Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB057E8ADD9811ECA143AA87C4F9AE02.roa
File:                     AB057E8ADD9811ECA143AA87C4F9AE02.roa (raw, json)
Hash identifier:          Oz3450gtAd9NYU5ewn1aN87Pora57B2sH90j7LkutW4=
Subject key identifier:   5E:00:BF:8F:D8:9D:22:D0:87:16:BD:11:2E:94:C9:65:32:E4:7E:85
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F12
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB057E8ADD9811ECA143AA87C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:35:58 +0000
ROA not before:           Fri 02 Oct 2026 15:35:58 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45552
IP address blocks:        103.20.144.0/22 maxlen: 24
                          202.43.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28434 (0x6f12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:35:58 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf5e-52c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:e6:4a:0d:2d:62:22:09:68:20:aa:f4:3e:
                    d4:1d:64:25:6b:5d:ee:dc:8a:e7:4a:21:b7:df:ac:
                    ea:b5:f3:82:0f:79:a8:6e:a2:e4:17:62:05:ed:0b:
                    9e:5a:34:21:d6:27:1f:87:42:6f:42:e5:a5:f4:f5:
                    86:60:bd:30:81:e1:e1:c4:50:d0:b4:60:0f:1e:80:
                    f4:b4:5a:37:cf:1f:bc:a0:03:6d:04:ac:c5:1f:27:
                    09:e2:46:e8:3f:7e:17:71:7e:51:e0:cb:3e:e2:5d:
                    e3:0f:a3:74:ef:a7:10:50:0e:a9:7c:76:03:83:6f:
                    e2:38:11:54:85:3d:3c:5f:76:ab:ac:da:34:4d:b2:
                    3a:ae:fa:06:e8:57:e3:69:7c:91:45:a3:ee:d9:bc:
                    ac:82:b3:c0:a6:34:87:f9:83:3b:19:5d:f5:a3:51:
                    62:47:63:d5:d8:9b:f2:17:d5:86:18:01:8d:a6:df:
                    da:c6:e2:6f:e5:a7:8e:5e:32:e0:8c:3c:01:23:a9:
                    b8:06:e8:33:b4:c1:36:d6:5b:be:d2:50:ad:b8:f6:
                    7f:e2:c4:61:66:ee:78:07:02:f7:07:e2:7d:5d:06:
                    56:70:72:78:24:23:28:31:f6:fb:76:66:9c:56:9d:
                    5a:4e:aa:cd:ce:6e:b2:69:64:72:ca:0d:51:c6:c9:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:00:BF:8F:D8:9D:22:D0:87:16:BD:11:2E:94:C9:65:32:E4:7E:85
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB057E8ADD9811ECA143AA87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.144.0/22
                  202.43.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:56:91:96:ba:f7:d1:63:ed:24:ff:d9:f9:06:37:50:ad:47:
         af:92:52:56:3b:5f:6a:9f:e7:73:20:11:0c:fc:d6:4e:73:ed:
         a9:9a:d9:2b:27:80:43:33:ac:6d:76:80:9a:ba:9f:bb:dc:b8:
         0d:a9:8e:94:36:30:4c:09:34:bc:90:c3:f1:3a:8c:34:5a:3b:
         f2:69:45:7c:b9:60:9d:c9:56:f4:96:59:ae:d5:07:1a:3f:af:
         db:e0:26:8c:bf:c4:11:2c:67:f8:b5:7b:e7:7a:1e:96:ab:49:
         ca:e7:f9:13:d6:2d:90:9b:60:35:29:6c:15:c0:b2:3a:41:54:
         2f:f2:40:bd:e1:ca:c3:2a:c3:2f:a1:19:1a:04:41:b1:a7:75:
         3c:18:18:ed:35:87:7d:c8:85:4b:9d:ef:f8:92:65:92:c8:85:
         52:69:b5:8b:a7:04:68:6d:5f:03:69:59:53:92:fe:61:d8:2b:
         79:db:6f:86:02:3a:4a:d1:de:ca:3a:34:9d:4a:b1:37:49:c6:
         a5:11:ba:e4:df:43:82:66:f1:ff:c1:2b:60:fa:ff:c3:39:7a:
         bd:d4:9d:a3:ae:68:9e:61:a7:c7:fd:ae:ef:49:a5:23:ea:75:
         a6:57:36:47:c5:f3:a0:ef:d7:3a:cc:40:65:d4:3b:52:ef:56:
         61:d5:8e:f5
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICbxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzNTU4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Y1ZS01MmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqjjmSg0tYiIJaCCq9D7UHWQla13u3IrnSiG336zqtfOCD3mobqLkF2IF7Que
WjQh1icfh0JvQuWl9PWGYL0wgeHhxFDQtGAPHoD0tFo3zx+8oANtBKzFHycJ4kbo
P34XcX5R4Ms+4l3jD6N076cQUA6pfHYDg2/iOBFUhT08X3arrNo0TbI6rvoG6Ffj
aXyRRaPu2bysgrPApjSH+YM7GV31o1FiR2PV2JvyF9WGGAGNpt/axuJv5aeOXjLg
jDwBI6m4BugztME21lu+0lCtuPZ/4sRhZu54BwL3B+J9XQZWcHJ4JCMoMfb7dmac
Vp1aTqrNzm6yaWRyyg1RxskI7QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFF4Av4/Y
nSLQhxa9ES6UyWUy5H6FMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUIwNTdFOEFE
RDk4MTFFQ0ExNDNBQTg3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZxSQAwQCyitsMA0GCSqGSIb3DQEBCwUAA4IBAQCkVpGWuvfRY+0k
/9n5BjdQrUevklJWO19qn+dzIBEM/NZOc+2pmtkrJ4BDM6xtdoCaup+73LgNqY6U
NjBMCTS8kMPxOow0WjvyaUV8uWCdyVb0llmu1QcaP6/b4CaMv8QRLGf4tXvneh6W
q0nK5/kT1i2Qm2A1KWwVwLI6QVQv8kC94crDKsMvoRkaBEGxp3U8GBjtNYd9yIVL
ne/4kmWSyIVSabWLpwRobV8DaVlTkv5h2Ct522+GAjpK0d7KOjSdSrE3ScalEbrk
30OCZvH/wStg+v/DOXq91J2jrmieYafH/a7vSaUj6nWmVzZHxfOg79c6zEBl1DtS
71Zh1Y71
-----END CERTIFICATE-----
Generated at Sat Oct 24 13:02:48 2026 by rpki-client