Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/F7AA5B1CA1DA11EF86B88981C4F9AE02.roa
File:                     F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (raw, json)
Hash identifier:          INQJZ4r52q/PpXkNpGXLHqeyO+8SC5UkyjWGS7Cmkww=
Subject key identifier:   AA:A6:B3:A5:25:88:E4:36:33:3E:B4:32:88:5C:B3:2D:CF:9C:69:8D
Certificate issuer:       /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4
Certificate serial:       0124
Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/F7AA5B1CA1DA11EF86B88981C4F9AE02.roa
Signing time:             Sat 23 May 2026 06:38:44 +0000
ROA not before:           Sat 23 May 2026 06:38:44 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132294
IP address blocks:        103.166.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4
        Validity
            Not Before: May 23 06:38:44 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a114b74-9f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:d0:9e:a8:1f:4d:8f:ad:55:c2:a4:6c:2a:
                    89:6b:6a:35:f3:f6:19:36:e2:f0:3e:26:63:88:aa:
                    6b:74:6c:48:e8:5d:a9:c2:98:95:0a:45:96:92:19:
                    77:7a:6c:25:99:5a:70:c8:8b:d2:1f:1f:ca:ba:d4:
                    eb:37:47:c4:05:3f:db:1d:ea:11:eb:a7:27:31:f4:
                    f0:b3:aa:a9:c4:c5:f6:af:8c:ef:f4:a0:e6:bc:e4:
                    89:ff:16:70:0b:7e:3d:c9:69:5f:ef:86:f6:71:d4:
                    e2:00:74:df:be:71:f7:74:6f:8a:7e:77:27:d1:59:
                    51:7e:de:50:79:0f:87:ee:0a:63:83:d8:20:09:42:
                    83:fb:39:3d:8b:cf:c0:c6:b9:88:ec:fd:d0:2a:13:
                    1a:48:f4:39:2e:e7:8e:f6:a7:41:70:a8:06:ff:da:
                    d2:dd:56:a2:8a:72:29:3c:ec:a3:97:5d:5f:41:13:
                    03:88:4f:12:be:20:be:58:f4:35:d3:2f:e1:78:f2:
                    ba:6d:87:1c:b2:ea:74:52:f1:e1:56:73:1e:01:91:
                    f4:46:b8:43:30:4d:79:29:1a:5f:d2:00:dd:64:92:
                    48:a2:a9:2f:af:86:b5:18:35:1a:32:c6:de:33:5d:
                    3d:a8:fd:fe:58:8f:82:51:e3:57:3f:ee:a9:3a:a5:
                    c7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:B3:A5:25:88:E4:36:33:3E:B4:32:88:5C:B3:2D:CF:9C:69:8D
            X509v3 Authority Key Identifier:
                keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/F7AA5B1CA1DA11EF86B88981C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:03:fe:10:80:b2:d3:f0:e7:a9:ff:97:2d:c0:22:80:69:c9:
         8a:0d:bf:ce:f3:50:3b:bd:f7:63:dc:f5:82:74:1c:c7:75:00:
         7a:aa:29:e1:6c:68:df:e2:09:56:fb:46:23:01:a1:08:f6:2c:
         e9:83:fc:a0:c3:fa:a7:0a:ed:e6:e3:56:cb:4c:a9:89:97:4d:
         27:ba:24:1b:05:16:58:3a:b7:63:0d:6f:09:05:0c:f8:ad:0b:
         bf:a3:53:6d:7e:7f:eb:26:bf:93:46:7d:15:15:3e:bc:77:9f:
         cf:1c:b2:4e:04:73:5f:6f:2d:71:3a:13:51:6b:5f:92:2c:02:
         3a:37:45:8b:ea:ab:3c:45:54:9c:99:83:fc:3d:9f:b2:bd:0f:
         f0:7e:ab:a1:37:34:15:ee:c8:d7:e0:d9:01:47:29:8f:80:b0:
         77:7a:ec:e6:23:1f:a2:50:c5:95:9f:ac:96:11:86:0c:61:80:
         a6:6a:e5:8e:79:9d:22:d5:11:5b:b1:58:3c:c2:3f:82:84:00:
         cf:48:5b:9a:1d:36:7f:65:0b:af:94:a8:c5:db:3e:45:2b:db:
         eb:e0:d8:61:83:ff:8b:55:2b:21:b9:3b:fc:bb:bc:c8:3b:fd:
         c1:ba:ce:1c:ea:c0:5f:07:8a:44:83:1c:93:07:3f:c7:95:ab:
         6f:32:9f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:55 2026 by rpki-client