Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0CF752FE6511EE93D6CC3AC4F9AE02.roa
File:                     AF0CF752FE6511EE93D6CC3AC4F9AE02.roa (raw, json)
Hash identifier:          gp0obv6dxLhMr8kF+BDHduP30gQnU+PnTevnqFHal5s=
Subject key identifier:   22:8A:A9:4A:FC:D5:55:16:1E:B8:7C:90:38:9B:F0:51:75:2F:CB:42
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EFB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0CF752FE6511EE93D6CC3AC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:35:08 +0000
ROA not before:           Fri 02 Oct 2026 15:35:08 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     24176
IP address blocks:        101.53.0.0/18 maxlen: 24
                          119.15.176.0/20 maxlen: 24
                          119.17.224.0/19 maxlen: 24
                          202.151.168.0/21 maxlen: 24
                          210.86.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28411 (0x6efb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:35:08 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf2c-cfa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:79:3d:1c:20:94:34:fc:50:9f:ff:bd:cf:
                    d9:d6:63:45:df:29:90:3e:a5:2e:17:7d:15:96:33:
                    a7:51:c3:de:23:02:03:89:e4:d8:36:48:04:58:01:
                    7a:ee:d8:03:0f:a2:8d:4c:40:84:cc:02:32:91:26:
                    e1:29:48:18:2c:58:4e:77:6a:5c:6a:00:6a:fe:4e:
                    83:ac:ff:2c:7f:6d:12:2a:d3:26:3e:65:f3:e2:eb:
                    f0:5e:3d:2e:f1:20:86:09:a5:55:2f:08:b7:d4:cb:
                    b0:d7:38:b6:f4:12:de:4f:8f:2a:75:de:e7:60:28:
                    4c:7a:fd:49:de:8a:ca:83:f0:07:55:dd:04:33:9b:
                    d3:37:a0:38:a6:91:17:eb:b8:19:f6:2f:c9:de:86:
                    20:c8:37:fb:1e:99:cd:2f:35:c4:59:4d:be:13:66:
                    4c:45:25:fc:6f:0c:6c:40:61:00:d2:97:ae:c3:ac:
                    d6:e5:94:ff:ab:d8:b4:ae:f8:85:aa:62:81:e0:fc:
                    e1:99:8a:6d:d5:bf:cd:01:83:76:cb:da:07:23:47:
                    2d:8f:38:64:09:8c:7c:db:7e:67:df:2a:5c:9d:be:
                    47:bd:ef:3b:55:dc:56:7f:cd:dc:82:64:a8:9b:5d:
                    94:23:bd:2d:0f:c5:bb:0f:d6:67:9c:9d:05:26:ac:
                    9c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8A:A9:4A:FC:D5:55:16:1E:B8:7C:90:38:9B:F0:51:75:2F:CB:42
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0CF752FE6511EE93D6CC3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.53.0.0/18
                  119.15.176.0/20
                  119.17.224.0/19
                  202.151.168.0/21
                  210.86.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:c5:6a:14:11:e1:06:c9:17:fa:90:21:d6:79:8e:7f:18:37:
         63:8e:6d:d6:fb:bf:0b:c3:b9:b3:d3:c7:86:1e:c3:57:42:36:
         2e:3e:8d:6f:1c:75:5e:32:63:64:89:57:c6:df:14:a6:79:a4:
         5b:a3:09:43:c7:af:9a:c6:d1:fe:1e:bd:42:05:46:23:70:ef:
         92:b2:cf:d1:43:ec:d0:d7:72:4b:65:da:2a:fd:e4:e9:13:c9:
         18:39:08:38:08:19:d0:36:d2:be:4d:57:ad:af:1d:63:6f:4e:
         39:ff:15:c7:d6:3b:53:af:df:ff:0e:3e:66:43:0a:c0:74:57:
         fe:44:86:79:c6:b2:66:3c:ef:88:01:06:e0:e6:a1:69:c6:e4:
         a0:80:18:b7:00:43:9f:a3:9d:2c:6e:17:ea:4a:3f:8d:7f:f1:
         cd:7d:fd:5b:88:4f:91:4c:c0:1a:9d:06:76:42:da:06:47:23:
         89:df:aa:ac:ff:2f:8c:39:55:af:f1:28:d3:b4:d0:f1:1e:1a:
         ce:82:2d:2b:f7:56:e0:05:2d:52:b8:ed:28:6d:85:f2:3c:04:
         54:34:3b:3e:36:a7:df:45:1e:fa:ee:c1:0f:59:41:d8:98:e7:
         60:3c:e9:4e:4f:16:b8:cc:5c:0b:09:3c:db:69:ed:bf:c0:a3:
         fb:ea:41:a7
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICbvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzNTA4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2YyYy1jZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApAR5PRwglDT8UJ//vc/Z1mNF3ymQPqUuF30VljOnUcPeIwIDieTYNkgEWAF6
7tgDD6KNTECEzAIykSbhKUgYLFhOd2pcagBq/k6DrP8sf20SKtMmPmXz4uvwXj0u
8SCGCaVVLwi31Muw1zi29BLeT48qdd7nYChMev1J3orKg/AHVd0EM5vTN6A4ppEX
67gZ9i/J3oYgyDf7HpnNLzXEWU2+E2ZMRSX8bwxsQGEA0peuw6zW5ZT/q9i0rviF
qmKB4PzhmYpt1b/NAYN2y9oHI0ctjzhkCYx8235n3ypcnb5Hve87VdxWf83cgmSo
m12UI70tD8W7D9ZnnJ0FJqyc9QIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFCKKqUr8
1VUWHrh8kDib8FF1L8tCMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUYwQ0Y3NTJG
RTY1MTFFRTkzRDZDQzNBQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk
BAIAATAeAwQGZTUAAwQEdw+wAwQFdxHgAwQDypeoAwQD0lboMA0GCSqGSIb3DQEB
CwUAA4IBAQATxWoUEeEGyRf6kCHWeY5/GDdjjm3W+78Lw7mz08eGHsNXQjYuPo1v
HHVeMmNkiVfG3xSmeaRbowlDx6+axtH+Hr1CBUYjcO+Sss/RQ+zQ13JLZdoq/eTp
E8kYOQg4CBnQNtK+TVetrx1jb045/xXH1jtTr9//Dj5mQwrAdFf+RIZ5xrJmPO+I
AQbg5qFpxuSggBi3AEOfo50sbhfqSj+Nf/HNff1biE+RTMAanQZ2QtoGRyOJ36qs
/y+MOVWv8SjTtNDxHhrOgi0r91bgBS1SuO0obYXyPARUNDs+NqffRR767sEPWUHY
mOdgPOlOTxa4zFwLCTzbae2/wKP76kGn
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:40 2026 by rpki-client