Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/1F8E570AC88F11F1B5FD528B5311F970.roa
File:                     1F8E570AC88F11F1B5FD528B5311F970.roa (raw, json)
Hash identifier:          /TmYPLrJS2SScsh3yoZ3clpF09lj0MFlYiXoVgFD0rg=
Subject key identifier:   64:64:2A:68:38:BE:FD:3E:90:B2:E8:78:12:37:08:66:4D:B4:B3:FC
Certificate issuer:       /CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Certificate serial:       0254
Authority key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/1F8E570AC88F11F1B5FD528B5311F970.roa
Signing time:             Thu 15 Oct 2026 11:54:06 +0000
ROA not before:           Thu 15 Oct 2026 11:54:06 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     136969
IP address blocks:        103.249.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 02:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C33, serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
        Validity
            Not Before: Oct 15 11:54:06 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ad0bede-8944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:ad:1f:4b:28:8e:89:d5:58:32:10:ed:8a:
                    45:da:8a:ff:2c:c5:c4:1c:e0:b4:97:86:66:03:9c:
                    f3:8e:74:26:85:ad:ba:e9:9e:48:bd:82:2c:be:40:
                    78:15:c4:16:06:d0:ad:ab:86:5c:69:51:68:7c:f8:
                    db:7a:da:be:08:f5:04:bb:d6:c6:a3:be:5b:3c:6b:
                    9d:d5:5a:61:06:5c:f0:9e:3e:5d:97:17:71:43:3a:
                    7a:80:4b:14:69:4e:32:cc:73:21:ed:0b:4a:c0:31:
                    2c:bc:3a:b7:cd:3a:6c:e5:99:ff:d7:18:3e:28:88:
                    c9:5c:53:3a:38:96:f0:be:d3:6e:9a:3b:f7:b2:77:
                    54:b3:07:16:ee:87:06:48:7c:3e:70:78:7c:6f:69:
                    c6:f3:d7:30:b9:dc:ea:28:a0:82:be:9e:f5:a5:5b:
                    f2:7c:ef:07:91:2a:56:96:1b:13:95:cf:b4:80:2c:
                    d9:fa:a6:c0:ec:db:01:a5:ef:e0:1f:74:e2:bf:12:
                    62:b9:98:a1:aa:33:2f:30:83:e3:e5:c1:96:f3:7a:
                    12:6a:99:de:fb:a5:81:e7:fe:2c:e1:80:24:88:e6:
                    16:92:1c:5e:51:11:99:40:5f:bc:12:00:7d:c2:a5:
                    3d:7e:8b:21:45:04:bd:d3:63:70:12:74:c2:fb:e3:
                    55:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:64:2A:68:38:BE:FD:3E:90:B2:E8:78:12:37:08:66:4D:B4:B3:FC
            X509v3 Authority Key Identifier:
                keyid:80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/1F8E570AC88F11F1B5FD528B5311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:29:da:76:36:1e:cd:6f:cc:9b:53:dc:cd:16:5a:4f:6b:22:
         a3:22:d1:d9:6d:f2:ff:f5:a4:87:8d:e6:b5:fc:b3:85:f0:86:
         65:7a:4c:5d:3c:74:df:02:c8:ba:a1:ad:df:2a:01:ac:ff:48:
         5d:01:19:31:8c:92:f3:a1:de:4c:47:64:3c:78:0f:29:cd:85:
         05:66:e7:ee:b7:6b:fd:ae:24:b3:dc:de:10:22:28:8c:77:b5:
         49:a9:25:79:d8:c2:1b:1d:ca:9d:ff:0e:26:c1:53:c7:93:b2:
         f4:86:7a:ab:d2:62:b5:78:23:7b:95:1c:b1:0c:c3:20:43:f0:
         e0:48:c8:3e:af:a9:0b:df:ea:55:93:2a:21:1d:44:3c:25:58:
         7f:2f:b5:c3:ba:e6:bd:d2:ec:dd:93:3f:37:fb:6b:00:5c:eb:
         b3:b5:b6:d7:75:54:6f:9b:90:94:56:bf:a7:b4:e7:cf:9c:0a:
         8e:8d:ea:68:17:e9:0e:6c:64:c8:80:d4:46:c6:ba:d4:94:9d:
         5f:6a:13:09:e4:09:7b:6e:95:ce:a9:7e:d0:a0:2c:76:bd:e6:
         99:5e:36:75:28:d3:2c:a4:ed:2f:ec:ec:ff:12:fe:2f:44:28:
         43:42:fb:db:8a:66:4c:e7:50:d7:0a:2f:04:f0:d3:98:c2:a0:
         a1:0c:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:27:32 2026 by rpki-client