Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B7064366D60911EEB0C1F009C4F9AE02.roa
File:                     B7064366D60911EEB0C1F009C4F9AE02.roa (raw, json)
Hash identifier:          p+N48MaJ+3bO9kURaP4EStpiGHfUJsyG3agfg+4g8dM=
Subject key identifier:   22:50:E4:B0:2F:82:F2:8F:73:73:F6:85:36:B3:2C:CB:6D:15:06:B7
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6D83
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B7064366D60911EEB0C1F009C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:22:25 +0000
ROA not before:           Fri 02 Oct 2026 15:22:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     131382
IP address blocks:        103.183.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28035 (0x6d83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:22:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc31-e4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:93:ad:2a:eb:35:0b:7b:39:04:7c:71:af:
                    c6:2b:e1:04:42:66:7f:d0:16:fb:a0:c9:91:f1:18:
                    3e:3c:8c:39:73:67:e7:5f:9a:5a:0e:3b:5c:8f:48:
                    59:a3:22:12:3a:38:24:35:db:40:8a:df:74:56:3f:
                    d4:76:96:4d:ab:0b:16:4e:d9:da:26:90:4f:c1:65:
                    53:3c:a8:fd:c7:ae:7f:3b:41:3e:fd:16:0a:ad:01:
                    8d:03:21:cf:c6:cf:1d:21:15:cf:29:18:55:68:ba:
                    b7:3d:ba:77:42:00:66:67:02:03:40:de:91:bb:95:
                    6f:ff:8d:25:05:1b:1e:e4:58:af:2f:1c:01:f0:0a:
                    d3:ff:2c:c9:39:eb:94:de:3f:d5:eb:8d:f8:10:c4:
                    40:8e:2f:51:2b:d7:dd:e6:aa:50:ae:b5:6d:51:f4:
                    fc:42:0b:0e:d5:fd:73:c4:60:93:3e:58:80:6c:14:
                    92:2b:a2:60:1c:10:81:86:14:cd:76:85:8a:51:3f:
                    e3:c9:be:4c:aa:a1:bb:47:71:23:a0:96:3d:99:be:
                    fb:22:fe:f0:df:42:52:62:39:63:06:03:61:93:26:
                    f2:69:42:74:65:75:cb:72:ca:1b:f9:95:de:dc:08:
                    c0:d9:d2:68:9f:75:bb:ac:07:42:dc:24:45:c1:8d:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:50:E4:B0:2F:82:F2:8F:73:73:F6:85:36:B3:2C:CB:6D:15:06:B7
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B7064366D60911EEB0C1F009C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:ec:9a:d5:a9:27:b0:66:5e:8b:ad:08:61:4f:1e:df:cf:
         41:ba:c9:07:f3:4b:08:06:be:c7:4d:98:a8:bc:90:9c:fb:0b:
         b6:37:d1:ed:6e:ad:b3:98:7e:ad:f8:a5:18:01:1d:3c:1e:47:
         86:9c:55:d0:d9:75:98:68:b3:c4:dd:4e:cf:ec:ef:41:2d:fe:
         a8:af:fc:25:b7:65:8f:f8:2e:d0:43:ef:f3:bd:fa:10:c5:0a:
         a3:86:0a:f1:48:a2:9d:8b:36:2f:b1:95:e2:29:05:44:5a:50:
         1f:01:cb:79:68:7a:fd:8c:a0:3d:38:d9:fc:30:6c:45:f4:ce:
         9c:13:89:5b:bb:e9:51:4b:29:d1:ea:d0:82:98:97:d4:08:5f:
         1f:52:2c:f0:6f:f4:93:f1:e7:28:4c:f5:4e:8c:be:c9:c1:d7:
         dd:6a:3e:5c:2d:b0:1f:6e:2c:38:8e:b4:61:ae:f3:d1:8e:56:
         67:1c:8a:11:c3:7f:0d:bb:41:5b:7c:e1:85:eb:65:9c:ea:98:
         e9:45:6e:5f:f1:62:bb:e1:f4:67:4b:72:c6:5a:74:d0:c3:9d:
         a4:b6:01:b9:6d:9a:07:1b:5e:1a:71:8c:dd:85:0e:90:d6:88:
         ac:a3:a6:2c:0d:08:18:02:ec:8b:d7:61:05:79:30:84:96:b4:
         fa:1a:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:02 2026 by rpki-client