d:72:de:c1:b9:88:0f:9c:8f:c9:f6:ba:73:
         1b:1e:40:9a:53:14:fa:fa:6d:0b:3a:32:54:db:d3:c6:8b:80:
         b0:54:c0:54:c3:f5:65:e6:ec:de:21:f8:e4:bc:fa:24:b3:f2:
         89:44:c5:b1:62:33:ff:48:cb:ba:16:a7:76:26:8d:10:ee:71:
         ba:fb:78:c3:05:5f:86:a5:43:ba:b0:c5:00:53:53:83:d4:ee:
         05:ae:9a:80:61:59:69:ba:d4:0a:18:7d:37:93:7b:bd:8c:97:
         e3:1e:98:1a:66:31:ef:67:cc:67:16:04:f0:af:02:8f:08:f3:
         3b:82:c2:0c:8a:c1:12:2a:21:0f:e3:55:4a:30:6b:87:2a:5d:
         29:74:ba:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:02:51 2026 by rpki-client