Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa
File:                     2FE7B7E6500D11F0B18D7376C4F9AE02.roa (raw, json)
Hash identifier:          9sVvG8nqt07RYgdjskUj+nbNgt9KI1DJ9r2FPQyKhdI=
Subject key identifier:   04:2D:CD:58:6C:16:76:0D:21:D0:8B:4F:4F:05:5D:48:17:77:53:C6
Certificate issuer:       /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial:       01A5
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 05:55:17 +0000
ROA not before:           Thu 03 Sep 2026 05:55:17 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     8796
IP address blocks:        103.110.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
                          rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
        Validity
            Not Before: Sep  3 05:55:17 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a990bc5-9754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:4f:25:43:92:6a:33:66:f9:b1:c3:3b:ed:
                    2a:a3:83:44:f5:bd:15:4e:19:62:88:01:06:a3:57:
                    52:f4:79:ff:c8:09:a7:e9:43:86:e5:6c:c3:fb:f7:
                    d3:ca:d6:79:6b:46:9e:94:bf:2c:fd:7e:6b:d9:ac:
                    19:86:4c:b0:1c:55:9b:59:2a:9b:6f:92:eb:14:a4:
                    b0:ed:cc:8b:e5:c1:ec:d1:70:20:2a:1c:d3:4e:25:
                    5d:f3:1e:38:6c:93:8c:d5:26:02:c9:f6:93:a1:88:
                    21:5d:83:34:a9:48:50:39:60:1b:0d:82:0d:8f:c6:
                    b3:60:f5:9c:bd:3c:c8:dc:de:cb:36:0a:99:e4:a5:
                    06:bb:e7:4f:f7:20:11:3a:0c:2c:8f:2c:f9:e6:4c:
                    e1:69:42:73:3e:d5:f8:9f:63:2a:7f:ad:94:94:8c:
                    28:5f:c3:bf:a1:40:85:c3:82:7b:d2:fc:4e:bd:43:
                    61:73:d3:5e:95:22:17:85:96:4a:0c:65:6a:a2:80:
                    22:6a:fd:9c:0c:9f:d7:a0:f8:e6:62:6a:ad:61:6c:
                    ce:c4:13:3d:78:59:0f:b7:ef:12:4c:a1:27:a1:fa:
                    0b:d4:9f:04:a1:df:e3:d6:80:78:0b:ec:a0:8a:40:
                    06:76:0c:2e:04:6e:da:54:83:ae:46:7f:5a:95:63:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2D:CD:58:6C:16:76:0D:21:D0:8B:4F:4F:05:5D:48:17:77:53:C6
            X509v3 Authority Key Identifier:
                keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:71:11:a5:1e:0d:25:b9:92:ea:bc:c7:87:12:44:fd:ed:e0:
         92:76:54:58:1f:89:c0:1b:a8:2f:0a:f4:3c:86:bf:26:de:fd:
         4e:54:a6:c7:8a:1b:24:be:dd:e4:30:50:3c:fc:8b:bd:6b:a7:
         f7:61:2b:f8:f2:9b:ad:db:a8:b2:d0:d4:13:84:68:1e:31:0c:
         af:1b:9b:c2:84:e8:a8:b5:db:13:1a:df:c1:6e:68:8f:1d:61:
         04:54:2e:c5:19:ad:4b:37:c3:29:e8:64:37:01:8a:bf:10:e9:
         cd:17:4b:62:f5:dc:ed:53:23:13:cf:ea:5d:4f:bb:60:45:a8:
         90:b6:91:78:b5:2f:90:4b:40:9a:b1:3c:36:fe:ad:08:80:7b:
         8c:81:82:a8:72:45:dc:4f:2f:7f:a1:a4:19:58:1d:b3:91:d5:
         07:84:0b:a8:d4:b8:44:03:3a:a0:df:0d:a7:59:72:d9:93:c6:
         48:4f:a3:58:50:a3:58:fc:24:b5:31:78:ea:cf:56:44:96:4c:
         9b:54:c2:a5:4b:dd:64:1c:65:8f:1d:dd:2f:31:31:47:8c:59:
         52:3d:3e:1b:c2:ee:18:ba:11:bd:96:e8:76:16:e7:8a:30:bf:
         c9:be:04:df:02:2a:62:32:9d:d7:e3:68:9a:4e:8c:c6:16:70:
         1d:ee:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:28:16 2026 by rpki-client