Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F1B9839C08C011F19DFF611F213D8C67.roa
File:                     F1B9839C08C011F19DFF611F213D8C67.roa (raw, json)
Hash identifier:          52zc5JQPHXONXwyfEBALom2s1NsHVgOaTUQgCzuohP8=
Subject key identifier:   2B:88:45:5C:16:FF:C1:2E:0D:1F:56:F1:9E:BB:C4:09:B6:4D:D1:3C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EE4
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F1B9839C08C011F19DFF611F213D8C67.roa
Signing time:             Fri 02 Oct 2026 15:34:21 +0000
ROA not before:           Fri 02 Oct 2026 15:34:20 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154491
IP address blocks:        103.239.81.0/24 maxlen: 24
                          2001:df6:ab40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28388 (0x6ee4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:34:20 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcefc-3ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5d:27:c2:72:ef:83:31:b4:2a:b2:b9:f4:ec:
                    0d:ea:4c:9e:13:2b:1b:81:80:db:1d:8e:f3:81:a4:
                    4f:de:f5:62:6b:57:86:83:20:6e:39:db:41:8c:6b:
                    77:45:23:e7:e5:22:68:19:09:f6:9a:1d:c4:e1:39:
                    36:2c:bb:7f:a3:e9:d2:00:67:8a:c5:17:af:ff:36:
                    3d:f7:66:2e:b0:71:6b:9c:26:20:6a:33:4d:02:c6:
                    8f:7a:59:a0:f7:3b:09:f9:ba:de:27:43:e2:a1:a9:
                    72:d8:f1:08:10:fc:d3:3b:05:80:55:35:89:df:9d:
                    90:98:20:f4:58:25:e3:13:70:a2:44:32:3a:c3:52:
                    ef:e8:db:51:a8:67:ab:72:8d:65:4a:ca:9c:8a:20:
                    e8:e9:c8:bf:6e:8b:a7:43:a1:1a:62:5a:bf:5d:13:
                    1f:a3:ea:ee:e1:1e:be:5f:77:a2:51:5e:58:ce:12:
                    3f:a9:9b:a6:f8:b7:ca:71:2b:13:4e:14:37:eb:56:
                    10:da:85:43:75:1a:b6:27:03:48:ad:ba:ec:5b:ca:
                    b3:6b:29:b3:12:bd:4c:03:ae:7a:d7:5d:7d:9f:8d:
                    32:57:66:c0:7b:ef:4d:75:4e:ad:b6:16:c3:8c:b4:
                    fa:b0:9a:6b:6d:88:9d:87:54:62:8a:d4:ab:72:20:
                    fb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:88:45:5C:16:FF:C1:2E:0D:1F:56:F1:9E:BB:C4:09:B6:4D:D1:3C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F1B9839C08C011F19DFF611F213D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.81.0/24
                IPv6:
                  2001:df6:ab40::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:fb:a0:6a:ba:a4:13:de:c8:6e:ee:eb:c2:36:d6:4c:d3:98:
         6f:df:e7:62:0a:aa:64:5f:40:84:b8:6b:6e:06:5b:31:2f:7e:
         95:81:34:6f:28:89:3c:49:ca:b9:26:ee:6e:2f:f6:ed:1d:85:
         c5:d3:a7:11:1d:0b:75:f3:ec:fc:94:09:55:49:76:7c:2f:1b:
         8b:a4:12:6d:a2:f2:fa:90:0c:cc:e0:8b:47:dc:16:7f:9a:42:
         a4:5f:5a:22:f9:13:cf:30:de:27:2c:94:f2:37:1c:ec:39:96:
         35:7a:b5:79:dd:29:66:20:ff:21:bd:0e:04:a7:d7:5c:00:69:
         5c:90:f3:1a:47:9b:4b:95:c8:b7:aa:c5:45:69:14:64:47:44:
         3f:11:6f:66:55:9a:02:ad:31:a7:f4:fc:e9:3d:f7:7c:33:5b:
         3a:0d:de:aa:8f:4f:22:c4:99:e9:6a:7e:1e:00:b6:27:55:43:
         5b:3c:4f:45:8e:3b:2b:78:de:4d:df:21:c9:c7:be:2e:a2:6f:
         13:f4:58:ed:b9:0f:a3:1a:fc:d1:b0:3c:d0:80:e2:53:d9:fe:
         d6:1a:9d:62:0c:c3:91:47:c2:cb:bb:f1:b1:d7:68:16:ec:ff:
         eb:7c:e7:de:c5:2c:7e:01:01:ec:20:a7:0b:1d:cd:22:57:f4:
         23:30:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:26:21 2026 by rpki-client