Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31DE4D9C1D0E11EDA9995986C4F9AE02.roa
File:                     31DE4D9C1D0E11EDA9995986C4F9AE02.roa (raw, json)
Hash identifier:          rEMEaFSkUPyNJGeFdpB243G604CFHXeQzDUNQLc8UU0=
Subject key identifier:   2D:08:C2:C8:A8:64:52:CC:0A:11:72:0A:77:FC:41:3B:8B:73:6A:AD
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6D73
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31DE4D9C1D0E11EDA9995986C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:21:51 +0000
ROA not before:           Fri 02 Oct 2026 15:21:51 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     131352
IP address blocks:        103.28.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 14:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28019 (0x6d73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:21:51 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcc0f-c936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:3c:3f:84:55:87:f6:ba:40:3b:38:04:e5:
                    0c:b3:98:11:61:a7:21:0f:de:60:a3:9f:21:05:94:
                    0b:69:6c:19:c1:9a:61:bb:3a:aa:82:1d:b1:68:1f:
                    61:3d:f5:ed:4b:20:d3:3e:19:52:84:4c:66:d9:6c:
                    47:38:fb:04:95:14:60:43:4c:48:35:6e:39:79:f6:
                    ea:a5:b1:0f:92:27:49:1f:67:77:73:84:4b:29:57:
                    9b:d8:5a:84:91:42:23:e8:5a:d0:8b:3f:f1:3b:0d:
                    1a:59:60:22:94:01:de:c2:af:2c:b4:99:d5:28:1c:
                    dc:09:43:d7:7c:04:92:4f:c6:f9:64:e2:ea:bb:ea:
                    3d:c2:f6:57:2f:2b:c0:fc:32:22:7d:7c:97:9d:f2:
                    8b:eb:81:31:a2:fc:b3:9c:d7:00:9b:35:fa:a4:c1:
                    52:15:85:01:83:8c:4d:0b:92:6b:30:e7:b9:83:25:
                    e6:fb:63:4a:d0:f5:c9:b3:37:a2:17:10:81:4e:9f:
                    38:48:0b:00:27:3f:c5:f3:56:fe:14:18:9b:8d:5f:
                    22:9f:a8:5e:cc:cb:60:26:53:86:89:56:ae:e5:91:
                    92:22:6a:12:7e:f6:08:49:04:68:dd:64:7f:8a:be:
                    c7:ae:a6:d5:d9:3f:44:ff:2a:48:15:39:26:05:ad:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:08:C2:C8:A8:64:52:CC:0A:11:72:0A:77:FC:41:3B:8B:73:6A:AD
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31DE4D9C1D0E11EDA9995986C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:c8:45:a0:34:f9:3e:13:e6:4a:12:96:d1:6c:fc:5b:92:52:
         c7:2c:0f:b0:f4:0b:dc:d8:86:94:b9:84:f3:5d:21:b7:08:a5:
         19:76:cc:44:d2:3a:87:07:bb:b6:37:d8:ae:58:dd:b4:f5:ae:
         45:67:7b:5e:39:fa:b6:11:49:a5:5c:45:ec:83:ae:f6:a9:b5:
         62:65:2e:27:a6:32:62:27:b6:3c:dd:66:3c:c9:a7:66:a1:bb:
         2f:0b:38:93:19:c3:f1:81:df:7e:50:a5:c3:38:81:7c:f4:dc:
         10:c5:d3:8a:2e:e8:1b:1e:39:7d:a2:11:ed:aa:b6:4a:1b:28:
         8a:15:e7:86:2d:1e:e5:74:3c:d8:ba:bd:2d:ef:f7:2b:ca:34:
         88:cd:9a:18:d3:36:5d:1e:c6:57:75:e9:b0:42:6f:40:81:ee:
         27:fe:33:29:ce:63:82:2f:8b:ed:58:1d:2e:ac:ff:bb:2f:f1:
         e5:dd:99:e0:a0:17:19:d9:6e:dc:11:a1:e7:79:be:63:96:ac:
         3f:e5:7e:7f:79:78:52:a0:b7:56:f2:a0:e0:86:49:51:d5:3e:
         e4:d1:18:b6:d7:b9:94:cd:87:2b:92:30:b4:88:1f:fd:cf:b3:
         44:f3:e3:87:9e:2b:fb:94:28:3f:30:b0:44:39:d7:be:83:68:
         75:87:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:14:07 2026 by rpki-client