Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C572A/1B3C2472D27E11F1835E33AF2D66CEF9/79F079F0D27E11F1A60D3F062E66CEF9.roa
File:                     79F079F0D27E11F1A60D3F062E66CEF9.roa (raw, json)
Hash identifier:          rAZb69d3a+426hRBT5p3hgc+d6hn31NnLvVCmIbrZQE=
Subject key identifier:   FB:7E:54:CC:D0:7A:5F:73:50:49:03:A0:20:9C:B0:B1:83:3F:01:4B
Certificate issuer:       /CN=A91C572A/serialNumber=2B2CD7FE7C530F8EA474F562D3886E77B8CE1388
Certificate serial:       04
Authority key identifier: 2B:2C:D7:FE:7C:53:0F:8E:A4:74:F5:62:D3:88:6E:77:B8:CE:13:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyzX_nxTD46kdPVi04hud7jOE4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C572A/1B3C2472D27E11F1835E33AF2D66CEF9/79F079F0D27E11F1A60D3F062E66CEF9.roa
Signing time:             Wed 28 Oct 2026 03:22:16 +0000
ROA not before:           Wed 28 Oct 2026 03:22:16 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     133159
IP address blocks:        103.4.234.0/23 maxlen: 23
                          103.236.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C572A/1B3C2472D27E11F1835E33AF2D66CEF9/KyzX_nxTD46kdPVi04hud7jOE4g.crl
                          rsync://rpki.apnic.net/member_repository/A91C572A/1B3C2472D27E11F1835E33AF2D66CEF9/KyzX_nxTD46kdPVi04hud7jOE4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyzX_nxTD46kdPVi04hud7jOE4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 08:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C572A, serialNumber=2B2CD7FE7C530F8EA474F562D3886E77B8CE1388
        Validity
            Not Before: Oct 28 03:22:16 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ae16a68-f704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c4:f2:29:32:42:42:e8:19:4f:ea:52:05:7c:
                    7c:21:29:f0:cc:e6:77:3a:db:ad:f4:61:85:e4:72:
                    c3:5e:29:23:49:0d:6b:3e:48:33:a2:92:a5:be:42:
                    40:8b:b4:10:29:6a:1c:76:10:5a:32:19:df:b7:90:
                    3e:65:10:13:e6:6b:9d:98:5f:e4:2d:7c:7d:5e:c0:
                    d3:12:9f:8b:c7:f8:fe:cf:2f:2a:9a:f4:37:00:72:
                    31:05:0d:c3:bb:3a:4b:69:14:3d:4d:1c:29:ad:3d:
                    b5:d6:c8:4e:4a:61:eb:6e:c8:02:80:ae:e9:06:41:
                    fe:41:0c:fe:aa:f6:e7:d0:92:49:1f:02:9c:4f:7a:
                    5a:59:5a:0d:42:af:69:e4:26:96:5e:0b:31:02:82:
                    a5:6e:10:12:75:79:7c:54:2f:1e:f5:67:09:41:fe:
                    63:f8:a3:c8:29:d4:55:93:6f:27:94:a9:5d:d6:59:
                    fe:4e:1f:fe:6a:23:1b:35:81:e7:09:e9:86:72:ba:
                    9a:5e:0f:4d:af:fd:21:8d:16:1c:ad:7e:84:f6:ba:
                    d2:d4:7a:c4:55:2a:6a:c1:41:86:33:9f:ad:43:fa:
                    4d:99:21:d2:35:f4:1c:71:78:ed:f5:6e:a2:1e:9f:
                    24:8a:67:40:12:b5:85:94:2a:b0:dd:15:75:5a:76:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7E:54:CC:D0:7A:5F:73:50:49:03:A0:20:9C:B0:B1:83:3F:01:4B
            X509v3 Authority Key Identifier:
                keyid:2B:2C:D7:FE:7C:53:0F:8E:A4:74:F5:62:D3:88:6E:77:B8:CE:13:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C572A/1B3C2472D27E11F1835E33AF2D66CEF9/KyzX_nxTD46kdPVi04hud7jOE4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyzX_nxTD46kdPVi04hud7jOE4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572A/1B3C2472D27E11F1835E33AF2D66CEF9/79F079F0D27E11F1A60D3F062E66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.234.0/23
                  103.236.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:24:37:b7:ca:bd:f7:4d:b7:e0:22:43:68:6a:9a:bc:77:5d:
         44:fe:ab:8a:93:7c:24:78:b7:f1:f8:d2:16:af:08:9c:00:62:
         fc:d6:4b:2e:1e:f5:df:4a:e0:3a:7c:98:2a:69:8c:cb:1c:2c:
         13:85:c1:b4:29:f6:7d:a0:4f:52:9f:97:bd:cc:f6:7f:49:5f:
         86:a4:25:41:49:a6:f3:cc:09:a5:5a:28:7b:b6:9c:e2:4d:62:
         a4:64:e1:fc:11:2d:62:96:f1:ec:3a:29:71:ca:e3:1b:a7:7d:
         f7:fc:1e:85:53:e1:3a:bf:30:e8:6b:9c:1e:49:06:47:1c:19:
         6f:38:ee:d1:e9:7e:5e:88:32:8a:4d:7a:4a:cd:a9:a8:fa:2d:
         1d:6e:8f:a1:ee:71:23:b7:04:6d:3c:26:5f:1b:54:1a:09:f4:
         7e:d7:04:03:9b:f3:d7:6e:b2:4e:77:2c:f1:1b:05:35:dc:04:
         49:03:7a:e3:c5:02:63:97:ce:ca:dc:31:47:96:b8:dd:28:05:
         cc:98:5e:26:47:87:0d:b0:55:51:c6:11:df:f2:80:3e:d5:48:
         40:98:1a:5a:be:a6:48:ac:41:88:bb:70:a3:ba:4c:cf:ab:4b:
         1f:3d:b2:81:b4:e0:ab:d1:7a:b9:74:68:0a:0d:2d:ec:5a:2d:
         e6:ad:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:22:00 2026 by rpki-client