Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa
File:                     17780EF09B3C11E8A13BA63AC4F9AE02.roa (raw, json)
Hash identifier:          zm1MqNXGifHHQw7D7+UZg2rP++jcV8vgRKdJt+1OETM=
Subject key identifier:   C7:60:E7:0A:B6:48:12:B6:34:BB:A2:F8:6E:10:BC:E3:91:32:A7:54
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       1522
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa
Signing time:             Fri 16 Oct 2026 17:32:46 +0000
ROA not before:           Fri 16 Oct 2026 17:32:46 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     23876
IP address blocks:        103.110.212.0/23 maxlen: 24
                          123.49.43.0/24 maxlen: 24
                          218.100.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 16:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5410 (0x1522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Oct 16 17:32:46 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ad25fbe-1cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:6d:cc:ed:6d:78:13:dc:42:9a:ef:2c:0f:
                    5f:3e:a6:12:fb:d3:86:9c:02:3a:a2:38:e7:89:4b:
                    67:74:13:31:0d:67:58:98:c1:ad:15:3d:50:a7:11:
                    63:c3:47:3d:48:da:f3:1c:9a:1c:33:ee:8f:0f:7d:
                    cd:77:10:41:82:8e:bf:e3:b8:76:2d:1c:49:9d:6a:
                    5e:ca:26:c2:25:b9:38:c7:d6:af:53:e7:42:70:8d:
                    6c:90:4c:17:9d:02:e7:85:ef:3d:cc:8b:eb:1f:5a:
                    54:2a:93:57:86:f6:82:7d:1b:ab:9c:0e:5c:3d:80:
                    c8:01:07:09:4f:88:1e:fb:e6:bb:ec:aa:96:9e:d4:
                    79:7d:e5:53:a1:26:66:62:1d:65:25:b6:38:8f:fd:
                    88:a6:b0:3a:0a:d1:5d:56:d3:0d:b3:59:57:c5:e3:
                    b2:7b:85:81:b3:1d:aa:9e:57:6e:9e:1b:38:51:58:
                    80:20:14:f3:1d:6d:dd:26:a8:ff:a2:b1:3b:bd:85:
                    f4:5e:5a:34:3f:25:11:0a:0f:12:e8:73:49:d4:48:
                    f3:f9:64:9d:83:96:10:67:6d:05:64:c9:26:f3:9e:
                    83:36:b5:c8:1a:65:ea:9c:42:4e:ff:2b:78:2e:ce:
                    95:1b:4d:05:34:b2:75:2e:be:9b:a3:18:3e:f6:b3:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:60:E7:0A:B6:48:12:B6:34:BB:A2:F8:6E:10:BC:E3:91:32:A7:54
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.212.0/23
                  123.49.43.0/24
                  218.100.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:9c:d5:fa:31:8f:0c:ec:5e:7f:94:0c:30:07:b3:23:49:c1:
         6a:0b:ed:d3:12:93:35:19:ce:f1:6a:ce:4f:9a:3a:f6:14:12:
         a3:1f:10:dc:3d:ff:44:0f:4f:2f:d0:aa:f5:e9:27:ca:af:a3:
         22:34:29:fd:e4:4b:bc:5d:76:44:70:d0:99:ad:87:6a:0c:aa:
         fb:ae:f4:15:47:f9:a5:5a:bb:86:39:82:7a:b8:83:9a:2b:0a:
         f3:4b:78:33:0c:a4:bc:db:26:89:8f:54:1d:4f:c1:f2:72:02:
         f7:49:e1:94:1c:33:dd:70:b4:1e:d9:f1:0c:07:67:46:1b:63:
         8a:02:b3:76:09:ad:81:ca:4c:21:45:12:06:05:21:6d:2d:ea:
         80:ac:14:1b:60:cb:87:4f:8b:37:53:55:ee:bd:e7:60:26:86:
         8f:8a:98:cc:f5:9d:e6:77:36:d4:1d:b2:77:6c:9d:a6:35:59:
         7c:e6:9d:22:35:e6:ec:76:8a:22:d0:ce:8c:fd:ce:0c:10:dd:
         78:a4:6f:4a:56:80:50:2b:35:45:4f:13:ea:b9:f2:14:13:cd:
         ed:db:a1:3e:3b:6a:9c:d5:ca:34:3c:6f:f6:e3:8b:b6:60:90:
         4c:1a:3d:b4:18:29:3a:3e:49:84:84:5a:3a:e9:b8:0e:22:42:
         96:ea:71:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:40:22 2026 by rpki-client