Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BF8C64F87EA311EC84297E7CC4F9AE02.roa
File:                     BF8C64F87EA311EC84297E7CC4F9AE02.roa (raw, json)
Hash identifier:          G/zpztCv7s8t6rTk14Dp4Sr4/ghGTKhDhdqDAr0xDP4=
Subject key identifier:   9A:6F:48:7A:8D:69:B8:4F:E8:4B:2E:15:40:4F:D1:ED:EC:BE:E2:54
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F48
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BF8C64F87EA311EC84297E7CC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:37:57 +0000
ROA not before:           Fri 02 Oct 2026 15:37:57 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     63756
IP address blocks:        103.199.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28488 (0x6f48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:37:57 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcfd5-76e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:8b:b3:23:44:4a:8e:fb:6a:69:da:2d:fb:
                    c8:e8:e8:a6:09:ce:13:3f:2f:33:6e:84:15:4a:61:
                    4e:05:8a:92:21:fc:bf:72:94:6c:08:dd:3a:c1:5a:
                    bb:e4:91:55:02:2e:c6:a3:ea:78:f3:7c:ea:64:fe:
                    77:f6:bb:e9:d9:73:23:18:6d:a2:f6:40:05:1a:a8:
                    64:b9:99:0c:0c:bf:f3:83:ef:6f:a8:8e:0f:e5:f5:
                    4c:01:43:80:86:df:87:36:9b:4a:ca:a5:37:00:f0:
                    a9:38:44:d6:33:b4:e4:b3:42:ff:69:e6:00:89:6d:
                    32:dd:c0:6e:10:ed:ba:fe:b4:7e:1f:cc:56:07:29:
                    f6:0f:34:a7:a6:21:61:87:7f:57:4d:6b:f2:0c:ff:
                    d2:54:a7:e8:8b:f9:70:9e:8e:77:96:09:d2:38:e4:
                    8e:90:73:0f:50:a8:05:40:4d:89:d6:a9:8a:a6:39:
                    d0:75:b9:32:cf:36:7b:8f:18:4c:73:ac:1b:2a:bc:
                    3c:26:d2:6f:ae:b2:a5:ee:56:5e:77:92:e3:ab:8c:
                    4a:9f:e0:cd:54:4f:08:e7:72:00:08:f7:1a:fb:38:
                    0e:63:c7:dc:c8:ee:3e:00:81:b5:6b:85:53:c5:dd:
                    23:84:61:9f:01:d2:cc:02:6d:07:75:6c:b9:9b:8d:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6F:48:7A:8D:69:B8:4F:E8:4B:2E:15:40:4F:D1:ED:EC:BE:E2:54
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BF8C64F87EA311EC84297E7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:42:ce:f4:06:71:d7:f3:15:f1:ac:41:4f:76:6d:40:8d:c0:
         b4:a7:90:51:cd:f6:5f:b9:60:70:fc:12:c0:89:c9:1a:00:ce:
         26:85:2b:c2:6e:d4:6f:fe:4e:be:00:f9:bf:25:d6:87:11:7c:
         cf:5a:29:c9:11:20:7b:61:4a:f9:57:17:28:72:16:79:ca:ae:
         c0:9b:40:14:ab:b2:93:6c:be:75:04:ad:06:b0:0b:7b:8c:c3:
         ed:8b:64:c2:c7:61:d6:81:95:dc:86:f8:14:80:06:da:4a:7a:
         90:0f:88:2b:be:3f:77:a6:91:0e:f5:01:5c:08:c6:c2:29:94:
         be:19:f0:b8:bc:a6:d5:f2:e8:47:ec:2c:22:65:c9:16:0d:88:
         97:57:9c:65:36:fb:96:2e:1a:e3:e7:a5:84:83:d5:50:e2:d8:
         4e:34:34:cd:32:f3:33:c1:1f:69:64:ba:3a:b6:e0:8c:1d:da:
         14:8e:46:6c:a0:35:ad:dd:0f:be:77:b7:23:fb:74:7f:52:de:
         57:39:99:6c:6c:b6:2f:05:79:63:87:bc:66:02:e3:a2:9b:77:
         7b:e3:11:ba:bb:33:58:39:6d:03:73:c8:bf:86:05:cf:b1:a1:
         c8:2c:74:3c:89:3a:a1:53:fc:72:69:60:86:a5:49:65:0c:5a:
         39:63:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:23 2026 by rpki-client