Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CC080DE88C2911F1B701215192EE528E.roa
File:                     CC080DE88C2911F1B701215192EE528E.roa (raw, json)
Hash identifier:          q5U2E1BPMV9kzUXYB0M+xLHQ0ptCcLdJxBifAaz6Xm0=
Subject key identifier:   7C:69:AA:FA:35:4F:27:32:02:4D:9A:4D:9A:36:A3:A3:ED:A7:A2:C1
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6DB2
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CC080DE88C2911F1B701215192EE528E.roa
Signing time:             Fri 02 Oct 2026 15:24:00 +0000
ROA not before:           Fri 02 Oct 2026 15:24:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135908
IP address blocks:        103.82.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28082 (0x6db2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:24:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc90-c72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6a:95:5f:40:46:8b:a1:ab:b2:98:07:7b:d3:
                    5b:63:00:5b:c6:c5:5b:f6:f5:a5:2a:93:dd:fc:6b:
                    c3:00:9b:44:e0:17:c6:89:e2:5e:e8:04:6f:81:14:
                    45:17:71:c8:47:0a:77:67:4d:e1:74:6d:e1:77:60:
                    b5:72:56:b7:57:42:69:6d:9f:e7:d2:1c:b6:5d:3c:
                    2b:c7:9b:e7:58:bd:cb:6f:1b:1d:a9:74:7a:6c:a6:
                    32:f3:ba:a4:87:8a:b0:9f:f7:0d:e7:40:f8:47:1a:
                    77:15:c0:23:d4:d4:6d:66:65:49:c1:c8:44:df:cc:
                    1f:c1:1b:66:bf:3e:f0:b1:ab:10:fe:8c:5b:9c:cc:
                    f0:cc:5d:85:41:09:62:cb:93:67:8e:d5:0c:88:39:
                    85:29:68:8f:07:65:2a:80:48:d6:87:d2:8a:f6:b6:
                    95:b6:9a:00:30:a2:9e:1b:92:df:8c:bb:ac:0a:0a:
                    8b:23:6b:3f:15:4e:6d:d3:4e:d9:f1:a7:73:0c:d4:
                    0f:c0:e0:16:c3:f3:d8:12:9c:fb:0d:dd:67:45:7e:
                    de:76:c4:2d:35:b2:a9:65:cb:f4:9e:4e:b3:e8:73:
                    d5:f1:24:46:7a:69:18:9a:ea:54:1c:5d:20:31:2c:
                    8b:79:bd:d6:79:f4:3c:be:46:c1:d9:f0:73:aa:bb:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:69:AA:FA:35:4F:27:32:02:4D:9A:4D:9A:36:A3:A3:ED:A7:A2:C1
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CC080DE88C2911F1B701215192EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:f5:52:0c:c0:66:8d:18:31:70:16:c4:7b:ae:88:96:98:
         2e:b7:bc:71:7e:ed:7b:8d:0f:48:73:97:96:87:b7:6c:27:56:
         ca:d2:f2:fd:7c:cc:38:d0:49:34:9b:3d:a6:df:7c:19:76:66:
         16:4c:ec:b6:37:d2:2b:71:d7:95:95:6f:e1:59:17:0e:9d:86:
         39:2c:18:de:45:28:dc:a7:33:93:51:ca:63:62:da:86:89:57:
         7e:6e:e9:5d:a4:fa:57:e1:c7:6d:41:f2:b4:70:ac:71:7a:2d:
         53:f8:39:fe:a5:8e:33:d3:98:d2:4b:e2:e8:6e:5e:3f:4a:13:
         7a:02:d3:e8:55:5f:e6:65:ca:ca:50:5c:41:1e:54:49:6a:dc:
         81:97:ac:13:90:fd:10:52:29:b7:7e:37:0b:3b:58:3a:35:6e:
         d7:90:69:d5:f5:d7:e5:23:45:be:42:0b:30:f0:22:4c:92:79:
         2f:b9:3f:cc:3b:d1:46:5a:34:01:94:96:3c:23:53:e7:35:d7:
         13:dc:07:17:49:87:2a:ed:3e:12:89:42:9f:b6:22:9a:38:1c:
         f9:47:a7:8f:32:58:34:78:05:a5:fe:7f:6b:bb:09:fd:47:fc:
         e9:fb:4f:4e:3d:23:43:b1:d3:30:88:1e:35:3d:48:02:7d:f9:
         9d:57:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:42:48 2026 by rpki-client