Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/92BB2FAC217C11F09046F351C4F9AE02.roa
File:                     92BB2FAC217C11F09046F351C4F9AE02.roa (raw, json)
Hash identifier:          1vIqh78PM/1VfCgInpjFf4GHSHM6aPIcQA5cS+6iATQ=
Subject key identifier:   C0:69:0C:8D:03:18:DC:71:81:2B:21:A8:70:95:F4:CE:7C:C4:FB:6C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EAD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/92BB2FAC217C11F09046F351C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:32:28 +0000
ROA not before:           Fri 02 Oct 2026 15:32:28 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     152992
IP address blocks:        103.6.234.0/23 maxlen: 24
                          2001:df4:3d40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28333 (0x6ead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:32:28 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfce8c-71c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3f:1b:e5:76:a7:61:d7:48:67:c4:1a:8c:89:
                    1a:6b:78:b0:09:98:06:3a:52:ef:06:a4:85:0c:b9:
                    69:b7:12:5e:57:dc:da:c0:ff:b3:1c:bf:a6:60:b3:
                    f1:28:6e:fc:cd:d0:f5:94:15:50:1d:6e:20:cc:8a:
                    4e:59:af:43:43:98:65:c6:d9:ba:71:6e:9a:2f:dc:
                    0d:5a:71:ea:3a:3d:7f:85:0d:a6:5b:bc:46:7a:6f:
                    92:b4:35:c7:f4:57:47:eb:66:6d:f2:e3:83:21:d4:
                    81:ce:04:a9:d5:a6:10:9c:59:2b:ab:69:39:c6:09:
                    d2:f4:bf:54:11:af:a3:a9:01:e6:6f:33:e2:76:97:
                    9c:42:6a:60:3b:28:61:10:db:43:67:b7:1c:f9:39:
                    3a:e1:7a:eb:b5:dd:61:1b:d8:51:63:08:5e:0d:9b:
                    03:ae:44:41:45:1e:4b:cf:74:1b:3b:d5:55:54:7d:
                    11:9c:d4:28:44:6e:ca:e5:66:0d:23:85:b5:58:5c:
                    a0:22:56:98:46:b4:0c:54:eb:1f:ee:b0:7a:fe:78:
                    e1:4d:ab:bb:d0:9d:eb:76:8a:2f:9e:19:ca:57:c9:
                    f6:38:f9:a2:19:cd:79:5a:d8:ae:60:24:13:78:d1:
                    5c:19:57:d6:eb:dd:1f:0d:8a:99:f2:2c:34:30:bf:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:69:0C:8D:03:18:DC:71:81:2B:21:A8:70:95:F4:CE:7C:C4:FB:6C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/92BB2FAC217C11F09046F351C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.234.0/23
                IPv6:
                  2001:df4:3d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:d7:14:82:5e:ff:a6:98:ca:a0:b3:25:cb:ab:eb:8a:59:50:
         2b:56:8c:53:7f:73:3b:3a:ed:4b:28:cb:d3:9c:66:e8:aa:2d:
         ac:f8:66:41:0a:65:35:84:71:63:af:2d:23:db:0a:d9:ab:60:
         b9:9c:1d:90:d0:18:65:7b:59:24:ef:a3:1f:80:47:df:1b:b2:
         ce:29:59:8c:1a:bc:ea:6b:b2:7d:a1:8b:5b:8a:aa:6a:65:45:
         3c:1e:ff:ac:1f:b2:3a:c6:ce:66:68:0c:5b:a5:e1:cf:29:8c:
         79:17:ff:c7:19:c4:fd:b9:8c:b4:d7:ef:48:2e:ef:3a:ef:50:
         2d:35:fc:49:00:9c:68:d8:0d:38:1a:a2:01:c8:6a:c7:bf:fc:
         af:f1:b0:de:61:aa:7c:8e:48:b8:6e:97:58:25:fd:bc:73:8f:
         ba:0e:59:7b:69:97:80:b6:c9:cd:4a:ad:39:42:61:35:03:13:
         b7:8a:4d:c8:be:2c:96:a3:b2:f2:43:5a:b7:42:8e:a4:f7:39:
         85:c8:70:4c:99:ac:0f:02:f1:c6:47:69:a5:e0:4d:c2:30:b8:
         cf:8a:bc:32:7c:0b:4e:de:a6:1c:39:73:3e:6f:6c:16:2b:a8:
         2c:f2:05:ff:ff:0f:7f:69:b8:8a:fb:99:71:d4:c2:33:ad:cf:
         d5:9e:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:56:53 2026 by rpki-client