Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/9F890910DA3C11F088DF33818DD3641D.roa
File:                     9F890910DA3C11F088DF33818DD3641D.roa (raw, json)
Hash identifier:          WSO54GXOMLNY9+Q+eJeEwRTVNPFNhORZLJRc9VrAOIk=
Subject key identifier:   5B:8A:5F:28:A7:0A:CA:7E:EA:2F:81:56:18:0B:FE:D5:50:E7:CA:BE
Certificate issuer:       /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial:       05FD
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/9F890910DA3C11F088DF33818DD3641D.roa
Signing time:             Thu 22 Oct 2026 23:43:19 +0000
ROA not before:           Thu 22 Oct 2026 23:43:19 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     138997
IP address blocks:        103.134.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 23:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
        Validity
            Not Before: Oct 22 23:43:19 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ada9f97-cb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:a7:2a:80:73:1e:58:d8:84:c7:d7:08:76:
                    e7:7c:0e:2c:f2:29:c2:ba:29:9b:c2:63:7d:e2:ac:
                    d5:78:11:81:23:92:db:37:30:62:b4:c1:83:99:1b:
                    92:c3:20:a4:66:8e:16:c9:e6:f4:83:e0:e9:e5:95:
                    cb:80:bc:20:22:77:c6:37:50:f7:4c:3a:28:c6:52:
                    7d:69:a8:90:48:5c:68:b0:fd:c3:4b:14:de:45:c2:
                    1d:dd:ff:8f:00:e7:c6:6e:b3:1f:33:78:29:be:98:
                    46:0b:65:0f:0d:8c:72:29:0d:0d:61:dd:da:54:94:
                    87:61:93:ec:9b:d7:78:45:2f:84:4c:22:f9:bd:53:
                    e0:0c:ca:56:81:79:27:e5:54:cf:7d:74:c0:57:29:
                    7b:1f:32:e6:aa:37:b2:33:66:b2:1a:1c:6c:f5:df:
                    66:df:fb:6d:5e:94:53:09:c9:a1:dd:96:65:ea:80:
                    2b:32:6c:67:83:fd:19:02:1c:ea:1f:4f:61:34:b4:
                    9e:4f:9e:02:0c:1f:f5:3c:f5:59:6a:3d:a3:ed:6a:
                    f5:86:96:1c:41:7e:aa:9b:c7:07:80:0d:ca:49:75:
                    52:56:65:73:94:cd:03:0b:de:2e:55:3c:3c:52:a6:
                    fb:a4:97:f7:01:37:50:fa:ba:4d:43:b8:1f:26:6d:
                    13:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8A:5F:28:A7:0A:CA:7E:EA:2F:81:56:18:0B:FE:D5:50:E7:CA:BE
            X509v3 Authority Key Identifier:
                keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/9F890910DA3C11F088DF33818DD3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:8f:e1:f5:9e:19:50:fd:89:a7:01:3c:a8:d7:c0:89:88:65:
         a3:84:c4:9e:b8:c3:55:5d:3f:24:83:76:4f:96:5b:53:42:48:
         0f:97:1c:04:5a:40:c4:cb:e0:10:2c:61:29:a3:1f:93:c2:dc:
         15:3f:a3:6e:e7:b7:69:c6:ca:09:a1:8c:3e:ce:71:4a:b5:37:
         24:5e:2a:03:68:fb:09:cb:39:f3:ce:8f:b7:09:32:ec:4d:a7:
         6a:7b:3c:8f:ee:ab:7b:4e:6b:81:e2:51:54:4c:01:95:da:82:
         2c:a7:8e:9d:a9:1c:99:b0:98:e3:ec:a1:96:22:6a:80:2d:18:
         fe:b0:fc:5c:39:41:f4:fa:75:28:16:a3:2c:07:c6:a5:ea:9c:
         1d:06:c5:45:a7:e4:01:e1:50:dd:2d:8f:4c:6b:5a:af:06:7d:
         29:76:7e:40:50:94:c4:89:e1:25:e7:8b:a6:07:f7:25:8f:02:
         65:29:5a:fa:e8:a8:f1:fc:61:d8:80:3d:d1:c3:d6:59:82:1e:
         f4:04:98:df:89:5a:d8:0a:08:dc:8f:95:5f:8a:bc:dc:ce:f5:
         32:11:9f:31:7d:49:ba:62:a0:e6:4d:27:26:f3:61:62:5f:b5:
         5c:ef:e6:f6:2d:bf:de:9b:93:2f:98:19:7f:0c:15:b6:67:10:
         3d:f4:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:41:51 2026 by rpki-client