Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7DF537AF98D11EF9F6D6028C4F9AE02.roa
File:                     A7DF537AF98D11EF9F6D6028C4F9AE02.roa (raw, json)
Hash identifier:          PJdv9HUnU3gEbmXVAP8ZNrkfW7ndWNvHAsOjCE771BI=
Subject key identifier:   CB:8A:8C:4A:F4:2D:66:A2:17:83:CF:84:1A:04:4D:DB:1C:6D:43:F5
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E62
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7DF537AF98D11EF9F6D6028C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:29:39 +0000
ROA not before:           Fri 02 Oct 2026 15:29:39 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150855
IP address blocks:        103.109.186.0/23 maxlen: 24
                          103.112.210.0/23 maxlen: 24
                          2401:10e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28258 (0x6e62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:29:39 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcde3-2a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:24:fb:1b:9f:71:be:e3:83:fb:09:54:5f:
                    ae:41:e8:32:d3:8b:b6:45:00:00:67:b0:49:38:fd:
                    f6:cf:01:34:51:12:73:7a:08:b5:58:77:1e:13:92:
                    3c:c8:44:a9:75:fe:ce:e9:89:e6:16:61:78:c6:5b:
                    30:41:b6:3a:ae:da:5f:bd:6a:e2:be:04:a0:97:ba:
                    c8:16:3a:f9:36:41:ba:d9:1b:fb:de:e8:93:f3:99:
                    5e:f9:1d:fd:07:2d:bf:83:4e:5f:33:02:cd:9f:9d:
                    04:8f:66:5d:0b:81:b2:a2:a9:27:0f:20:1b:5c:10:
                    fa:f0:1d:bc:62:1c:2f:3a:45:d8:b9:2f:bb:14:6d:
                    9e:5e:ca:fc:8d:ec:fe:5b:8b:04:87:5f:67:92:4b:
                    a3:f0:42:35:90:be:5a:68:c3:16:7d:0a:fa:ff:b6:
                    41:25:90:01:13:8c:61:86:90:7a:36:20:37:a0:90:
                    e1:eb:43:00:43:47:41:50:93:a9:86:35:fa:34:04:
                    51:cb:67:fd:37:7f:34:8a:a2:7d:3b:64:00:50:27:
                    4b:3c:74:9b:5d:43:80:39:42:d9:3d:d7:24:91:bf:
                    5b:38:24:5d:49:e3:67:63:af:d3:df:f9:a0:9b:1c:
                    b9:1f:73:10:42:08:a2:2a:bf:b5:9f:63:c2:b6:25:
                    2a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8A:8C:4A:F4:2D:66:A2:17:83:CF:84:1A:04:4D:DB:1C:6D:43:F5
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7DF537AF98D11EF9F6D6028C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.186.0/23
                  103.112.210.0/23
                IPv6:
                  2401:10e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:66:ed:b4:fc:70:4c:31:76:83:d2:41:f4:83:10:f7:db:42:
         f3:cb:3b:73:f5:c8:d3:c4:ac:6d:61:55:8e:45:49:6c:cc:52:
         33:79:24:b2:dc:b1:4c:65:25:22:c0:91:57:82:98:0b:1b:99:
         fe:04:55:f1:ea:ad:32:d8:1e:b0:4b:ba:99:c6:88:82:ca:32:
         78:35:9a:c8:e7:fa:eb:59:59:30:ad:2b:2b:79:c6:b1:e7:cb:
         75:ba:b7:be:d0:54:a9:96:94:1d:98:42:0c:2e:98:41:29:17:
         8e:a3:6f:d4:a9:16:21:c6:e3:4e:31:98:c9:a9:ee:02:ce:07:
         46:09:5c:90:c3:56:69:53:8d:dc:ba:46:17:f7:90:50:72:60:
         3d:00:4e:26:a8:0c:10:90:6c:fd:0e:39:7f:ba:d7:f7:67:82:
         5e:4a:fe:bb:85:44:00:8c:e1:ea:06:c2:1e:f6:8d:57:1c:73:
         a3:59:00:0a:07:ec:47:68:c5:a2:58:2f:3d:86:df:4f:30:8d:
         d1:32:aa:6f:ba:43:36:9f:d2:af:9d:44:2c:e7:3f:92:98:af:
         ad:8b:57:05:f2:2d:b7:a6:22:29:b3:b0:3b:2f:83:10:d4:5d:
         84:43:b4:e9:a6:1f:1e:51:4d:fe:25:9e:6a:0e:82:63:2a:b7:
         55:c1:70:0d
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICbmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyOTM5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2RlMy0yYTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5kk+xufcb7jg/sJVF+uQegy04u2RQAAZ7BJOP32zwE0URJzegi1WHceE5I8
yESpdf7O6YnmFmF4xlswQbY6rtpfvWrivgSgl7rIFjr5NkG62Rv73uiT85le+R39
By2/g05fMwLNn50Ej2ZdC4GyoqknDyAbXBD68B28YhwvOkXYuS+7FG2eXsr8jez+
W4sEh19nkkuj8EI1kL5aaMMWfQr6/7ZBJZABE4xhhpB6NiA3oJDh60MAQ0dBUJOp
hjX6NARRy2f9N380iqJ9O2QAUCdLPHSbXUOAOULZPdckkb9bOCRdSeNnY6/T3/mg
mxy5H3MQQgiiKr+1n2PCtiUq+QIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFMuKjEr0
LWaiF4PPhBoETdscbUP1MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTdERjUzN0FG
OThEMTFFRjlGNkQ2MDI4QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQBZ226AwQBZ3DSMA8EAgACMAkDBwAkARDgAAAwDQYJKoZIhvcNAQEL
BQADggEBABpm7bT8cEwxdoPSQfSDEPfbQvPLO3P1yNPErG1hVY5FSWzMUjN5JLLc
sUxlJSLAkVeCmAsbmf4EVfHqrTLYHrBLupnGiILKMng1msjn+utZWTCtKyt5xrHn
y3W6t77QVKmWlB2YQgwumEEpF46jb9SpFiHG404xmMmp7gLOB0YJXJDDVmlTjdy6
Rhf3kFByYD0ATiaoDBCQbP0OOX+61/dngl5K/ruFRACM4eoGwh72jVccc6NZAAoH
7EdoxaJYLz2G308wjdEyqm+6Qzaf0q+dRCznP5KYr62LVwXyLbemIimzsDsvgxDU
XYRDtOmmHx5RTf4lnmoOgmMqt1XBcA0=
-----END CERTIFICATE-----
Generated at Sun Oct 25 10:42:04 2026 by rpki-client