Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/2E58EDD0A4F011F19025BAB06B11F970.roa
File:                     2E58EDD0A4F011F19025BAB06B11F970.roa (raw, json)
Hash identifier:          2ocGI8kGqmVxj84NUkACI9xBvegH5llIIlxG7IvKFX8=
Subject key identifier:   48:09:7A:2B:16:68:8D:36:B5:99:83:83:32:79:82:6E:C1:B9:5B:F7
Certificate issuer:       /CN=A91FAD99/serialNumber=FAB11CD0E7E658C08E997CF1954DCA9C10C8D724
Certificate serial:       02
Authority key identifier: FA:B1:1C:D0:E7:E6:58:C0:8E:99:7C:F1:95:4D:CA:9C:10:C8:D7:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/2E58EDD0A4F011F19025BAB06B11F970.roa
Signing time:             Mon 31 Aug 2026 03:58:10 +0000
ROA not before:           Mon 31 Aug 2026 03:58:10 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137881
IP address blocks:        103.110.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAD99, serialNumber=FAB11CD0E7E658C08E997CF1954DCA9C10C8D724
        Validity
            Not Before: Aug 31 03:58:10 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a94fbd2-4c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:06:95:ec:62:3f:e5:2f:98:bc:9b:02:c4:
                    74:49:8e:21:af:05:9e:d5:b9:de:63:96:7e:18:38:
                    1c:30:d4:bf:1b:21:0f:6e:49:da:66:b5:48:45:e1:
                    95:db:11:62:d4:80:78:c0:5f:71:d4:66:85:31:b5:
                    c9:cc:c5:df:5d:d3:61:7a:87:bd:a1:10:08:3c:91:
                    07:09:e0:d4:3b:59:4e:fa:94:e6:0f:2d:5a:f3:1b:
                    4f:3f:b6:82:36:1b:81:50:01:e9:65:9f:83:f3:f9:
                    1b:b2:01:87:4f:ee:64:cd:c6:a4:8e:d8:40:8f:2c:
                    f6:07:69:5e:50:7c:b0:e7:30:35:75:e5:d8:9b:16:
                    a1:95:9d:92:a1:fb:6b:66:27:fc:eb:53:13:90:f8:
                    be:e3:00:e4:f6:8f:64:8c:db:a9:0b:f6:24:dc:d1:
                    10:f3:0c:37:96:9a:b6:c9:59:2f:48:3a:be:53:6c:
                    63:2d:3b:ed:48:7c:4b:59:4d:53:64:22:20:3e:dc:
                    c4:90:49:3a:97:51:4c:ba:53:de:5f:2d:c2:76:79:
                    1e:a6:80:58:5e:c6:42:9d:d5:f5:74:ac:c5:4c:37:
                    c1:fc:bc:48:d3:59:e7:d0:26:ef:6c:dd:e0:ea:b8:
                    ac:b7:19:cd:d5:63:94:3b:dc:3b:ab:9b:33:24:0f:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:09:7A:2B:16:68:8D:36:B5:99:83:83:32:79:82:6E:C1:B9:5B:F7
            X509v3 Authority Key Identifier:
                keyid:FA:B1:1C:D0:E7:E6:58:C0:8E:99:7C:F1:95:4D:CA:9C:10:C8:D7:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rEc0OfmWMCOmXzxlU3KnBDI1yQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD99/58ABDDC6A4EC11F193E41B0D6B11F970/2E58EDD0A4F011F19025BAB06B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:bf:e7:26:3f:d7:ac:a4:31:54:46:88:ca:66:30:f7:a4:63:
         f0:cc:d9:1e:de:d0:35:8e:94:a1:7f:59:ad:84:df:08:97:c9:
         bb:33:36:3d:4d:8f:d1:ee:20:61:17:83:77:d0:c3:b0:7e:5e:
         41:a9:85:e2:a4:27:df:11:4b:a1:a0:7f:b2:e7:19:f0:0d:f1:
         80:49:fb:a9:55:57:f8:b0:66:ac:62:27:32:72:65:0d:71:d4:
         95:2d:21:2c:0d:ad:f0:b5:1e:48:9b:a4:c0:0e:a8:ed:7a:4d:
         bf:1f:e8:83:8d:70:dc:9c:c6:98:88:02:52:2c:80:06:76:16:
         45:d0:46:4b:73:92:0d:c7:3d:29:62:6c:c2:44:d9:2d:e4:a6:
         0b:11:0e:3b:3d:a1:20:06:1a:3b:37:c2:3f:23:82:31:d0:c1:
         e4:3c:d6:b1:aa:0d:3f:1b:74:84:cf:c6:a5:c0:a2:41:dd:49:
         6a:7b:a9:25:81:30:3f:ee:5a:78:65:6b:4d:cb:fb:de:a0:29:
         43:c8:9b:8f:72:c3:f2:41:ac:b6:30:f8:ff:fc:77:0b:9c:1f:
         89:2d:85:9d:73:c7:a8:13:81:a0:b2:59:72:c4:48:6a:17:a2:
         40:db:55:d0:34:4c:8a:6c:6a:d7:62:40:15:f9:21:3f:5f:e4:
         e6:37:3d:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:37:13 2026 by rpki-client