Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa
File:                     3FACB1ECAE3911F099A5E452C4F9AE02.roa (raw, json)
Hash identifier:          94199H0m5snDXg4yX+SaoXi5ZwK9BEgICeRAS4T9VnI=
Subject key identifier:   6F:3D:4F:86:4B:E0:1C:ED:AA:3E:E9:D5:4B:21:90:56:76:C2:57:49
Certificate issuer:       /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
Certificate serial:       BA
Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 20:39:51 +0000
ROA not before:           Fri 02 Oct 2026 20:39:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     140896
IP address blocks:        103.153.30.0/24 maxlen: 24
                          2001:df4:2c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl
                          rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
        Validity
            Not Before: Oct  2 20:39:51 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ac01696-42dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:72:80:61:cf:6e:55:b7:56:80:8f:de:11:
                    0e:75:5f:9e:72:be:77:12:76:26:10:69:87:8d:dc:
                    54:a1:f3:22:0f:d0:83:35:83:ae:12:c4:27:1c:fc:
                    4b:1a:41:ea:66:49:bc:26:e3:25:b4:57:75:cf:d1:
                    1f:bb:a0:b8:a3:20:1e:ef:eb:e8:a9:29:af:34:3b:
                    c3:9c:64:ae:6a:a4:27:a5:ca:1b:a2:af:95:98:b4:
                    38:43:76:9f:b8:f7:ea:dc:54:d6:07:c2:e6:00:28:
                    f9:56:e3:82:c8:b1:03:33:c7:38:e2:80:a0:9d:ec:
                    2a:55:90:06:b8:79:d6:0e:c9:2a:7b:24:13:63:bb:
                    19:3c:25:c1:c0:d5:1a:12:4c:1c:5b:d4:49:b6:95:
                    26:d2:49:72:cc:80:4c:32:bf:0d:d7:2d:aa:85:e6:
                    2c:6f:65:74:d8:5b:1f:db:f9:26:2f:1b:01:2d:32:
                    72:de:98:54:ca:11:a4:c5:bb:08:60:6e:17:ca:71:
                    23:9c:0f:8d:3b:ff:52:75:cc:19:24:0f:de:4b:05:
                    5d:09:ea:39:4f:96:80:f2:a2:0c:58:5c:8a:ef:00:
                    4b:1c:d9:f0:63:a5:3d:6c:31:8e:c2:77:4d:78:ad:
                    37:97:95:b3:b7:ef:b7:84:75:89:4f:42:c3:0a:58:
                    a3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3D:4F:86:4B:E0:1C:ED:AA:3E:E9:D5:4B:21:90:56:76:C2:57:49
            X509v3 Authority Key Identifier:
                keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/3FACB1ECAE3911F099A5E452C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.30.0/24
                IPv6:
                  2001:df4:2c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:5b:00:f8:fd:b2:d2:0c:71:ac:4c:46:8b:bb:26:0a:c5:e1:
         4f:7e:f6:72:f9:93:65:4c:54:6c:a5:fc:e9:97:e5:72:a3:47:
         45:7d:30:fc:26:d7:df:29:28:09:a9:93:11:1e:60:a9:b0:39:
         b7:0b:75:03:59:04:e2:45:82:dd:c7:d9:f1:1e:e5:1e:46:e4:
         50:92:8a:24:41:c6:d1:34:77:23:11:21:f2:62:5b:2e:d9:36:
         45:ec:d6:de:83:7b:10:e9:41:86:69:3d:1e:1f:63:21:d8:e0:
         c9:06:4d:e9:52:0a:43:f8:73:96:6e:4b:fe:c5:ed:04:bc:b5:
         59:d0:2b:16:53:5b:84:b9:d2:1e:54:16:42:d6:f6:51:30:e7:
         15:55:0b:6b:a4:3e:0a:f8:a3:5a:56:e8:01:b2:8f:0b:4d:7b:
         03:4f:c0:d1:75:bf:b2:07:fd:22:28:08:ba:52:fd:fb:20:fa:
         1a:a0:52:c1:93:f2:d7:25:1c:d8:8b:0c:ab:4b:89:8e:d3:e8:
         ef:49:e0:0e:6d:83:c2:33:ab:72:74:cc:97:59:96:1d:d6:16:
         3b:dd:19:1d:60:37:4a:f5:6d:22:8e:b7:d4:ae:43:6b:3d:08:
         b8:4d:11:98:db:c7:f3:30:77:a7:cb:23:4a:57:79:c9:57:93:
         da:9d:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:51:55 2026 by rpki-client