Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/955199E07F6911F098ACD984C4F9AE02.roa
File:                     955199E07F6911F098ACD984C4F9AE02.roa (raw, json)
Hash identifier:          OXFOQCvt5uIjc4Nmkh22zC9bcDdACFIPG+aZe8dEulA=
Subject key identifier:   73:30:E1:A2:CA:1E:3D:06:C6:B5:4D:11:B1:5E:04:64:59:37:DD:8F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6BFA
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/955199E07F6911F098ACD984C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:31:43 +0000
ROA not before:           Thu 28 Aug 2025 14:53:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135947
IP address blocks:        103.117.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27642 (0x6bfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:30 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61ddf-861c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:7c:50:40:4a:5b:d5:8d:a9:d4:54:fb:bc:
                    82:98:85:97:1e:63:97:17:31:a5:14:db:f0:28:6b:
                    e4:55:13:99:42:9b:4e:b5:6e:65:c4:46:3d:3c:9e:
                    04:29:6d:00:cb:4a:19:e7:15:ae:9d:ea:7c:bf:1e:
                    5e:be:b9:6c:98:2a:65:b3:b9:4d:62:be:b2:fb:35:
                    d9:f9:c1:4d:07:8a:b4:d2:f2:87:64:c3:26:06:e1:
                    b9:39:0b:d6:f6:b7:86:8a:3e:d8:e4:3e:09:f6:2c:
                    18:71:1f:78:09:4a:38:18:73:c1:f9:35:f9:ef:46:
                    12:72:2d:b0:e5:87:bf:b1:26:45:9e:d3:25:3b:fc:
                    65:f8:c7:0e:b7:cb:0e:8c:86:d7:e2:20:de:a9:fd:
                    33:91:ab:b6:dc:c4:5c:a8:ff:03:14:e3:25:96:09:
                    b0:ba:fa:81:e7:9e:3f:e9:0a:b5:10:f0:e5:35:c8:
                    4f:d2:86:af:69:f4:1d:36:75:63:06:47:b1:93:ce:
                    6a:bd:23:9e:cd:76:35:ea:0c:49:f0:29:9e:3f:33:
                    ba:4d:5c:79:3b:06:5a:a8:33:f9:39:f5:af:2d:d1:
                    dc:3d:aa:0a:6d:44:95:bc:87:e7:e5:33:6a:1a:da:
                    0c:87:ce:6b:7a:62:2d:65:b1:35:92:71:be:18:5d:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:30:E1:A2:CA:1E:3D:06:C6:B5:4D:11:B1:5E:04:64:59:37:DD:8F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/955199E07F6911F098ACD984C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:83:e0:83:18:41:b8:50:65:64:8d:d5:1c:28:0e:f1:7c:49:
         6f:aa:de:15:e4:ce:0b:ef:17:36:f7:88:4e:45:e0:df:63:3b:
         7a:ea:f3:c6:ae:65:19:52:6e:87:0f:83:bb:8d:54:e3:83:bc:
         44:cb:ab:d4:ac:e4:cb:f4:e1:65:79:24:34:4b:89:99:2e:f9:
         2b:75:a7:ca:f7:73:ab:a5:88:48:b1:d7:f9:a1:04:a3:3c:8c:
         d6:1e:d4:64:95:d2:e6:fc:5f:9d:b2:14:6d:2c:3f:2c:b1:48:
         22:18:56:8e:13:2a:e8:89:b6:1d:1b:56:25:98:7b:08:81:94:
         ed:ca:39:45:61:d1:f4:f2:83:24:49:09:c0:31:ea:c2:a3:a2:
         b8:ac:3f:44:5c:32:9b:3f:7f:4b:38:40:a9:29:af:90:98:e7:
         90:1c:bc:b8:a2:7d:ac:62:a1:2c:91:85:94:42:c6:24:eb:f0:
         e5:a2:fc:70:e6:23:8c:ea:50:da:cd:13:a3:92:f1:36:7d:fa:
         60:bd:fe:28:ec:2f:7b:ec:28:9d:92:e0:99:36:a9:e1:e1:9a:
         63:af:ff:b0:7c:43:d9:00:8e:ea:c5:18:52:58:e6:c0:0e:50:
         97:15:83:e4:10:88:84:36:0b:86:9c:98:6f:fe:ae:a3:87:b6:
         47:8c:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:58 2026 by rpki-client