Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa
File:                     9F88C3542ADF11F0B3006D40C4F9AE02.roa (raw, json)
Hash identifier:          RYrkOvBxjdYT+OO7AVA15ixT3FWzU9h0LKlaL4zckUk=
Subject key identifier:   B2:53:7A:47:A2:88:54:69:3F:31:7D:74:D1:4C:B7:11:09:54:4F:48
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       0471
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa
Signing time:             Thu 21 May 2026 00:31:22 +0000
ROA not before:           Thu 21 May 2026 00:31:22 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151983
IP address blocks:        103.172.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1137 (0x471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: May 21 00:31:22 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a0e525a-670b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:44:4e:e0:ab:d6:1f:69:b6:00:7f:b5:85:
                    3a:42:ef:1c:28:6f:b8:27:c1:0f:51:88:66:76:6e:
                    de:85:45:6c:70:ea:88:a3:a3:01:b2:e3:3e:57:c8:
                    72:15:65:14:5c:f9:5a:3e:34:23:f8:69:d4:2b:b6:
                    4f:5e:08:9a:1f:a9:a7:ea:21:20:dc:8c:3d:b2:17:
                    5c:7c:7a:53:da:e6:9a:ba:d8:37:e3:0c:96:83:fe:
                    3a:ef:50:d1:c7:9f:c0:44:e1:8e:a4:91:2a:b4:5b:
                    41:c1:0e:95:4f:d6:09:13:47:3f:31:90:03:d9:31:
                    7c:a8:14:6d:4f:20:b5:fc:ae:c1:67:d3:00:03:3d:
                    7f:0e:0a:74:66:30:02:cd:bd:8e:ec:1a:7a:25:9e:
                    8e:d4:17:97:2d:9b:f3:5e:a0:3a:58:0b:db:17:b3:
                    22:e3:90:45:17:d9:d3:d2:4f:6e:3f:cd:99:25:3d:
                    85:25:36:c3:4f:90:d0:4a:8b:b9:3a:ca:f4:67:1e:
                    ce:5d:49:9b:b5:ac:60:30:b0:6a:eb:3c:ba:3a:ed:
                    08:9c:b3:ad:32:90:1d:50:0b:00:87:db:4a:d4:3b:
                    69:5e:d3:97:32:f3:4a:4b:14:0e:f2:ea:01:2f:ae:
                    6f:5b:e5:10:70:0d:e6:58:b1:3a:ed:86:7b:10:f6:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:53:7A:47:A2:88:54:69:3F:31:7D:74:D1:4C:B7:11:09:54:4F:48
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:7e:a8:0f:ab:57:1b:12:57:c5:77:08:c8:b1:a6:e0:32:
         71:6a:e8:93:8f:06:67:7a:d4:9b:4e:39:d3:d7:cd:95:85:1c:
         63:63:33:01:d0:ef:74:26:b6:17:53:23:17:28:49:2d:91:c7:
         15:e8:e0:e0:ec:12:83:4a:31:db:02:8b:74:26:8c:ce:44:3c:
         66:d3:34:f2:37:73:c3:f6:cf:84:e5:d1:d3:8c:c6:a0:49:e5:
         71:39:36:48:5e:30:da:29:99:84:37:d8:b6:9b:5a:eb:98:74:
         19:f0:cc:e2:1d:48:3d:43:b1:88:59:28:98:8b:37:eb:f5:8d:
         16:91:31:38:5c:95:15:d0:8a:38:e9:53:b7:81:0d:be:67:ff:
         bd:d5:b5:00:f5:55:11:91:7b:70:95:79:6b:45:2f:f0:1d:92:
         15:39:dc:e2:e5:02:fa:3b:02:fb:7b:0c:08:3f:47:c5:3e:78:
         1d:61:05:a8:04:8b:18:56:e3:d1:48:9b:07:43:66:0c:f1:06:
         51:01:86:09:84:5d:01:b4:93:0e:ac:58:29:02:7c:38:98:9f:
         fe:6d:62:b6:34:51:08:db:b8:06:76:77:de:ff:79:89:7d:e1:
         92:ec:58:b8:0e:24:47:71:3b:47:47:cd:7d:ae:34:4d:ce:23:
         3c:41:9e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:04:35 2026 by rpki-client