Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/93DF89E6C0BD11F1BB6216436511F970.roa
File:                     93DF89E6C0BD11F1BB6216436511F970.roa (raw, json)
Hash identifier:          QtSEK687Ek0oyb8ZqMLbm3CpbJ7EPUUPtobL9I9RXR4=
Subject key identifier:   1B:6B:CD:A3:71:A6:D7:3F:82:1B:91:4F:9E:80:EF:98:B5:9A:72:8E
Certificate issuer:       /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Certificate serial:       0870
Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/93DF89E6C0BD11F1BB6216436511F970.roa
Signing time:             Mon 05 Oct 2026 13:06:29 +0000
ROA not before:           Mon 05 Oct 2026 13:06:29 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137542
IP address blocks:        103.157.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl
                          rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 13:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160 (0x870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
        Validity
            Not Before: Oct  5 13:06:29 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ac3a0d5-ea07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:27:93:ec:c0:3b:1c:37:7f:92:5d:1c:b0:
                    4a:e8:a2:b3:18:9e:df:d1:8f:f1:8c:9d:63:37:c9:
                    53:69:68:a8:63:14:aa:7b:47:e1:23:21:54:20:0b:
                    4e:22:36:ac:78:ee:a9:bb:b4:8f:9c:f2:45:bf:83:
                    37:af:49:4e:b3:54:87:bd:21:e7:0d:df:81:c2:58:
                    b7:72:17:6b:b9:74:5d:d1:9c:1b:aa:33:e9:49:bd:
                    86:c9:9c:a0:41:a6:6a:ca:3a:f7:ff:71:b5:35:75:
                    63:a2:12:b2:9b:5c:74:43:26:a3:36:7c:42:28:79:
                    54:98:c7:cd:92:86:c5:05:74:fd:9d:9f:6e:56:65:
                    6b:f0:1d:dd:3f:d6:f8:14:a3:91:fb:0c:5a:ba:3b:
                    a0:db:3c:43:f5:0d:3d:95:0e:4b:45:3c:d9:b5:ce:
                    fb:7c:f4:6a:ce:cb:69:e2:53:82:ee:22:32:a4:16:
                    15:91:03:0b:84:ac:64:12:49:9f:4e:4d:35:e5:fb:
                    eb:b2:18:de:60:c5:6d:49:8d:bb:7c:9f:a9:83:b9:
                    95:17:69:8c:6e:fe:50:bc:92:30:8e:a3:89:db:3d:
                    41:b9:a4:69:05:bc:8a:9f:85:ca:ad:1f:ca:95:ea:
                    60:e8:a1:6a:c8:04:46:35:36:a7:24:bf:f8:9c:22:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6B:CD:A3:71:A6:D7:3F:82:1B:91:4F:9E:80:EF:98:B5:9A:72:8E
            X509v3 Authority Key Identifier:
                keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/93DF89E6C0BD11F1BB6216436511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:84:b7:1f:92:3a:5d:f1:86:95:1f:2e:6c:50:72:23:25:9f:
         28:f2:fe:f6:ba:54:01:cf:53:6d:e9:ec:53:5d:2e:44:39:0f:
         42:26:51:96:49:66:ab:58:43:5a:65:13:26:63:1a:6c:7d:43:
         88:a8:c2:b6:51:ab:f5:9a:34:68:7b:1d:f1:e9:3b:cd:05:20:
         59:33:9a:d2:f9:55:8d:7f:de:40:74:0f:68:66:a3:86:a3:03:
         4b:0a:2d:ab:d8:7e:1a:d2:cf:a5:98:b4:9d:30:f2:0e:7c:8e:
         c8:fc:c9:30:e2:8b:e8:a9:2c:d1:68:20:88:c0:1a:23:69:dd:
         1f:11:cb:26:17:38:e9:b6:5e:2e:51:30:17:e5:0f:d3:df:03:
         0c:68:b5:14:02:3d:d8:a4:a9:8c:37:34:55:fa:27:06:fe:73:
         fa:ea:c1:ec:94:1d:c2:44:29:bb:c8:7c:9c:a8:18:8d:7d:eb:
         8d:2a:2d:ff:23:0a:17:e0:a9:8d:7c:d9:2d:ee:c4:c2:8d:0f:
         36:a8:4d:94:02:4b:5a:16:85:ea:aa:13:ae:9f:a4:42:86:b7:
         01:47:f7:db:eb:a7:82:e2:70:db:a9:a8:2e:3f:e3:87:b4:33:
         e4:c1:08:d8:ee:3e:43:08:a8:4e:aa:de:f5:8e:cb:41:4b:f7:
         99:cc:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:07:02 2026 by rpki-client