Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa
File:                     FAB56D7E154711F1A1427AB42F3D8C67.roa (raw, json)
Hash identifier:          WCKRxNtVRCoib0BHwRwyRhStDVwj+k0b7CLKol1RkB0=
Subject key identifier:   99:7D:97:1E:B6:92:A2:A7:3A:D4:0D:5D:C7:5E:5C:C4:A7:07:BA:B7
Certificate issuer:       /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Certificate serial:       0579
Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa
Signing time:             Sun 01 Mar 2026 08:23:52 +0000
ROA not before:           Sun 01 Mar 2026 08:23:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139716
IP address blocks:        103.172.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
                          rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
        Validity
            Not Before: Mar  1 08:23:52 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3f798-340b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:71:d9:b3:d6:e8:e3:a1:fd:84:00:03:f5:
                    5b:f6:c1:86:2c:17:d4:16:ea:25:cf:bf:32:56:1c:
                    d7:03:6c:ff:20:94:f0:83:ab:c7:de:c4:85:d1:10:
                    d9:bc:d4:b5:2a:89:fa:23:a1:a7:2b:e2:f9:4a:b8:
                    68:e1:0a:49:5d:49:f2:bc:7a:4d:77:7c:d7:02:9c:
                    c7:6a:33:eb:11:e8:11:b4:6e:45:02:be:da:e7:83:
                    07:c3:5d:85:8a:7f:55:d7:04:a8:82:dd:4a:fd:ce:
                    e1:05:ad:3c:c0:ae:e2:9a:90:b6:66:ad:ea:9c:3c:
                    d3:7c:fb:5a:d9:1d:31:2f:1e:9a:45:86:a8:e5:d5:
                    d8:94:1f:a6:69:ba:a9:fd:3e:3c:aa:b6:66:7c:ea:
                    5f:a1:1b:30:e7:a9:0d:46:85:3c:0a:68:98:fa:da:
                    3b:88:a5:15:93:48:c4:0d:16:7d:c2:5f:43:50:8c:
                    08:9a:43:89:ba:65:3a:03:29:4d:00:bd:49:4d:6f:
                    78:a1:ac:7f:09:5b:36:0d:11:cc:8a:09:e8:4a:c1:
                    b2:86:2c:ed:2c:18:7f:5b:f2:fe:e4:f1:86:0d:ee:
                    10:42:84:18:23:71:2a:b7:b8:a5:70:7f:19:dd:98:
                    72:23:78:eb:80:48:ac:ae:50:b7:4d:ab:f8:97:1d:
                    60:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7D:97:1E:B6:92:A2:A7:3A:D4:0D:5D:C7:5E:5C:C4:A7:07:BA:B7
            X509v3 Authority Key Identifier:
                keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:d7:e4:46:c2:8b:06:81:ef:b2:7d:63:8e:d7:25:0e:a4:1a:
         ca:1a:3a:dd:5b:d3:6a:6c:e6:79:e1:6c:bd:56:64:9c:40:f3:
         60:d7:75:57:7f:4c:63:30:91:d9:94:1c:78:70:d2:61:c4:e6:
         51:73:a4:1d:4e:69:82:57:4c:5d:25:f1:11:51:2e:7b:3d:d2:
         03:22:fd:f7:3b:2e:30:8e:63:c4:3d:0e:f5:6e:63:16:13:35:
         03:9f:69:6e:83:e4:98:38:b5:d4:96:39:48:c8:82:ac:d1:54:
         4c:23:be:55:31:57:2a:cf:a6:fd:2c:83:a8:eb:74:33:9c:56:
         0c:33:03:cf:c7:dc:85:df:65:f4:a7:75:15:8b:7b:e1:7f:32:
         8e:62:11:3b:6a:1c:61:91:bb:fc:e8:c1:75:33:d8:0d:0d:9c:
         54:ff:0f:bd:c6:c1:c4:98:e6:b6:a7:27:06:a6:c4:00:ef:5c:
         cf:c4:ae:d5:de:ab:32:04:0e:39:78:d1:1b:de:58:eb:11:a0:
         22:bf:2c:2b:7c:17:92:42:84:91:13:0a:1d:d5:af:2b:25:c9:
         f5:a2:13:d7:60:b8:27:04:eb:de:81:3b:ae:b6:e7:94:55:f5:
         17:13:3c:ed:f1:e0:cd:9f:78:be:08:64:58:ba:07:7b:9a:ca:
         d5:5c:c6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:09 2026 by rpki-client