Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AE0007C602D111EFA283724CC4F9AE02.roa
File:                     AE0007C602D111EFA283724CC4F9AE02.roa (raw, json)
Hash identifier:          oduepWdRCyuP7Z3WMIt/OYzoC0sIpdT0WvE8jOUjf+k=
Subject key identifier:   99:5E:A1:02:F0:E2:8F:54:C7:60:BD:B8:37:74:1B:AB:F6:D9:7F:F8
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E6C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AE0007C602D111EFA283724CC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:30:00 +0000
ROA not before:           Fri 02 Oct 2026 15:30:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150869
IP address blocks:        103.94.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28268 (0x6e6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:30:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcdf8-f3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f8:64:3f:2c:4f:c9:dc:b4:b2:ae:92:a3:a2:
                    5e:04:96:eb:f7:f4:28:db:de:9f:2b:e7:03:7a:22:
                    d1:5c:5a:e5:ab:6f:e1:70:2a:03:ed:22:c6:35:7c:
                    98:3a:02:11:ca:97:ba:25:4d:68:cc:a3:86:6e:bc:
                    3b:d0:ff:97:c8:b9:78:e1:cc:27:7b:d2:1e:4c:6e:
                    70:ed:4e:b6:db:c1:2e:84:06:af:5a:c5:6a:1f:3f:
                    78:62:b2:9e:b4:c4:62:c5:f6:33:a4:36:88:79:63:
                    e3:63:66:37:00:fc:05:e0:01:75:fb:0f:19:4c:87:
                    a8:9c:bd:f7:e8:45:61:89:d9:a4:32:f5:ca:38:cd:
                    1a:8b:6e:f5:d1:ea:a8:44:28:03:90:b3:ae:a4:29:
                    38:c9:67:98:9c:11:5f:7d:ec:12:c9:8c:7e:f9:07:
                    51:e3:43:c6:16:50:b7:a6:88:a2:ad:99:f0:d8:21:
                    bd:56:72:cc:f6:93:31:cd:ad:79:c1:30:35:40:27:
                    1a:49:a7:c7:13:69:45:b3:e4:ab:d1:f9:24:27:27:
                    f8:3c:cf:bc:b3:52:eb:2d:3b:3d:33:d0:d2:d7:ed:
                    92:44:45:c8:b9:08:eb:9f:05:e2:43:20:76:89:e0:
                    1a:a4:ce:b3:7a:29:8d:bf:5e:e5:62:34:7d:17:87:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5E:A1:02:F0:E2:8F:54:C7:60:BD:B8:37:74:1B:AB:F6:D9:7F:F8
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AE0007C602D111EFA283724CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:54:ae:e5:d5:69:17:6e:40:ce:72:3a:47:8b:1d:fc:6c:00:
         e8:88:a4:95:f2:27:96:f4:0c:25:e9:a3:9f:d3:b0:0b:70:bb:
         72:01:33:97:d0:0d:66:b9:d0:c5:15:8c:7e:6a:44:60:70:36:
         e6:e6:52:61:47:9e:a7:30:00:2b:5c:14:20:ec:7a:09:49:9d:
         f5:9b:ab:34:97:d3:2b:c3:30:b7:5e:c1:a9:89:57:1f:96:f6:
         98:0c:77:d4:51:5b:2d:6c:76:2c:81:44:ab:21:78:7f:35:f5:
         0b:b2:3d:56:55:c9:87:0d:99:a0:fe:3d:31:12:f9:b0:5e:6f:
         8d:b9:37:38:10:89:e9:b2:c6:7e:a5:15:71:cb:54:89:e0:41:
         8c:b5:9d:7d:97:38:06:21:b7:0a:fb:35:a6:75:6e:8e:98:91:
         b6:77:23:ca:d5:52:cf:61:96:06:e5:6c:c0:e7:c1:6b:dc:1e:
         3d:c8:9a:2b:d4:88:8a:53:a3:56:7a:df:6e:d3:2d:e1:1c:f6:
         ec:4c:9f:b6:7f:65:3b:41:5a:7d:17:8f:ec:46:73:b4:36:4b:
         09:0d:2f:a8:9b:f9:25:37:c3:4e:67:06:0e:7a:45:5c:d3:66:
         d9:f8:c7:e7:2e:7d:51:12:57:08:00:39:5a:31:36:28:50:6e:
         6e:ba:1a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:49:18 2026 by rpki-client