Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1F90160E87F211ECBEBC5339C4F9AE02.roa
File:                     1F90160E87F211ECBEBC5339C4F9AE02.roa (raw, json)
Hash identifier:          wQgJwMWmYSnASInIXk6rHMXTmoXzc8kZ+3skGypDfXw=
Subject key identifier:   D7:76:B3:F3:CD:00:4D:39:9C:F6:C2:21:0D:92:88:BC:D2:5C:21:18
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       1526
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1F90160E87F211ECBEBC5339C4F9AE02.roa
Signing time:             Fri 16 Oct 2026 17:32:54 +0000
ROA not before:           Fri 16 Oct 2026 17:32:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     56032
IP address blocks:        103.110.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 16:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5414 (0x1526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Oct 16 17:32:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ad25fc6-e68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:5a:f3:b4:13:6c:62:8b:3a:7f:b1:a5:96:
                    85:98:5e:6b:2b:ed:c2:f6:04:63:4a:5c:74:51:2d:
                    e0:56:89:a0:05:13:f6:c9:40:e1:ee:f1:28:4c:b9:
                    37:30:ca:ee:7d:0a:cf:6d:b1:93:fb:f5:43:5e:e7:
                    91:e6:fc:c6:72:84:61:15:34:a9:de:65:dd:6b:b1:
                    38:7b:f3:14:af:7b:f4:80:50:ec:1f:70:7d:c4:e8:
                    13:54:0e:31:f5:d1:ce:ae:55:a4:cf:45:bd:65:59:
                    48:cf:a2:b5:39:ef:a7:a8:35:4c:5c:fd:ed:96:a2:
                    82:76:83:a3:7e:ee:2f:b6:d4:95:a6:61:4b:b8:44:
                    ca:b8:f5:8c:f9:78:8d:93:be:71:3c:18:19:f8:c5:
                    18:9f:ad:f7:cb:6e:2f:87:56:18:37:b2:96:cf:da:
                    17:aa:c5:f3:69:14:b9:cb:57:6a:0d:36:17:9f:17:
                    af:91:2e:c6:ab:4a:fd:e4:7b:66:43:be:cf:98:4e:
                    92:85:00:8a:18:0d:84:9c:37:1a:1e:27:0f:be:03:
                    4e:8b:d4:e7:65:0d:ad:e6:7f:c0:e7:08:b3:19:3d:
                    06:d9:d0:35:b2:88:65:17:9f:4b:32:50:0d:23:79:
                    2f:04:87:45:2a:e0:06:1d:66:d1:61:f7:35:e4:fb:
                    38:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:76:B3:F3:CD:00:4D:39:9C:F6:C2:21:0D:92:88:BC:D2:5C:21:18
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/1F90160E87F211ECBEBC5339C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:29:75:48:bd:16:b2:3d:3d:8c:c7:88:a8:a2:51:aa:6f:5a:
         9c:6a:63:dc:dc:c0:8c:09:ca:f4:98:f9:57:85:ff:05:f4:6d:
         71:03:3c:3d:31:b2:50:b7:f3:ad:ce:5d:e3:af:22:eb:fc:84:
         98:e6:f7:78:3d:a6:05:90:49:ec:c1:57:d7:3a:d7:25:42:48:
         ea:3b:4e:e5:45:a8:8b:f7:2d:7a:f9:53:b1:b5:6b:b7:e3:df:
         a2:96:e0:c0:25:03:91:a9:e5:2c:0b:cc:21:53:71:35:2d:3d:
         a1:38:2b:ac:2e:7d:51:4b:c8:2f:6c:d9:10:5e:02:cf:f7:e0:
         6e:33:95:a4:ba:3e:68:3d:d5:a7:98:b7:ee:42:56:e7:18:70:
         c4:b9:f1:63:05:3a:b0:44:c0:b7:6b:1d:da:aa:24:cc:34:1a:
         f2:fb:8f:38:1d:3b:80:a9:d5:53:ef:09:ac:65:6d:39:52:39:
         51:00:50:21:19:13:26:21:25:78:d4:ca:b4:d1:38:e1:b2:6a:
         47:44:ca:d1:53:38:f4:97:b3:d8:5f:d8:7e:5c:ea:b1:aa:af:
         c8:a9:f8:9f:db:52:9a:cc:bc:ae:f2:95:d3:d9:dc:85:17:77:
         89:ea:fc:26:cb:02:e9:b3:89:6f:f4:03:3f:fc:2d:bc:ed:8d:
         88:97:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:40:26 2026 by rpki-client