Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/90D6EB20DF5811EE9A25765FC4F9AE02.roa
File:                     90D6EB20DF5811EE9A25765FC4F9AE02.roa (raw, json)
Hash identifier:          nboB1iKEUdxAKGWNie2WdI32i6i+wPkhG8jDXzQMhno=
Subject key identifier:   C7:8C:5F:CE:EA:D2:57:2B:58:EB:53:49:93:D2:2A:B8:5C:F8:FA:90
Certificate issuer:       /CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
Certificate serial:       018C
Authority key identifier: 5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/90D6EB20DF5811EE9A25765FC4F9AE02.roa
Signing time:             Sun 05 Apr 2026 04:37:39 +0000
ROA not before:           Sun 05 Apr 2026 04:37:39 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     134066
IP address blocks:        103.50.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158322, serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6
        Validity
            Not Before: Apr  5 04:37:39 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d1e713-b3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:a1:51:3a:fe:65:da:84:f0:9d:b5:69:35:
                    84:20:0f:7f:c0:ac:f6:ad:4f:6b:c8:56:93:16:c1:
                    ab:29:99:89:66:95:90:33:35:a6:d5:9a:90:ce:0e:
                    2e:6a:4f:aa:96:e2:88:61:79:89:59:a9:23:39:a3:
                    b1:13:db:f8:1a:be:33:dc:19:10:59:b9:df:6d:75:
                    d2:6e:40:75:54:2c:11:ea:76:c8:d3:3e:0a:34:b8:
                    9d:43:25:b7:9a:d8:02:7b:36:d7:6e:62:9b:75:4f:
                    6d:cf:4f:c9:95:29:ea:89:a1:f2:35:9e:11:ed:db:
                    ad:b4:3a:ce:f5:12:03:24:29:95:cd:04:68:3f:52:
                    74:09:55:fb:cb:64:91:63:e9:17:ae:e6:31:84:4a:
                    8b:66:d2:ac:11:e8:b0:4d:ad:ea:5d:51:f0:d3:c2:
                    15:ca:95:45:6b:cc:b3:65:38:6d:ab:40:53:29:a8:
                    52:a1:0b:8a:40:8c:a9:b6:3d:95:c0:54:d7:2a:7c:
                    56:9e:91:b5:e5:15:df:f7:af:73:86:e2:51:51:bc:
                    ae:2f:8f:ef:8d:5a:43:e1:02:4b:08:7d:63:9b:4e:
                    ca:c4:e1:90:4c:ce:63:8c:5f:b7:75:50:53:0f:91:
                    9f:b3:e9:c8:2f:fe:1c:b9:e5:f0:b2:c8:dc:19:7c:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:5F:CE:EA:D2:57:2B:58:EB:53:49:93:D2:2A:B8:5C:F8:FA:90
            X509v3 Authority Key Identifier:
                keyid:5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/90D6EB20DF5811EE9A25765FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:5b:bb:58:db:7a:49:21:89:c3:15:7a:b8:3f:c4:e7:eb:a8:
         b1:d5:da:17:93:44:d4:3d:82:69:fe:85:d0:0b:de:6e:c2:7c:
         3c:e7:65:d2:b2:02:7a:cf:05:7e:2d:51:f5:e0:2e:bb:c6:67:
         37:c0:f9:29:0e:bb:c7:23:ff:1f:94:d3:cc:5c:28:70:05:c7:
         03:ec:71:18:12:27:7e:8f:40:92:88:4d:14:78:b6:df:31:fa:
         d1:3c:c7:59:e2:2f:bd:a4:37:28:72:0f:3f:9f:66:04:a7:16:
         e0:e1:1e:0b:4f:87:49:2c:32:cf:32:9a:89:ad:f4:e4:d1:38:
         40:b6:1a:16:81:00:2d:28:ac:ad:cf:2f:8e:fa:4c:6f:36:9c:
         4e:6b:ee:38:53:08:0b:53:71:1a:44:4d:63:cf:e9:14:e9:1f:
         12:69:ae:1a:f8:f3:7d:c1:13:9e:4f:71:fb:5c:65:b6:e0:4a:
         8c:15:67:5f:41:9e:4b:41:38:65:f7:b0:a6:83:18:89:99:cf:
         f2:c8:a4:1d:07:c0:b2:ef:19:a6:16:cf:64:69:a8:7c:ee:90:
         00:cf:e6:d5:72:3e:41:06:82:18:90:cf:5b:51:a0:97:33:2f:
         97:c2:6e:8b:87:17:1d:3b:48:6c:27:52:db:cc:6e:21:26:6d:
         47:d3:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:08:33 2026 by rpki-client