Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/FB2262620C3111EDBD0F7137C4F9AE02.roa
File:                     FB2262620C3111EDBD0F7137C4F9AE02.roa (raw, json)
Hash identifier:          8NkAlVTzOXQj4J/tJUqUO/9hBtezWGWkUzVhUJl8fYQ=
Subject key identifier:   91:35:2F:C8:C5:F8:6C:C8:6C:48:8E:4D:9B:29:7B:29:50:92:14:A0
Certificate issuer:       /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Certificate serial:       0347
Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/FB2262620C3111EDBD0F7137C4F9AE02.roa
Signing time:             Fri 19 Jun 2026 01:30:16 +0000
ROA not before:           Fri 19 Jun 2026 01:30:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     141222
IP address blocks:        103.151.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
                          rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839 (0x347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
        Validity
            Not Before: Jun 19 01:30:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a349ba8-1f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:c7:ad:b5:7f:b4:ec:5a:74:bb:96:a5:01:
                    39:79:46:be:af:df:25:1e:e9:2f:38:7f:94:81:38:
                    0c:29:70:9c:d6:a3:d0:d1:54:96:90:65:b3:8e:67:
                    58:81:96:61:08:22:b6:df:24:a5:b6:2a:e9:4f:23:
                    2f:0f:6b:e3:b3:24:4a:56:93:23:d4:e6:66:e0:ea:
                    1f:76:db:d4:60:ba:04:c1:1d:23:9a:0f:4a:d4:66:
                    b0:3f:f0:f0:30:2b:38:bf:5d:fb:69:91:9a:da:61:
                    06:67:04:90:c1:44:68:4b:48:b4:4e:fb:cb:a6:12:
                    37:7b:92:80:da:8e:87:97:c1:6d:ab:c1:31:27:46:
                    9c:00:3f:c0:5e:83:85:24:92:14:36:76:73:26:8a:
                    d5:77:8c:9a:5a:6c:f3:51:63:11:ba:96:88:14:92:
                    55:64:37:ca:51:2b:40:0d:3f:16:6a:87:75:b8:49:
                    5a:b0:31:0b:ee:e0:17:fa:6c:20:b8:8a:70:ae:39:
                    92:71:e6:a1:fd:7c:0b:0a:2b:84:c8:7c:a2:a9:08:
                    b0:5a:60:9f:85:77:31:bf:6d:92:82:31:72:5d:0f:
                    75:d9:a4:f9:02:0b:49:85:14:cf:de:65:bb:05:c8:
                    db:70:c0:69:cf:d5:10:c4:e5:ed:08:d2:d8:ff:88:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:35:2F:C8:C5:F8:6C:C8:6C:48:8E:4D:9B:29:7B:29:50:92:14:A0
            X509v3 Authority Key Identifier:
                keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/FB2262620C3111EDBD0F7137C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:74:bd:13:e4:ab:5f:e5:e1:02:3b:53:b8:f9:8e:7e:7f:2b:
         de:c7:0f:1f:26:0a:a7:73:f3:5b:ee:15:0e:41:e8:a0:a6:76:
         d1:e2:a4:85:e6:69:de:ba:21:1d:f5:c0:61:95:f6:70:be:9e:
         3f:71:5f:71:91:f6:19:e7:28:10:20:63:96:0b:d6:51:c6:9b:
         4a:92:37:96:f4:4c:b8:03:55:71:a0:86:05:de:bc:e8:97:d4:
         4b:d5:5f:69:4e:1a:a5:a2:44:38:7d:03:0f:e9:c9:48:3e:61:
         12:41:9b:95:44:81:35:d4:b0:7a:54:a6:22:85:a8:2e:f5:75:
         a9:46:82:25:61:8b:cd:fc:07:9a:43:8e:0d:32:14:15:3c:c1:
         8e:13:80:ee:37:48:34:18:d9:ef:de:7f:bf:9c:1e:1f:6c:98:
         88:14:9d:56:b9:04:6f:80:95:c7:74:dd:27:b3:ea:60:ac:48:
         13:e6:8b:ff:a6:0d:10:ae:63:ac:78:e5:cf:7b:98:70:57:2a:
         3c:1d:dd:24:a1:65:ec:3a:c7:0b:37:11:f0:41:91:30:49:47:
         24:2d:06:0e:a7:9d:66:2e:0a:1e:92:05:8d:23:00:0e:c5:1a:
         70:45:4c:8c:47:5a:57:de:f6:08:ca:c3:d2:91:0e:97:1c:44:
         7d:f3:86:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:35 2026 by rpki-client