Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB34787C867A11F1A5C6553363A30FBC.roa
File:                     AB34787C867A11F1A5C6553363A30FBC.roa (raw, json)
Hash identifier:          4FYinRHd0NN7wClm+Pm47Ig1sKOl496uZCWJPDwZN9I=
Subject key identifier:   95:03:49:E9:4D:B1:F0:BF:B9:D1:74:74:A7:6F:43:7B:1E:EF:62:78
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F6C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB34787C867A11F1A5C6553363A30FBC.roa
Signing time:             Wed 14 Oct 2026 12:18:21 +0000
ROA not before:           Wed 14 Oct 2026 12:18:21 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135999
IP address blocks:        45.120.224.0/24 maxlen: 24
                          45.120.225.0/24 maxlen: 24
                          45.120.226.0/24 maxlen: 24
                          45.120.227.0/24 maxlen: 24
                          103.145.4.0/24 maxlen: 24
                          103.145.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28524 (0x6f6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct 14 12:18:21 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6acf730d-db87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:0b:84:6b:69:b3:af:14:c0:fe:d8:c7:9a:
                    cb:e6:d4:6b:d3:5a:ed:25:0b:5d:8f:c5:5c:3f:b3:
                    cb:1d:b0:0b:bd:6b:56:7e:a3:1b:18:9d:24:4f:fe:
                    fc:3a:ec:e7:8c:9c:a2:81:78:40:94:3e:56:84:bd:
                    b4:2c:15:93:46:af:f1:a7:1a:7c:6d:a4:4c:54:d0:
                    ea:56:e5:0a:fa:6b:ac:4d:4b:19:8f:82:1b:fa:86:
                    f3:55:0d:c9:cc:5d:93:50:38:aa:16:20:73:9c:c2:
                    de:bc:ac:44:ab:7a:67:7a:a7:16:ca:56:48:8b:78:
                    f9:6b:01:22:8b:17:69:5c:ac:ae:0d:97:5e:aa:96:
                    cf:62:27:2d:f2:fb:18:65:7c:e2:81:49:c2:d9:fa:
                    17:0e:f1:4a:15:ad:22:f0:24:08:8f:be:f1:32:9e:
                    34:d4:b8:53:8e:75:0f:3c:f0:ce:91:8d:3f:3a:8b:
                    db:93:0e:43:78:98:92:bb:ee:4d:c7:f4:69:4f:4f:
                    a2:a7:17:d1:96:5a:f5:4e:05:d0:a6:90:55:f6:54:
                    24:a6:ed:80:32:94:e7:43:3c:75:a6:74:85:92:7b:
                    6a:4a:81:0d:e6:b1:22:bd:30:af:74:14:cf:51:70:
                    8a:b0:d5:2e:cf:28:04:90:fd:93:27:3c:49:b2:e8:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:03:49:E9:4D:B1:F0:BF:B9:D1:74:74:A7:6F:43:7B:1E:EF:62:78
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB34787C867A11F1A5C6553363A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.224.0/22
                  103.145.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:9e:32:47:b4:7b:f5:e1:44:23:f8:a6:92:70:1a:ef:44:d0:
         4a:b8:89:ae:89:4f:25:3f:92:65:66:04:c5:5c:ee:8d:02:2b:
         76:bf:69:00:74:4a:40:fe:e3:b0:64:ae:48:3c:c2:73:79:16:
         93:49:cb:66:af:5a:dc:e2:7d:27:2c:98:c8:e2:87:4e:65:3f:
         59:d5:d6:be:a8:eb:0c:ac:8a:89:8c:74:fb:2c:ab:76:fb:d9:
         19:90:96:1f:c1:12:45:90:e7:b9:23:6f:eb:22:58:8b:5b:42:
         39:01:31:af:c7:34:24:f3:b6:5a:6b:b1:2e:6a:ab:a0:26:8e:
         7d:37:7c:03:cd:bf:1b:40:48:8b:a9:6e:17:17:9d:aa:ee:68:
         c0:54:4d:4d:61:97:03:08:e8:18:be:70:c9:5e:b9:5f:e0:25:
         a4:08:52:c1:b7:26:32:f2:d4:fc:ea:87:d8:92:59:94:59:32:
         47:6b:cc:f9:52:d4:34:8b:72:28:a2:14:46:26:35:51:8e:f0:
         be:ff:3b:fa:a9:14:38:84:f3:fd:1e:16:d3:61:00:a4:42:50:
         be:b8:f3:72:8b:04:de:a4:25:86:5b:00:6d:18:e7:23:15:b2:
         20:9d:48:17:ba:df:73:79:8f:4b:22:34:43:1d:e4:c3:13:7a:
         6d:15:8e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:54:46 2026 by rpki-client