Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/93345262B1A211EC9DDE9259C4F9AE02.roa
File:                     93345262B1A211EC9DDE9259C4F9AE02.roa (raw, json)
Hash identifier:          YvbIlHpJSLqnhQ9M9JYGF4/xFuub/miRfQPTf/Lr0fQ=
Subject key identifier:   2F:B4:F2:3C:D7:F3:06:BC:49:B9:FA:55:2B:68:60:8E:4F:E1:FD:F5
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6DD6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/93345262B1A211EC9DDE9259C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:25:10 +0000
ROA not before:           Fri 02 Oct 2026 15:25:10 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135964
IP address blocks:        103.82.204.0/23 maxlen: 24
                          103.136.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28118 (0x6dd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:25:10 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfccd6-b283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:10:0b:44:a0:19:57:09:af:ff:28:74:9e:
                    f9:d4:24:64:ed:c1:85:98:ea:0f:e1:0b:a5:20:e5:
                    7f:ed:f3:ed:ae:c1:08:9a:71:ef:ef:5e:59:57:a0:
                    63:5e:ab:8c:b6:30:a0:c8:c4:1c:54:9f:ea:33:56:
                    c5:30:41:94:86:c3:a6:34:a2:4d:9a:48:cc:e4:47:
                    4c:39:8e:24:4f:35:0b:80:30:5b:f2:ea:b7:07:68:
                    9a:e0:8c:2a:a1:c7:1f:df:06:92:8c:0f:0f:a8:ef:
                    ba:7f:5d:d7:a7:53:6f:d1:f9:14:bc:e2:7c:fb:fa:
                    e4:03:50:61:ef:c2:95:02:6c:6a:26:99:92:99:6d:
                    d4:60:15:41:c9:1b:d3:81:67:f2:e7:cd:01:61:a4:
                    2b:2c:2d:b9:36:26:f0:72:21:3c:e9:d6:91:91:1c:
                    b6:40:3b:f2:46:95:5b:a2:45:b2:5c:e3:20:a9:1e:
                    35:67:53:09:cf:83:42:ca:c0:72:d3:47:0a:14:34:
                    fc:7e:eb:ec:77:29:2a:79:b7:e4:55:9e:98:8b:68:
                    0b:d6:84:0a:d1:9c:e8:8e:6a:c2:fe:ca:35:ec:c3:
                    ac:e3:b9:25:d1:5d:5d:43:e0:5c:f5:27:6d:3a:ec:
                    9f:b6:34:bc:45:8b:5c:64:fd:12:0a:10:f4:99:be:
                    c6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B4:F2:3C:D7:F3:06:BC:49:B9:FA:55:2B:68:60:8E:4F:E1:FD:F5
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/93345262B1A211EC9DDE9259C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.204.0/23
                  103.136.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:68:fc:a9:9e:23:92:2e:ec:45:54:51:c1:8e:13:4f:61:5b:
         ee:66:10:81:2e:09:5c:a0:b5:35:60:a1:1a:d6:b2:ec:30:b0:
         69:bd:19:53:3b:c5:a1:c6:4d:8d:53:ae:7f:6d:e9:57:d4:06:
         c3:e1:9e:86:74:19:e8:ec:4d:c7:ec:cd:db:e7:cb:2d:11:71:
         95:fe:6d:38:ca:c0:9f:c8:16:ad:05:20:14:ae:bd:e4:08:da:
         ba:aa:b9:53:fa:36:79:da:f7:6b:34:81:13:e2:66:cf:8b:32:
         10:64:f9:9a:00:31:91:77:a5:1f:fe:c5:81:46:d7:75:b2:22:
         77:30:42:b5:02:71:19:00:55:64:49:99:df:92:9c:2f:be:97:
         88:35:d3:51:bb:f5:18:52:05:59:fa:97:06:2b:0e:ff:1c:e5:
         c5:5b:c4:46:81:db:80:34:56:58:02:c6:87:07:f6:63:2e:8a:
         5b:43:88:c7:35:f4:e6:d1:f3:61:97:59:c5:70:86:39:4a:31:
         fc:20:20:e7:8e:be:d7:98:03:35:42:4e:ed:d3:f9:7b:02:11:
         79:bc:4a:3e:fd:10:f8:52:d7:ec:27:63:bb:ab:c5:c4:28:60:
         d1:5b:2a:3c:ea:a6:56:28:19:cf:63:22:5a:6e:2c:23:92:24:
         7e:4b:8e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:53:27 2026 by rpki-client