Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DA0F1EF2F83D11F0A25A0B813D6F56BC.roa
File:                     DA0F1EF2F83D11F0A25A0B813D6F56BC.roa (raw, json)
Hash identifier:          htbnvMZFr0rpVvZtBGKdSFqnpsyA+spHOM3fEdj7r6U=
Subject key identifier:   03:C6:86:26:01:3C:88:19:AE:4C:C0:91:A1:9D:1A:7F:D4:FC:A5:FB
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6D77
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DA0F1EF2F83D11F0A25A0B813D6F56BC.roa
Signing time:             Fri 02 Oct 2026 15:22:00 +0000
ROA not before:           Fri 02 Oct 2026 15:22:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     131360
IP address blocks:        103.9.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28023 (0x6d77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:22:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc18-6ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:dc:e6:6f:76:43:ea:d8:b6:be:42:95:1c:
                    c7:08:81:4e:8d:49:93:30:59:5a:e6:6f:eb:fe:18:
                    00:a4:f3:ee:45:0c:0c:04:9f:d7:94:43:38:72:be:
                    6b:6e:38:b4:d0:91:59:e8:37:2c:8f:7e:56:ca:d2:
                    3e:e3:ed:c6:ed:a5:66:b7:1f:48:ec:e5:5f:9c:3a:
                    3a:2f:ae:18:8f:e4:87:5a:0c:77:66:e3:28:1b:88:
                    eb:8c:7f:62:e3:47:17:4d:5c:cc:e3:08:4e:e1:39:
                    0f:61:25:98:4c:78:4f:60:bb:41:2b:bd:54:d6:d9:
                    ea:e2:f6:73:d5:44:ce:27:a5:6f:25:7b:d1:5b:a5:
                    dd:1e:97:3e:6e:26:1f:d7:d8:18:19:01:ca:a4:dc:
                    db:5f:2c:70:f2:03:bf:d3:ec:0a:f9:cc:bb:32:70:
                    03:87:52:a4:fc:ef:48:8d:08:c2:a0:14:5b:3a:73:
                    3c:bc:7c:32:a6:ae:4c:38:81:d4:44:20:28:fc:35:
                    1b:fc:31:c3:8e:f7:34:2f:d7:6b:ce:e6:1b:8e:82:
                    6a:7b:28:3d:23:dd:6c:ee:f3:ad:27:4f:0b:5c:f0:
                    95:2b:24:eb:a4:b5:25:d4:b3:54:7b:57:5d:f7:d4:
                    ca:71:7b:11:19:11:d5:30:5d:9a:e9:fd:7a:d7:ac:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C6:86:26:01:3C:88:19:AE:4C:C0:91:A1:9D:1A:7F:D4:FC:A5:FB
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DA0F1EF2F83D11F0A25A0B813D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:01:50:ef:0a:db:cf:e7:d6:53:8d:57:69:02:19:09:1d:b8:
         9d:72:f9:c7:59:6d:d2:5c:79:49:85:58:8a:8a:c2:f9:f9:c7:
         25:f4:42:97:a9:10:fc:72:76:04:ca:2a:02:f9:03:48:68:fc:
         8a:10:3f:bc:65:5a:f1:37:8a:94:5c:92:77:b1:c5:ed:07:1e:
         23:68:cc:33:96:d3:09:05:ae:7b:91:61:92:2e:6c:b6:96:0e:
         f3:e2:72:63:0c:6a:73:31:03:a6:b0:fa:73:13:40:e9:1d:ab:
         ba:87:b7:af:a9:a9:29:9d:3f:0d:d0:6f:cc:2b:30:48:ef:47:
         b3:d4:e2:a6:6a:54:d6:89:6b:c8:40:42:00:44:8f:44:50:de:
         c9:7b:b9:f4:71:0a:72:7e:1b:2c:dd:2f:39:1b:f6:59:ec:77:
         ee:db:9b:8d:4a:b7:6d:b9:58:08:a6:3a:27:05:63:84:0f:03:
         30:79:30:dd:15:64:31:39:51:7b:35:6c:61:83:58:3d:e3:19:
         29:bb:aa:6c:f5:7a:64:4c:6b:25:20:63:82:e9:2c:66:32:00:
         8e:32:14:5b:b7:fc:b8:2e:4f:f8:38:eb:ee:58:3e:c6:41:37:
         d5:80:1b:1d:f7:74:ff:2d:d5:d6:b2:7c:be:b6:7c:e6:4d:19:
         bb:28:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:38 2026 by rpki-client