Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/FEE1AED6C77311EEB751AE2CC4F9AE02.roa
File:                     FEE1AED6C77311EEB751AE2CC4F9AE02.roa (raw, json)
Hash identifier:          8HV+CF2QY+0SGwOprpixMRQUP+H8yDOrQpL48BXye6E=
Subject key identifier:   A1:A5:45:09:FC:66:09:AD:72:18:1E:44:B1:3C:E4:41:52:18:32:6F
Certificate issuer:       /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Certificate serial:       055B
Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/FEE1AED6C77311EEB751AE2CC4F9AE02.roa
Signing time:             Thu 10 Sep 2026 23:49:00 +0000
ROA not before:           Thu 10 Sep 2026 23:49:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     141987
IP address blocks:        103.170.206.0/23 maxlen: 23
                          2001:df7:2980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEBFF, serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
        Validity
            Not Before: Sep 10 23:49:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa341ec-fe8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:56:42:b5:7f:f0:9c:1a:b1:04:06:61:2f:4e:
                    41:94:db:fa:e9:4a:8f:5d:cf:62:2f:b7:f5:f3:2e:
                    f1:53:49:eb:ec:40:36:38:eb:6d:86:d4:99:6d:2e:
                    21:e2:60:5d:5f:18:57:b1:e5:45:bf:7f:97:13:62:
                    e4:a4:8a:bf:db:bd:8f:a9:20:45:14:3f:18:a2:44:
                    0f:92:e3:01:e2:6f:83:d1:4d:b4:e1:df:82:7d:2a:
                    b9:40:3c:b6:0b:6e:c1:54:7e:14:f8:4d:88:1c:68:
                    9b:3f:a3:1b:17:58:31:2d:c4:05:6a:e9:84:92:30:
                    95:fc:28:d4:05:ca:05:1f:96:ff:a2:0b:eb:1f:db:
                    f4:1d:f2:03:c2:86:ec:e5:b5:95:97:42:95:95:3a:
                    17:0e:89:ad:1b:7d:ef:7f:8c:fa:3f:25:08:26:8a:
                    42:09:9b:89:8a:2c:33:0e:eb:73:6d:42:ac:5e:17:
                    ca:d9:56:07:f4:0e:2b:69:7b:6d:e6:80:42:36:bc:
                    04:dd:76:c5:20:44:63:f7:12:65:52:bb:42:56:1a:
                    e9:0a:96:8d:61:36:5f:d7:4f:10:fc:14:69:e3:e9:
                    77:80:6d:3b:e2:83:5e:8c:ea:29:72:ff:9e:7a:ee:
                    04:c7:83:f9:bb:cc:ac:72:2b:8f:a3:42:30:5d:f5:
                    e7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A5:45:09:FC:66:09:AD:72:18:1E:44:B1:3C:E4:41:52:18:32:6F
            X509v3 Authority Key Identifier:
                keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/FEE1AED6C77311EEB751AE2CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.206.0/23
                IPv6:
                  2001:df7:2980::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:1f:7c:55:31:fc:f7:9b:ea:b8:34:16:23:0e:31:20:99:f9:
         41:2f:df:28:56:16:ef:76:af:bb:46:47:07:fb:de:6a:1e:03:
         0c:3c:88:20:5b:be:77:8b:58:52:ab:0a:ac:28:8b:32:5c:cf:
         83:70:c6:33:f7:69:21:93:cb:f3:71:2b:e0:fe:01:bb:63:2b:
         a4:ef:66:1b:d2:01:cc:25:00:24:c2:48:ee:38:d4:b1:82:0f:
         e1:5b:0e:1e:50:a4:cf:a6:85:d9:36:91:32:88:89:b4:b9:16:
         0e:2b:27:1a:a7:74:7d:4c:f5:ec:29:4e:aa:e8:87:58:71:cc:
         dc:86:98:43:33:5b:98:29:7c:ad:30:35:b5:e8:12:9e:53:52:
         97:78:a9:ff:d2:c0:54:ef:46:e0:07:ff:ed:ee:b7:ca:1b:51:
         61:74:0e:34:05:3b:4a:ea:9a:57:04:4a:17:f3:3c:d7:c1:fd:
         d5:3c:21:de:14:94:5a:2c:0c:5f:ee:70:d9:be:a4:c4:66:6c:
         7c:de:12:d7:4e:cb:7e:bb:0f:19:92:ae:5b:9c:b1:19:99:8c:
         dd:70:6e:1b:b1:0c:46:45:de:e0:64:0b:44:3c:76:c7:65:06:
         6b:23:f3:c3:bf:c7:ce:50:8e:e3:27:3d:0f:ea:5e:7d:8f:53:
         48:09:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:12:16 2026 by rpki-client