Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/94BB642EAC2D11ECBBCB2721C4F9AE02.roa
File:                     94BB642EAC2D11ECBBCB2721C4F9AE02.roa (raw, json)
Hash identifier:          76bZWQNNJoSgr0oWJHjPDdAhKstwXBJQreT/sCcBmzE=
Subject key identifier:   FA:DF:06:A3:0F:B3:E4:7C:DF:F2:FA:B0:A4:9C:C6:38:EA:46:F2:5F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F43
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/94BB642EAC2D11ECBBCB2721C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:37:46 +0000
ROA not before:           Fri 02 Oct 2026 15:37:46 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     63751
IP address blocks:        103.221.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28483 (0x6f43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:37:46 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcfca-91a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:dd:ff:dc:ae:16:98:06:ed:8f:64:b3:1f:
                    3f:65:04:4a:0b:00:ed:6d:61:2e:e6:7f:c2:7d:64:
                    41:e8:e2:41:b8:38:e2:ee:17:a2:98:13:02:3b:50:
                    a3:d3:15:e3:9f:1a:8e:3d:b0:54:f0:2c:77:81:a6:
                    09:c4:dc:9f:98:78:39:78:a1:14:16:0d:55:34:40:
                    64:ca:d8:14:b3:22:33:1d:76:2e:0f:22:c8:a9:a9:
                    69:91:3f:58:fd:7a:f4:e5:bc:ee:39:e4:5e:92:2b:
                    6c:27:7b:92:1e:24:de:39:60:03:14:5f:d1:62:f8:
                    b2:f2:f8:01:a7:e0:90:31:82:7e:48:66:6c:cc:2f:
                    ec:16:ab:9e:d2:c1:17:5e:6e:1b:2f:b4:71:f9:57:
                    a2:a5:d3:ef:a5:be:a7:ec:a3:2e:b8:21:31:d3:02:
                    70:95:a7:4e:4f:53:d7:a8:c7:e1:4f:4c:51:96:da:
                    a4:b9:7c:43:af:cc:0b:00:2a:9b:a3:66:16:5e:ea:
                    04:27:5c:15:1c:6c:d9:db:8e:97:88:3a:0a:e2:16:
                    49:00:33:f7:9f:2d:4d:3a:26:1f:f6:c7:ae:7e:12:
                    f4:3e:6e:63:f5:24:7b:61:5f:fc:bc:37:92:6b:00:
                    fc:dd:52:2a:f4:e2:b5:76:ea:33:44:d7:3e:37:11:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DF:06:A3:0F:B3:E4:7C:DF:F2:FA:B0:A4:9C:C6:38:EA:46:F2:5F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/94BB642EAC2D11ECBBCB2721C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:62:8d:ea:c6:ec:6d:52:16:3b:be:5f:db:f6:c0:13:e4:98:
         e4:68:ac:a2:01:22:2d:cf:97:26:13:dc:ac:09:03:9c:95:a7:
         0a:b2:dd:dd:eb:1d:f6:53:a6:3f:7e:16:6d:8b:eb:81:e0:16:
         e4:ec:21:22:ba:c2:8a:52:5b:af:1c:a7:17:ef:ad:f3:c5:94:
         e6:fd:35:9b:83:28:cc:9d:49:f6:80:a4:0d:6f:24:c6:32:75:
         cb:2d:e3:0c:8a:3d:b3:eb:c2:c2:fd:41:93:37:80:94:ce:b0:
         50:b1:df:25:c9:ef:ee:65:98:73:ef:31:c3:41:b3:34:17:59:
         b4:40:0a:cb:54:e6:9f:c4:67:69:1d:f2:9e:6f:78:b9:8b:fd:
         91:9e:8e:90:22:c7:90:8e:21:68:13:94:8f:0f:9b:e4:20:cc:
         db:35:be:76:e0:06:ca:03:b1:0e:f5:8c:c5:aa:70:d7:4e:9d:
         fe:84:26:b0:b8:33:e6:de:7b:53:ad:73:d1:e7:84:9d:e9:42:
         8e:89:f2:9b:f8:c7:c4:26:27:db:17:4f:17:c9:21:18:be:25:
         38:b6:6e:f2:66:2a:4f:61:57:27:19:bd:18:b6:3a:59:20:54:
         67:58:18:e2:af:92:a7:12:8d:e9:4d:74:51:2a:7b:67:43:20:
         f9:d8:ea:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:51:31 2026 by rpki-client