Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D03E9D1C2E7011F1ADD96DABA3833773.roa
File:                     D03E9D1C2E7011F1ADD96DABA3833773.roa (raw, json)
Hash identifier:          nNHuUAiu10B8bh9Gx7mnW2yuObeH8IRXzlZ3VxbUAvM=
Subject key identifier:   CB:E6:E2:AF:71:7D:64:F1:6E:86:C3:07:0B:0C:E4:46:5A:3D:88:AA
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6DAB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D03E9D1C2E7011F1ADD96DABA3833773.roa
Signing time:             Fri 02 Oct 2026 15:23:46 +0000
ROA not before:           Fri 02 Oct 2026 15:23:46 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     133047
IP address blocks:        163.128.36.0/23 maxlen: 23
                          2001:df6:ce40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28075 (0x6dab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:23:46 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc82-e857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:c5:d6:fe:a3:6a:df:7f:3a:56:bd:27:b8:
                    5b:b8:2d:45:85:43:a7:6c:e0:4b:5d:3b:3e:a5:fb:
                    c1:61:24:10:54:ff:71:45:25:93:6f:bb:67:a7:bc:
                    e5:ae:81:45:0a:e0:bf:52:6a:f9:f9:6d:02:ea:28:
                    4a:cc:69:c0:52:3d:89:2f:74:36:7a:11:99:e9:c3:
                    2b:2a:de:a1:92:1f:62:58:e7:0a:c2:91:9d:82:f8:
                    19:b3:d1:a7:8b:e0:39:91:d8:a0:6c:61:e6:ae:bf:
                    43:36:67:69:50:c7:9c:d3:98:9a:b4:95:d1:bf:a6:
                    5a:5b:70:3f:d7:75:cc:dc:2b:87:d2:89:8e:95:07:
                    3d:97:3c:60:1c:12:88:9c:51:48:68:e8:a2:b2:a3:
                    dd:b0:81:6f:86:8d:0d:6e:c7:9b:45:ad:53:4e:c7:
                    60:f5:62:f0:89:27:94:d6:21:42:f8:c1:a0:e5:2b:
                    9f:31:12:6c:87:8a:09:22:0f:54:42:c7:98:8a:a8:
                    f4:f0:4d:93:34:92:3e:38:f1:d0:4d:b9:0b:2a:54:
                    fd:d5:18:04:37:20:e9:58:a8:fa:ee:1b:14:16:07:
                    7e:82:80:d0:71:3f:03:96:af:c4:fb:a7:1c:60:f3:
                    9d:2c:ba:8a:7f:a8:47:9f:ef:fa:8e:fe:62:fa:5a:
                    78:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E6:E2:AF:71:7D:64:F1:6E:86:C3:07:0B:0C:E4:46:5A:3D:88:AA
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D03E9D1C2E7011F1ADD96DABA3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.36.0/23
                IPv6:
                  2001:df6:ce40::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:24:77:58:0b:95:d7:4b:c2:9d:c7:9f:9a:29:07:c9:7f:c9:
         3f:c9:27:33:52:dd:19:79:85:af:41:95:f7:35:54:f4:9f:e5:
         c8:84:26:d0:a1:22:d2:19:e2:d0:4d:55:6e:50:aa:cd:58:3c:
         0c:ac:d5:e3:48:4d:9a:06:ca:a5:f9:fc:1d:24:54:8c:82:36:
         ff:4b:94:7f:f2:1b:f0:c7:22:be:c2:49:9b:88:b9:20:4c:59:
         24:d2:d5:20:b6:71:89:f2:38:dd:b1:e7:e8:cc:89:c3:ec:cf:
         fd:e9:ce:5f:ab:c8:9b:0a:c3:11:7d:7d:c0:26:ad:54:8e:8a:
         87:55:7f:66:bd:34:ad:6d:fb:e1:96:64:5e:16:9e:1b:a7:e8:
         b9:ea:75:10:b4:91:21:d1:af:e3:54:cb:c7:d4:ee:fb:ec:4a:
         ee:2a:81:09:ca:e7:f2:da:33:1e:fc:e3:44:b4:42:6e:1b:02:
         0f:43:3f:29:f0:60:67:64:be:08:7d:8c:8c:70:d9:c2:5b:74:
         a2:3b:e7:e0:1a:7a:04:ee:ec:dc:d8:3f:b7:93:1a:e6:76:d8:
         9c:ef:32:a1:eb:e9:b0:5a:3a:1f:e3:fe:9c:71:ab:4e:f2:23:
         8d:de:70:9e:ff:9c:d0:d2:5c:6a:3e:e4:43:17:91:d4:bc:75:
         2a:bd:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:13 2026 by rpki-client