Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa
File:                     BBA122A063E311EC8B936683C4F9AE02.roa (raw, json)
Hash identifier:          eXGXIu7QqHiAExFVsg19SxllITGL81xOUGsbIggoim8=
Subject key identifier:   FC:FC:A7:55:91:47:E8:C7:EF:7A:0C:EB:67:FC:94:4A:8F:2C:EC:ED
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F0A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:35:38 +0000
ROA not before:           Fri 02 Oct 2026 15:35:38 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     38737
IP address blocks:        203.119.68.0/22 maxlen: 24
                          2001:dc8:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28426 (0x6f0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:35:38 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf4a-c986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:59:be:be:7b:78:48:e3:ff:74:71:9b:5f:
                    0c:3e:5f:95:80:31:b2:ba:f5:53:6e:d4:d8:75:a9:
                    b9:af:2c:08:29:cb:15:e2:e4:f6:75:25:57:8d:69:
                    2d:9c:38:1e:f4:1d:8a:5f:18:42:c9:6a:ab:c2:ab:
                    0e:9e:07:58:b1:1e:50:56:5f:58:13:52:89:99:11:
                    ac:3f:bb:05:2e:e9:4e:2d:54:93:90:47:fb:b5:da:
                    a8:8c:09:d8:de:33:29:72:ef:5a:f0:60:26:bd:2c:
                    f9:6f:31:57:17:a8:2d:3c:bb:7b:40:ce:85:4e:20:
                    2a:b4:6b:68:fe:c2:32:66:5f:10:08:2b:5d:bc:58:
                    4a:d0:28:24:b2:dc:7d:1c:f5:7e:b3:1e:a0:93:3f:
                    0b:92:02:4a:90:33:36:8f:18:b3:17:3c:85:00:95:
                    0f:3d:d4:6c:c4:24:e5:dc:35:d0:d1:5e:79:31:0e:
                    33:8e:63:3d:34:b9:50:e3:73:4d:85:76:77:78:7a:
                    3e:25:33:bd:d0:03:f0:83:78:d6:de:ec:4e:71:6a:
                    7e:cd:0b:4d:dd:8b:0a:3d:63:c7:54:49:74:60:61:
                    17:8b:93:01:68:8e:67:72:72:5d:c4:3e:15:49:79:
                    70:c1:62:85:51:ad:2e:7f:b5:79:cf:3c:f8:30:06:
                    af:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:A7:55:91:47:E8:C7:EF:7A:0C:EB:67:FC:94:4A:8F:2C:EC:ED
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.68.0/22
                IPv6:
                  2001:dc8:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:61:40:ac:27:95:1e:25:5c:ef:33:0f:46:18:c0:bd:bd:5d:
         83:f5:a5:9e:d1:23:14:aa:89:34:61:af:10:9a:12:6d:20:24:
         9f:ed:22:15:bc:e8:1d:a6:25:b1:1a:a5:01:3c:e8:40:77:e8:
         f9:98:bc:ba:6f:cb:fa:be:6e:f0:07:04:ba:4b:99:47:4b:0a:
         77:ff:d8:6b:86:31:25:a2:af:b1:d7:9a:39:3a:12:f5:33:7d:
         91:88:42:4b:4a:eb:9a:95:8b:32:54:70:e6:6c:3d:69:96:c6:
         a6:ee:06:10:54:bf:84:b2:5f:9a:62:44:0d:3d:57:3a:d7:5d:
         b6:e0:a8:11:59:33:c8:1d:c5:e6:77:1b:1d:98:68:22:36:f4:
         9d:13:4b:b8:11:74:23:bc:33:c1:3b:2f:31:72:e6:1d:a7:cf:
         08:fa:e2:9a:91:97:d5:a4:e8:a6:76:6c:04:37:c9:3b:1b:9d:
         5a:77:93:cb:27:3a:81:7f:69:4c:ae:ef:ff:1b:6b:af:11:94:
         bd:78:e4:47:c0:78:05:9b:c6:7d:e2:9a:7e:fc:52:48:2f:af:
         22:5a:a7:d1:b9:99:55:35:46:fd:77:34:44:41:30:2c:24:9f:
         98:97:0a:a2:55:7f:a8:14:74:12:3b:be:2a:42:05:7e:04:6f:
         f2:cc:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:30:54 2026 by rpki-client