Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/555FE26AB13D11E59299870AC4F9AE02.roa
File:                     555FE26AB13D11E59299870AC4F9AE02.roa (raw, json)
Hash identifier:          GY3dppS/8fUWS4cLQeoV/JTryVHMjd9AtVaUG4pWtjM=
Subject key identifier:   D6:0E:FA:98:A1:DF:EB:06:16:2C:AE:7E:3F:D0:FE:8A:BD:5D:68:0B
Certificate issuer:       /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Certificate serial:       3020
Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/555FE26AB13D11E59299870AC4F9AE02.roa
Signing time:             Sat 26 Sep 2026 16:22:14 +0000
ROA not before:           Sat 26 Sep 2026 16:22:14 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     133122
IP address blocks:        103.195.12.0/24 maxlen: 24
                          103.195.13.0/24 maxlen: 24
                          103.243.148.0/24 maxlen: 24
                          103.243.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12320 (0x3020)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
        Validity
            Not Before: Sep 26 16:22:14 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ab7f136-c468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:b1:a0:c5:4c:cc:0c:44:3d:ee:5a:5a:1a:
                    7c:d4:fd:20:7a:57:b6:7d:2e:62:c5:83:80:bc:9d:
                    f2:5c:51:21:f2:c8:87:76:66:b2:18:87:90:4b:16:
                    fa:84:71:fe:a1:e5:94:8d:43:76:f0:61:38:ff:95:
                    f1:7a:0a:fc:2b:22:0e:06:bb:ed:ec:7d:14:5a:fc:
                    44:62:96:91:78:d8:cf:4b:35:3e:b5:19:63:65:5a:
                    cf:cc:59:32:1d:d8:de:cc:8d:60:5d:6e:ca:5c:15:
                    b2:01:fa:82:da:c9:69:4b:a4:e5:60:fb:c6:c5:d9:
                    70:94:a9:a1:f9:15:ab:0c:10:eb:2e:de:11:5c:99:
                    9b:b6:f0:40:12:23:06:d6:85:21:e6:13:2e:27:19:
                    99:40:91:59:72:20:3a:8a:b0:8e:55:9d:b4:b5:fb:
                    4e:3f:43:f8:5e:8e:fd:3d:46:8c:44:60:9f:a8:82:
                    e7:55:7d:cc:1a:dc:80:1d:8f:46:22:27:da:e6:8f:
                    79:40:5e:41:b6:43:d8:9d:b8:35:26:eb:10:54:62:
                    de:13:1d:12:da:4d:31:eb:ca:10:e9:5f:2d:ec:34:
                    99:19:46:d0:0d:67:4f:e2:46:7f:6a:d6:0b:c4:f2:
                    76:db:a3:56:91:bc:d1:41:a5:a0:95:57:f7:80:02:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0E:FA:98:A1:DF:EB:06:16:2C:AE:7E:3F:D0:FE:8A:BD:5D:68:0B
            X509v3 Authority Key Identifier:
                keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/555FE26AB13D11E59299870AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.12.0/23
                  103.243.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:79:49:91:ff:29:e6:e7:a9:c2:5f:7f:b9:31:a6:93:df:5a:
         f5:94:2f:fd:86:29:35:42:f8:13:79:e5:a7:14:cd:5a:aa:88:
         10:99:8d:f5:12:7f:4d:b7:eb:bb:bb:b5:a0:59:d8:98:e7:20:
         dd:42:ca:1b:2c:ec:e0:03:22:74:21:81:40:41:fa:86:fc:e0:
         ef:58:58:cb:25:38:97:95:5e:38:c9:8b:2f:e8:56:52:a2:5f:
         87:f6:8f:9d:20:d5:82:50:d3:49:02:4f:57:cc:83:38:ea:a7:
         2d:93:b4:3f:f2:f2:26:0a:8b:71:28:cc:ff:60:c8:92:c4:a7:
         bd:08:17:10:0b:b2:e7:e1:48:52:a5:88:5e:92:27:05:d5:46:
         7d:7d:db:38:a7:b6:a9:47:df:40:1b:80:fe:fb:69:6c:c7:9f:
         f0:25:a9:4c:3a:2e:31:41:4c:c2:b2:47:eb:96:10:eb:55:2c:
         f6:b1:07:bb:a3:b7:bc:99:6a:e6:01:09:a0:79:02:98:34:e8:
         4d:12:d8:fd:f9:85:76:80:3b:7e:f0:e7:6b:5f:31:26:b3:75:
         f4:2b:ea:1f:b2:b2:f5:78:84:e5:5a:dc:38:db:4b:b7:4e:08:
         59:da:58:45:0c:39:fc:75:2e:ee:3f:6d:9c:a8:d3:78:e9:01:
         b9:53:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:16:17 2026 by rpki-client