Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B8BCF12A7A8C11ED8730C555C4F9AE02.roa
File:                     B8BCF12A7A8C11ED8730C555C4F9AE02.roa (raw, json)
Hash identifier:          bxLHj8i7a7K6JF5ZSs6v+t3HMBgrti6CTdwmEd6GNtU=
Subject key identifier:   4D:40:30:1B:AB:33:C4:9E:AA:22:97:6C:3E:24:84:68:05:8E:71:24
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F44
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B8BCF12A7A8C11ED8730C555C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:37:49 +0000
ROA not before:           Fri 02 Oct 2026 15:37:48 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     63752
IP address blocks:        103.211.212.0/22 maxlen: 22
                          2001:df0:6480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28484 (0x6f44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:37:48 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcfcc-2f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:ba:c7:3d:fc:ff:64:a1:52:c0:e5:62:2f:
                    27:e8:00:6f:b5:43:5b:75:57:62:35:3e:b1:9f:a3:
                    7c:b8:80:a6:fc:77:2f:d5:f7:d6:b8:3c:b0:03:38:
                    2b:a8:c4:76:9f:6f:87:71:dd:1a:60:bb:75:39:2b:
                    4f:9e:fa:63:2d:42:ab:84:b2:d4:de:12:d9:e6:f6:
                    17:c3:cd:42:16:f2:0d:d8:18:b0:7c:22:55:74:34:
                    9b:3b:1b:1a:70:1c:9e:7d:71:35:b5:9c:81:d2:17:
                    d1:42:c8:90:48:4d:4c:05:c3:3a:6b:27:25:1c:cb:
                    bb:72:b3:6d:b8:f4:69:1a:7e:d7:5f:cb:b5:13:21:
                    92:31:c8:20:f6:24:b0:85:56:38:b0:c3:d5:ba:c5:
                    de:0d:cf:b4:93:ea:b4:8f:56:f2:39:2f:b3:83:b7:
                    3a:72:83:f3:18:f9:62:8f:29:8d:bf:e1:c9:61:ce:
                    39:47:93:c2:7e:5f:15:17:8b:03:04:50:2e:51:44:
                    a6:f3:da:98:95:56:21:57:f9:5e:6f:01:0f:67:17:
                    6c:32:c4:97:ac:21:26:93:19:42:b3:58:a8:c2:46:
                    b1:b4:c6:4e:8d:64:5e:16:5f:d1:29:be:5f:60:4c:
                    6a:a6:3f:8e:3e:60:d3:d9:ff:93:bf:e8:69:f0:b4:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:40:30:1B:AB:33:C4:9E:AA:22:97:6C:3E:24:84:68:05:8E:71:24
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B8BCF12A7A8C11ED8730C555C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.212.0/22
                IPv6:
                  2001:df0:6480::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:a8:35:6a:ea:32:de:21:49:aa:96:45:f4:aa:8b:18:11:b4:
         10:89:26:17:46:01:64:49:ec:7f:a6:2c:20:cf:a4:2c:04:88:
         ff:90:86:de:c5:91:fe:ee:ca:fc:d3:05:23:70:04:90:5e:f8:
         68:03:2d:3f:08:9b:8e:c5:b6:be:bf:9e:1c:7f:bf:dd:c5:bc:
         c3:f3:c6:25:11:d2:db:d5:3c:6b:f1:41:21:af:36:7b:56:94:
         6f:6d:cd:ee:8e:2f:d3:64:27:0a:9e:60:2e:1a:28:27:94:83:
         44:a4:09:5d:35:d4:1c:24:b5:92:07:c2:bf:d8:88:41:f7:cb:
         3e:ad:ab:20:ec:69:19:e7:93:b5:9d:57:59:73:94:a0:7b:5a:
         8b:67:fc:37:8b:98:31:c6:da:a6:1a:ce:83:c0:0f:ea:85:31:
         25:65:26:95:97:fc:d0:51:3c:1e:50:ae:ce:8c:6b:2d:95:4e:
         9c:63:8b:2a:3d:f9:65:ca:47:4c:17:14:19:20:7b:d3:bf:53:
         2b:31:69:21:33:fb:2a:a4:6a:65:3e:74:aa:f0:fb:1e:d7:a4:
         77:ca:4a:61:00:99:90:14:10:bc:49:3f:af:26:2c:b9:68:19:
         3b:77:19:4a:2c:44:b6:28:1c:88:99:da:e2:43:5a:7f:bd:d7:
         63:0d:d1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:00 2026 by rpki-client