Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/C31A6BFA717D11EE90B95137C4F9AE02.roa
File:                     C31A6BFA717D11EE90B95137C4F9AE02.roa (raw, json)
Hash identifier:          3v4pwXdAurC2xx0oSrjBitroPrUmO1vjpobLOZgKc4I=
Subject key identifier:   7C:C4:B0:AA:91:E3:22:99:49:99:3F:24:9B:33:53:9C:24:F1:61:6E
Certificate issuer:       /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial:       0341
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/C31A6BFA717D11EE90B95137C4F9AE02.roa
Signing time:             Sat 17 Oct 2026 01:49:42 +0000
ROA not before:           Sat 17 Oct 2026 01:49:42 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     24499
IP address blocks:        103.57.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
                          rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 00:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833 (0x341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
        Validity
            Not Before: Oct 17 01:49:42 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ad2d436-7703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:8f:3a:36:aa:e5:59:d9:76:1f:d8:3d:43:
                    c4:8d:91:ca:15:04:b1:1b:44:ad:9d:31:e6:96:e8:
                    53:8d:3f:a8:25:af:d2:af:ad:e2:31:ec:e3:8f:8f:
                    0e:f9:1e:db:49:89:9b:6b:f4:b1:d9:4a:19:c0:16:
                    4c:bb:c2:3f:50:3a:76:f7:a3:6a:85:3d:d0:a5:46:
                    09:f8:a4:a1:ac:56:c7:4c:eb:d9:da:b9:5c:18:20:
                    c0:55:cd:a1:11:ba:a2:72:b9:42:fa:a8:7d:30:c3:
                    3b:2a:51:85:1d:82:10:7a:12:7d:1f:6f:20:93:c0:
                    80:45:53:52:1d:07:d3:65:bb:87:d5:fb:f6:2e:13:
                    67:1e:f2:82:48:c9:84:a4:db:89:59:99:55:7b:3b:
                    6c:da:1c:a1:27:ca:c4:4d:68:39:28:33:fd:88:2b:
                    2d:58:74:58:4f:95:80:c9:eb:01:3d:03:e4:bf:01:
                    da:4d:be:13:f2:a8:c9:f2:19:31:ae:b4:49:3e:ac:
                    e4:4d:e5:71:cf:8b:62:62:c2:48:62:cf:44:24:3d:
                    bd:e4:b8:eb:14:ac:4c:74:de:fd:42:66:ae:99:80:
                    ac:30:ee:16:7d:99:9f:f1:de:bc:e6:88:0e:4b:c9:
                    6b:50:cb:d1:d6:27:fe:b8:ab:2e:6b:c4:ec:bf:52:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C4:B0:AA:91:E3:22:99:49:99:3F:24:9B:33:53:9C:24:F1:61:6E
            X509v3 Authority Key Identifier:
                keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/C31A6BFA717D11EE90B95137C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.57.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:f2:3b:f5:89:59:bf:ab:9f:e6:4d:cb:3a:ca:ec:d5:e4:
         8c:1f:b9:90:01:c0:e0:8d:84:47:af:c7:33:0a:34:73:43:ca:
         11:f2:f0:78:f6:2c:39:a0:4a:c1:09:8c:80:b0:fe:2c:89:03:
         d0:45:77:98:1d:8c:d6:d8:25:2a:96:5b:f2:de:81:5e:a0:ff:
         de:77:3b:19:14:e4:e0:ee:6f:3b:93:be:dd:ed:e7:02:6d:81:
         d3:40:10:b1:00:4c:6f:ac:13:55:3e:c5:82:1e:56:16:a0:ba:
         80:d1:a1:93:32:b2:91:9f:cc:8e:d9:b7:23:54:ff:74:72:ef:
         e0:67:f4:cc:2e:bf:ac:1e:3f:9e:4d:2c:24:8b:bb:7c:62:9a:
         a7:ea:95:e8:be:b8:9c:04:2c:7b:26:5f:9a:da:72:8d:8d:77:
         9a:d9:7d:a7:ab:3f:9a:e3:f3:b2:2e:67:62:5d:94:93:0a:04:
         f9:67:84:55:00:ab:2e:40:cd:b9:1a:6d:a8:16:1a:b2:a8:22:
         fe:48:e0:b1:b7:d2:5d:90:b5:a5:b6:e8:4e:65:b4:ef:24:7b:
         89:de:a8:88:96:ba:95:cc:9d:68:e3:36:99:23:95:8f:48:f4:
         21:b2:85:a1:0c:d5:b2:f5:6a:f5:f8:6c:19:8c:c3:4c:d0:ab:
         93:bc:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 01:06:59 2026 by rpki-client