Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa
File:                     201C5008FD1211F08F3BD92E3C6F56BC.roa (raw, json)
Hash identifier:          UJWn6oeDbZpCO92u/tshP55U8eL77pAzCI+o9DvuOH0=
Subject key identifier:   DF:23:60:BA:2E:B4:B3:9A:93:91:C3:A6:C1:88:FD:E4:C6:68:D5:B7
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       0470
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa
Signing time:             Thu 21 May 2026 00:31:20 +0000
ROA not before:           Thu 21 May 2026 00:31:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150108
IP address blocks:        103.172.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: May 21 00:31:20 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a0e5258-8d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:98:40:56:8e:2c:e4:91:af:a2:74:d3:e4:
                    9a:66:96:9c:f9:de:36:e1:c1:21:ae:ed:e8:f0:66:
                    45:8b:33:8f:cd:bf:05:2e:96:cf:bf:1c:c4:c6:91:
                    c8:4f:df:a6:16:c1:8d:3f:9d:1a:0a:50:d1:d5:39:
                    ae:f7:a4:0c:08:8e:29:5f:5b:27:97:3e:24:20:c2:
                    b2:b6:3c:ce:ac:5c:a6:e9:bb:e0:2b:cb:c6:7f:43:
                    03:41:85:e3:a8:bf:89:af:4e:09:fc:aa:8e:f8:bf:
                    2c:b0:b2:4b:83:be:76:88:8e:49:62:ce:06:58:b0:
                    24:e5:a6:4b:ef:9f:a1:9c:ee:b0:fc:84:aa:3c:b5:
                    49:4b:5b:60:07:5d:54:ec:eb:a5:82:76:57:79:00:
                    e7:fb:80:15:86:2f:dc:55:fc:fd:1a:72:f3:78:b6:
                    1d:79:2e:70:4f:f1:d5:ac:e7:b5:51:02:79:c8:f5:
                    cc:1a:68:d7:9e:c0:2e:65:e4:7f:07:fc:3c:7c:ba:
                    5c:f7:b5:00:6c:a8:c5:9f:5d:15:19:cf:b7:db:fb:
                    59:27:57:89:c2:7b:68:f2:95:9f:25:ce:06:1a:e0:
                    17:0b:9c:b1:1d:05:99:11:d6:b4:57:06:b5:9c:42:
                    6b:e7:c0:5e:dc:eb:4d:a7:4e:96:ba:e6:fe:a9:d1:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:23:60:BA:2E:B4:B3:9A:93:91:C3:A6:C1:88:FD:E4:C6:68:D5:B7
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:9d:dd:ff:45:6d:f2:9d:f4:cf:5a:24:e3:1d:52:6d:e0:9d:
         76:c8:9c:32:21:bb:5b:1e:6c:f7:ab:e5:f7:fb:4f:29:6a:66:
         3d:0a:90:5a:38:c1:45:7a:4b:3e:3e:89:b6:74:93:bb:b8:59:
         a0:ce:f2:b9:aa:77:eb:4b:bd:e9:4b:d8:18:86:8a:85:fe:59:
         09:a8:62:a5:98:1a:f9:4a:c3:5a:2f:90:96:0a:ce:cc:80:79:
         a7:50:8e:61:9c:bf:76:9f:b2:2f:dc:bc:ca:cb:e5:6f:fd:4c:
         44:45:f7:be:ca:6c:5a:16:75:8e:d2:d8:f0:d4:d5:c5:2d:be:
         0f:2b:bf:94:9e:02:9a:1a:28:48:a7:2f:0f:5a:3f:90:45:41:
         37:23:e3:d6:84:12:ac:9d:83:6b:fc:26:51:d8:67:b3:de:cb:
         bd:0e:54:1b:3b:70:71:39:b2:8f:40:a7:41:5c:9f:10:66:7b:
         5e:7e:4d:8e:c6:0e:9a:a6:43:13:15:58:4c:0b:93:e2:30:47:
         5a:6f:58:cd:d4:dd:37:85:e8:8b:d9:44:8b:8d:48:fa:15:bc:
         d4:ce:d1:53:7a:2e:02:64:8f:b6:d9:6b:ad:db:14:fb:e1:8c:
         25:82:1a:6c:48:8a:63:96:c8:84:da:47:ce:d2:90:71:87:6a:
         ec:9b:d8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:09:37 2026 by rpki-client