Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa
File:                     C1C6BCEE96CB11EF8176AD43C4F9AE02.roa (raw, json)
Hash identifier:          3WFTLMDco1V6h48ytePHkHYLvyz3j66WaIZPra0+Snk=
Subject key identifier:   7F:0E:22:62:0E:EC:EC:8C:A6:E7:88:7B:38:28:03:D9:97:B6:A6:4A
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6DD5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:25:09 +0000
ROA not before:           Fri 02 Oct 2026 15:25:09 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135963
IP address blocks:        103.194.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28117 (0x6dd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:25:09 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfccd4-24f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:af:da:51:bf:d5:1a:8c:cc:2d:83:bb:95:
                    ad:d1:ab:a3:b4:f2:1b:d0:e5:c0:9c:df:53:29:63:
                    f6:da:a4:c6:7c:ba:f8:a2:dd:c1:b6:ea:c2:62:d1:
                    a6:23:c0:1e:57:e9:13:96:98:11:d8:0c:30:dd:62:
                    63:7a:7e:dc:d8:52:10:77:85:35:b7:26:41:fc:eb:
                    47:03:65:d9:0d:d8:48:4e:9b:0b:a4:0d:da:3e:19:
                    f3:45:d1:62:6d:e0:70:7d:eb:61:c9:7a:e7:a8:d1:
                    1d:eb:c6:49:e6:54:d8:93:7e:80:83:b9:92:8f:4c:
                    e3:ed:1e:85:19:7e:3d:2c:8d:b5:33:20:63:f6:37:
                    58:59:06:af:52:e9:2c:a9:59:ad:ae:52:f3:db:5d:
                    34:1e:13:9f:a2:79:20:1a:36:a2:75:a9:60:bc:dc:
                    43:8e:3e:b2:86:80:0b:9e:da:44:06:48:4d:24:0d:
                    43:0d:6b:55:bc:c6:af:e7:88:ec:97:ff:7c:95:d2:
                    07:f6:70:85:fd:58:e4:44:a8:42:cc:a0:11:33:47:
                    dc:1b:e1:87:06:71:87:fd:c4:e3:75:e2:15:50:14:
                    cb:b7:ec:3a:b2:65:87:98:fa:bc:5d:91:1b:88:9a:
                    b3:53:4d:c7:43:62:7e:7a:9e:08:fd:17:ea:1e:6a:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0E:22:62:0E:EC:EC:8C:A6:E7:88:7B:38:28:03:D9:97:B6:A6:4A
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:7c:a2:5e:e6:10:bf:0b:09:97:a7:35:eb:69:60:b1:25:f3:
         66:09:63:89:cb:2e:7e:d8:02:76:32:a9:4c:4d:3a:d4:b6:90:
         37:18:b6:c9:a7:6c:16:e0:b2:e0:e1:6a:26:d4:01:33:90:81:
         44:38:a3:cc:fb:74:6c:e6:6d:d5:8f:f1:f2:b4:ae:04:45:c5:
         e0:b9:af:29:17:fd:4e:d1:f0:36:19:a2:8c:3c:bf:31:c3:bf:
         e0:69:f5:8d:2e:20:9e:69:b2:17:99:0c:33:91:19:b0:cd:50:
         c1:4b:3b:cc:c6:d4:6f:e8:de:1b:38:b0:5e:7a:c7:23:45:a6:
         a8:bd:c5:be:95:d3:6a:1f:d6:ac:87:9e:de:a2:54:5b:7c:04:
         d1:f3:16:a2:dd:59:fb:d9:ce:9b:79:25:b6:d0:84:c6:d9:9e:
         17:9f:65:c4:80:f1:47:6e:46:c9:f4:86:a0:f6:39:54:fb:f9:
         e7:fd:e1:ee:e8:37:1a:9b:b8:71:05:20:c2:80:da:b5:15:13:
         a6:fd:fd:e2:ef:c2:9b:ef:6a:cb:c5:5c:c4:c1:07:37:36:10:
         42:b9:83:39:fb:69:0c:db:c1:d3:32:6b:0e:4c:c0:b1:de:23:
         b2:c6:e5:a6:10:7e:35:ee:a5:02:36:b5:b1:bd:63:51:35:dc:
         3a:a1:36:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:59 2026 by rpki-client