Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/550C6AC4BF1711F18CC048DD6411F970.roa
File:                     550C6AC4BF1711F18CC048DD6411F970.roa (raw, json)
Hash identifier:          +9EX1wz9/mSm2v5dku3xql0aNVLi6Nv65cVjhwOpnHA=
Subject key identifier:   10:35:9E:B1:8F:5B:13:73:33:04:77:78:7C:ED:CF:3E:E1:F4:1A:D7
Certificate issuer:       /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial:       08B2
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/550C6AC4BF1711F18CC048DD6411F970.roa
Signing time:             Sat 03 Oct 2026 10:43:56 +0000
ROA not before:           Sat 03 Oct 2026 10:43:56 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     135543
IP address blocks:        103.80.137.0/24 maxlen: 24
                          103.80.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 20:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2226 (0x8b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
        Validity
            Not Before: Oct  3 10:43:56 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac0dc6c-0a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:b7:2c:ad:5d:fe:1e:da:36:96:d3:74:61:
                    06:07:c6:a6:a3:28:58:25:b4:3a:b9:bd:52:8f:df:
                    1c:d8:f5:12:30:b6:ab:47:02:3a:01:93:89:9d:f6:
                    cc:c2:7d:7f:4b:e1:b7:0e:49:70:98:db:d5:53:34:
                    6f:c3:9e:cc:93:38:00:7c:8c:91:16:54:4d:3f:0c:
                    f8:8d:fb:d1:be:50:93:21:db:83:c1:c9:02:a6:be:
                    4d:ca:12:9e:52:e1:47:48:e4:a4:c8:af:63:6b:54:
                    df:46:1b:4e:28:74:03:1b:24:f8:a8:61:40:5c:fe:
                    08:f5:b1:f9:36:76:bd:ff:2e:ab:62:9b:00:3b:86:
                    f9:0b:2f:d6:d9:02:29:4a:c8:3d:0c:85:61:f1:a4:
                    e5:3f:bd:a2:f3:37:02:b1:b3:3a:b0:2a:e2:f2:3c:
                    ce:aa:13:cf:c0:0b:ea:f9:fa:a6:5f:3a:26:84:2b:
                    ff:2c:21:79:34:31:03:ce:4c:99:4c:f9:f6:a6:09:
                    29:ee:96:12:2f:2e:99:30:ff:8d:f8:9e:f6:fe:b8:
                    c9:d3:c0:88:54:a1:73:e2:71:6a:d0:e5:44:4b:fb:
                    48:62:33:e5:6d:4d:bc:c6:27:11:5f:bc:2e:4a:09:
                    77:74:e9:15:0d:49:d0:5f:da:e1:d6:9c:dc:92:86:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:35:9E:B1:8F:5B:13:73:33:04:77:78:7C:ED:CF:3E:E1:F4:1A:D7
            X509v3 Authority Key Identifier:
                keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/550C6AC4BF1711F18CC048DD6411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.137.0/24
                  103.80.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:59:2f:c7:f0:43:5b:e1:55:c5:83:55:39:f1:fc:75:ca:06:
         e7:58:08:e3:ff:7a:9f:ca:a3:72:a2:6b:e8:e8:ec:4f:c5:a6:
         6d:a2:41:7b:97:d6:68:31:c5:45:e2:2e:5c:f2:2d:6a:14:fd:
         aa:78:9d:5e:e1:8b:ed:0a:08:4e:6b:89:85:28:0c:e3:d7:cf:
         73:88:2d:b3:0a:75:cc:05:fd:ed:a3:62:8a:78:80:20:25:b5:
         70:58:62:19:ee:a9:51:ed:0c:34:ab:77:5f:66:74:27:e8:58:
         93:0f:14:47:7f:2c:ff:91:53:a0:fa:03:6e:12:58:b9:b6:df:
         32:56:3d:9b:9d:dc:e7:d4:e0:26:96:32:91:10:96:3b:72:34:
         63:d4:0f:e6:20:eb:9f:75:ab:dc:ef:1d:33:2f:b6:ae:3f:68:
         b1:b0:58:2d:e1:30:21:d2:bd:f0:6e:7e:74:71:3a:2b:b0:20:
         ae:b5:d6:1e:f0:63:57:d8:5c:23:81:e2:71:cf:b2:b4:cb:41:
         5f:b1:a8:56:f7:a9:1e:c4:8b:0b:a4:2a:74:70:61:f1:0d:37:
         6a:e9:0d:b6:52:db:dc:0a:63:38:84:c0:c6:22:84:33:98:49:
         be:f5:74:3a:e5:2e:1b:9b:ef:ae:a8:d1:8e:7f:f1:9d:9f:e5:
         a4:ec:55:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:55 2026 by rpki-client