Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/1A982CC85A7C11E9A28B110DC4F9AE02.roa
File:                     1A982CC85A7C11E9A28B110DC4F9AE02.roa (raw, json)
Hash identifier:          p4U+fQNg+/V66C8aZ/HW+ICWyGJMsccnbek/XvJglE4=
Subject key identifier:   DC:80:4F:81:E9:85:55:70:90:22:71:B9:19:B9:7C:6C:33:1A:08:55
Certificate issuer:       /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial:       2781
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/1A982CC85A7C11E9A28B110DC4F9AE02.roa
Signing time:             Mon 28 Sep 2026 16:23:16 +0000
ROA not before:           Mon 28 Sep 2026 16:23:16 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     132032
IP address blocks:        103.5.24.0/22 maxlen: 22
                          103.5.24.0/24 maxlen: 24
                          103.5.25.0/24 maxlen: 24
                          103.5.26.0/24 maxlen: 24
                          103.5.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
                          rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 15:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10113 (0x2781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
        Validity
            Not Before: Sep 28 16:23:16 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aba9474-d8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:d1:a3:21:4a:f7:c8:8a:a2:52:6a:09:9c:
                    e4:6f:09:44:ec:22:70:6a:19:0b:a9:d7:ca:2f:11:
                    aa:4a:e2:37:da:dd:fe:0e:f7:b3:f9:76:61:20:97:
                    ae:2f:0c:8d:67:3f:a7:97:c6:fd:bd:15:de:0f:2a:
                    8c:74:39:e9:10:42:44:3a:13:1b:ce:72:a8:4e:a4:
                    4c:22:ed:47:47:f5:4e:a2:10:dd:b9:34:27:b6:4f:
                    a0:d2:dd:98:5b:22:4d:f1:3d:c9:cb:84:87:64:0b:
                    8c:d0:f2:62:d6:ab:e1:9c:2d:cb:08:3a:c4:7b:a7:
                    38:8a:cb:a9:53:ae:1c:d5:8a:78:09:97:ac:45:2a:
                    c9:4c:41:7e:49:be:b2:ca:5f:07:ec:a9:80:76:4e:
                    79:2d:e2:0a:68:b0:e0:8e:79:e3:1b:67:d8:6b:10:
                    4b:1c:9c:43:69:df:b8:97:fe:79:92:8e:29:2f:c9:
                    49:a4:8b:8b:e4:56:85:72:7a:fb:07:5e:76:04:ec:
                    47:aa:e3:78:47:92:c9:be:64:97:a1:f9:08:38:d0:
                    6a:fa:ac:f2:7b:7a:df:0c:d5:14:36:1d:95:39:44:
                    e7:c8:b8:b6:99:99:94:19:2c:78:93:01:ed:3f:a1:
                    16:a5:ad:a7:62:7b:b5:94:6b:a1:a3:ba:a6:29:18:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:80:4F:81:E9:85:55:70:90:22:71:B9:19:B9:7C:6C:33:1A:08:55
            X509v3 Authority Key Identifier:
                keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/1A982CC85A7C11E9A28B110DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:59:23:32:43:b3:db:98:03:23:b6:34:d1:91:7e:96:2d:b7:
         e9:e5:28:53:d7:9b:bd:32:68:6a:15:d7:1c:25:40:a3:78:86:
         f2:47:3d:54:3f:e5:90:15:07:1c:01:d0:ba:85:e3:c4:d4:17:
         41:4d:29:79:9d:40:53:8b:98:48:c6:0b:34:83:fc:af:9e:9e:
         b9:21:12:40:d4:4c:19:48:42:74:2a:cd:e3:86:e7:dd:0d:c5:
         2b:f1:bf:2f:9c:d7:e0:1c:00:c6:d8:c9:f7:40:14:e2:2f:1c:
         e6:00:66:79:af:b5:a1:63:a3:65:c0:3f:1a:7a:ca:17:e3:c0:
         e6:15:5e:af:03:ea:6b:a5:47:91:83:ed:fc:d6:4b:2c:21:f6:
         9f:e5:f7:26:93:5b:91:7e:f5:79:3c:8b:31:60:e2:2a:69:80:
         db:18:ae:27:1c:15:be:7b:4c:4d:b1:0d:33:0b:9f:db:53:d4:
         51:6d:cd:b4:b0:a6:7c:9d:c0:5d:c9:0a:44:11:42:0b:f2:bf:
         c7:6e:59:80:46:cf:9e:a1:ec:1d:57:c5:19:78:8e:02:89:93:
         eb:03:56:be:3b:a4:81:12:9e:07:64:86:d3:a4:66:89:46:91:
         ca:16:81:ff:6e:6a:f5:ab:a1:4f:c2:1b:9e:2b:a9:14:8d:7f:
         23:ff:a1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:58:27 2026 by rpki-client