Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/58F4D598BD5211F189A352235C11F970.roa
File:                     58F4D598BD5211F189A352235C11F970.roa (raw, json)
Hash identifier:          M0mTtVHufKAE4l9wrpj5ODPZ3SC6mL3goe5O6yhBS40=
Subject key identifier:   C2:1F:65:A1:BF:D1:8F:EA:7D:72:65:89:FB:43:BF:67:56:A9:5B:49
Certificate issuer:       /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial:       04CD
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/58F4D598BD5211F189A352235C11F970.roa
Signing time:             Thu 01 Oct 2026 04:41:20 +0000
ROA not before:           Thu 01 Oct 2026 04:41:20 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134595
IP address blocks:        103.170.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl
                          rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5266, serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
        Validity
            Not Before: Oct  1 04:41:20 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abde470-0209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ec:b8:57:38:d5:a5:a1:b9:05:e7:dc:74:50:
                    7d:2e:d2:0a:a7:ff:8d:6a:75:af:2f:a5:5b:31:c5:
                    27:3b:7b:ef:be:5c:2d:be:97:ff:71:23:c1:92:42:
                    15:04:fe:4b:ff:7f:f5:91:60:ac:b2:ed:3b:b4:8f:
                    43:4f:89:ea:62:76:03:c4:23:cd:bb:f3:2f:a3:f6:
                    e0:fb:fa:80:1f:1b:4e:38:2b:bf:db:63:63:5d:51:
                    19:27:3c:b6:80:61:f1:1f:fa:84:c0:1d:c7:70:de:
                    4a:2c:21:70:b4:3b:02:66:db:87:93:94:11:7a:ea:
                    24:0c:10:c7:8a:10:1e:c8:53:a6:9a:fe:8c:9e:18:
                    34:a9:35:3a:ed:9f:44:51:24:76:ea:bd:59:a0:e9:
                    85:c4:f3:39:1b:8a:16:9c:4b:f3:a4:6a:d1:fe:4c:
                    09:f5:7d:27:6e:2e:61:3c:35:1a:0e:e0:af:e9:b5:
                    cb:67:73:f1:d7:69:80:f2:17:e6:fb:9e:3c:8b:19:
                    1d:44:56:1c:db:38:4e:b8:fb:67:88:a1:1b:65:90:
                    eb:24:ff:bd:16:13:ad:38:c3:83:ed:d1:01:32:bc:
                    07:6e:16:0a:29:04:fb:d9:c3:d1:27:a1:8b:f3:98:
                    f0:3e:5a:6b:74:dc:93:d4:67:24:af:35:90:76:be:
                    0f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1F:65:A1:BF:D1:8F:EA:7D:72:65:89:FB:43:BF:67:56:A9:5B:49
            X509v3 Authority Key Identifier:
                keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/58F4D598BD5211F189A352235C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:85:7a:8d:22:d2:3d:16:f2:9b:9a:52:83:1c:ff:b4:53:3e:
         e8:75:65:20:5f:f8:79:43:47:35:ff:e4:7d:fc:3d:29:a4:24:
         ac:4f:48:fb:e1:1e:fb:18:d9:79:78:ba:13:eb:46:b3:e4:ca:
         69:8a:90:f9:23:ae:0d:60:6e:8b:ba:37:6d:5c:1d:f1:c5:16:
         04:9f:3c:9b:53:73:3a:0c:24:49:e5:6c:64:e7:ba:c8:fa:24:
         b2:28:e3:57:ff:c7:d8:bf:90:0d:3b:16:bd:ed:bb:24:77:ad:
         6b:0b:f0:26:36:9b:3c:a6:5e:55:a8:5b:7d:86:95:8f:31:db:
         a1:23:0a:a1:96:ad:c8:f5:a1:31:44:32:ed:27:11:9d:6f:22:
         68:18:83:7b:0a:30:ee:3c:17:a1:98:33:24:bc:5d:78:aa:2d:
         6f:89:ac:3f:22:e7:96:1a:21:76:e6:04:a9:a9:c6:dd:dc:fe:
         47:7d:29:74:c8:94:46:f2:32:76:5d:2d:7e:35:e2:f6:a3:e3:
         b3:c4:24:a0:ac:eb:f0:be:c2:f6:0b:dc:06:64:02:3a:d4:b4:
         60:c7:98:e4:da:d5:ab:50:5d:e4:43:35:99:75:38:d2:90:f3:
         66:f3:b9:dd:de:10:af:fe:4b:3e:9e:70:f1:4f:06:54:24:fd:
         ab:34:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:52:09 2026 by rpki-client