Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/279A9F92BCCA11F1B3E262A63211F970.roa
File:                     279A9F92BCCA11F1B3E262A63211F970.roa (raw, json)
Hash identifier:          /Et/g6O34DWmELbGFAjhnGdQa6Z2Fc48lHfmp1JqQlc=
Subject key identifier:   82:C0:4A:FE:05:86:02:D5:ED:1E:AD:90:39:1C:C0:83:99:BB:AE:8E
Certificate issuer:       /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Certificate serial:       086A
Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/279A9F92BCCA11F1B3E262A63211F970.roa
Signing time:             Wed 30 Sep 2026 12:26:26 +0000
ROA not before:           Wed 30 Sep 2026 12:26:26 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141375
IP address blocks:        103.157.202.0/23 maxlen: 23
                          103.157.203.0/24 maxlen: 24
                          2001:df5:2c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl
                          rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154 (0x86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
        Validity
            Not Before: Sep 30 12:26:26 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6abcfff2-40c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:0b:cd:b5:20:50:6c:89:1f:f2:8c:ec:87:
                    1b:da:67:3d:1c:72:a9:db:13:f9:ca:7a:d5:b9:8e:
                    12:f7:ed:cc:67:92:ed:ba:9a:e4:35:12:da:6c:c1:
                    02:db:6d:65:eb:51:3d:02:b9:f2:52:17:93:07:92:
                    7d:48:33:f5:8a:54:2a:cf:7a:76:f3:08:24:2d:9d:
                    49:19:13:98:18:92:da:6d:50:8b:49:bd:8e:44:a3:
                    b8:3e:4c:0f:d4:73:df:4f:01:44:37:ee:03:21:63:
                    de:97:2b:28:9d:35:86:d9:1c:74:bd:d4:d7:45:06:
                    ec:1c:46:56:ef:c6:fa:48:84:89:29:1c:be:5b:be:
                    83:8f:24:68:21:0c:37:4d:9a:47:b9:94:b2:26:f2:
                    d3:ce:e1:ea:ef:a1:a0:79:9c:bd:da:8b:7e:cc:40:
                    43:d7:08:f1:a6:1f:77:0d:09:b1:db:e7:ab:dd:c5:
                    8a:7c:c3:68:57:f8:c1:ea:a5:9e:ae:86:e1:8c:42:
                    8c:23:e7:ce:67:43:14:37:2f:b4:39:39:44:35:2b:
                    f6:78:26:89:cd:fc:b9:db:9c:e6:08:34:16:4d:7b:
                    b0:d7:fe:02:3c:74:de:fa:60:cc:36:44:5d:6f:fa:
                    9d:9b:9b:77:67:d5:9f:a4:d2:57:a0:1c:40:22:63:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C0:4A:FE:05:86:02:D5:ED:1E:AD:90:39:1C:C0:83:99:BB:AE:8E
            X509v3 Authority Key Identifier:
                keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/279A9F92BCCA11F1B3E262A63211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.202.0/23
                IPv6:
                  2001:df5:2c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:c5:c5:05:9d:48:f7:21:a0:3d:73:13:a8:4e:0e:35:a9:5c:
         aa:c5:0b:5e:90:2e:46:f8:4b:9f:3e:de:f9:d2:7b:51:ae:d1:
         47:98:d9:1b:db:7b:47:f8:1b:6b:e3:61:e1:52:cb:9c:21:01:
         6b:0a:28:7c:ce:5b:75:cd:1f:65:bb:9f:44:b5:7e:d4:81:f9:
         06:2b:e6:cd:b5:27:1e:99:2a:82:c2:d6:d0:fd:92:b2:09:6a:
         a7:cc:b7:71:88:d5:1b:7f:5a:cf:d6:67:98:33:91:53:b9:c3:
         3a:2f:47:89:bb:b4:a3:ab:d0:d3:73:92:e3:f5:37:e0:fe:35:
         96:f9:92:4f:56:a4:fb:4a:d8:06:e3:77:58:e0:20:0f:a5:e9:
         63:9d:58:21:2a:b8:3c:f8:29:f6:d2:26:ca:a0:11:27:2d:09:
         0c:1f:3f:df:41:91:11:ec:d6:65:4d:04:71:5a:8f:4a:64:04:
         0e:0f:ec:df:36:12:b3:4a:94:5b:76:45:4d:5a:15:32:97:b8:
         ca:06:4c:7f:5b:24:90:ee:2e:75:68:3e:53:7a:77:bd:7c:e1:
         12:db:bd:f6:5c:36:3a:df:44:21:80:f4:dd:ac:99:8f:95:17:
         e0:38:71:c6:ad:e5:91:3b:e1:4b:1a:65:b5:6a:6a:9a:a7:9b:
         43:ea:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:55:53 2026 by rpki-client