Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9DBA4E02D71411F1A6D299031A66CEF9.roa
File:                     9DBA4E02D71411F1A6D299031A66CEF9.roa (raw, json)
Hash identifier:          pdSyUMPpA8a/ewj/0DOaHahHB7MmG/Q6lb6CIo1RnLQ=
Subject key identifier:   71:F0:05:7C:3E:83:0A:63:79:61:81:43:71:8D:8A:B0:77:1E:33:5C
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0E2B
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9DBA4E02D71411F1A6D299031A66CEF9.roa
Signing time:             Mon 02 Nov 2026 23:24:57 +0000
ROA not before:           Mon 02 Nov 2026 23:24:57 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     6282
IP address blocks:        103.248.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3627 (0xe2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Nov  2 23:24:57 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6ae91bc9-dd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:5d:5d:df:da:50:b2:da:d4:10:74:58:37:
                    1d:94:48:d7:8c:4f:f1:56:9e:26:5f:33:9b:80:3e:
                    1b:4c:8b:56:2c:43:a1:36:4d:20:0d:4e:66:05:2c:
                    bb:8f:2a:89:a0:c2:1c:2f:4c:98:55:bd:b9:d5:d2:
                    06:9c:70:53:3d:b5:6a:0e:db:c9:06:7e:54:70:e3:
                    61:ae:d2:70:99:41:86:8b:1c:6c:27:51:95:33:31:
                    13:ee:28:c0:83:89:b9:eb:4a:5a:b1:51:2c:a8:e1:
                    24:39:35:fc:c3:f7:2c:3d:25:e6:11:86:55:2f:5c:
                    a8:a4:55:8e:a6:d5:88:bd:0e:44:ff:fc:93:be:8f:
                    ab:2f:08:ca:b6:ed:22:5a:cf:c0:8c:3a:54:0f:9a:
                    00:4c:d5:4c:b6:b6:33:3a:44:2b:16:27:ef:74:84:
                    19:3e:9c:50:0f:9c:f2:fe:ca:98:98:c5:69:4d:57:
                    e0:d0:7d:fb:93:51:bc:86:e4:93:e7:9d:eb:a6:52:
                    f7:1c:26:cf:d8:7c:fc:0b:ad:09:8e:d7:d1:20:c1:
                    2b:8d:cc:f5:d2:30:39:04:d1:67:d4:88:8c:4c:12:
                    08:99:ba:2a:46:ae:be:23:6c:1e:9d:24:1b:13:c5:
                    0f:f5:cb:d5:53:8e:79:f8:0d:22:ab:33:2d:b9:be:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F0:05:7C:3E:83:0A:63:79:61:81:43:71:8D:8A:B0:77:1E:33:5C
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9DBA4E02D71411F1A6D299031A66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:60:92:c1:a0:51:96:fc:dc:fb:96:28:58:ce:32:24:21:90:
         a4:e1:38:57:cb:df:74:70:7c:f6:5f:f7:43:2c:79:7d:a1:32:
         08:47:c5:c7:6d:44:e4:50:96:0e:27:64:74:06:61:8e:c2:57:
         19:2f:c3:15:d5:e0:45:6b:bd:56:87:a4:f3:e0:ea:ae:cc:22:
         1f:23:06:34:63:b8:ae:2d:2e:e7:dc:ac:85:7b:03:96:65:74:
         78:2b:a3:a7:6c:b8:d0:cb:90:0c:f1:82:0a:0d:17:8e:4a:eb:
         fb:db:20:7c:fe:ac:12:35:bf:4a:c9:27:85:09:07:2a:ae:33:
         2c:3a:e5:0a:c3:13:1b:21:f0:ec:f8:c4:59:f8:7a:5a:ba:05:
         8a:6a:b2:6c:68:84:c6:6c:eb:aa:bb:84:6b:f1:48:d6:5f:51:
         bf:13:76:58:48:9c:0c:8c:54:f3:ad:a0:fd:7e:26:e2:b1:8c:
         be:6e:75:92:b0:71:35:f1:26:66:f8:38:26:2d:1a:be:d0:b5:
         45:f0:ea:a1:91:79:d9:18:5b:ea:6a:d4:89:de:24:61:7c:97:
         7d:72:90:c3:5e:a0:d9:48:1c:88:41:76:59:4e:c9:61:b8:6e:
         13:55:40:de:fb:2b:a0:4e:fb:f7:e5:86:71:82:55:bf:ce:31:
         77:eb:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:17:14 2026 by rpki-client