Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa
File:                     FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (raw, json)
Hash identifier:          H6zmNj7R5OIy7VYT3Pr6iuA/7Vm6RdyVIJ8LHoqjAPk=
Subject key identifier:   C7:BD:29:A7:0D:0B:B9:F6:A9:7C:CC:86:BC:F0:D9:10:F0:22:4D:17
Certificate issuer:       /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
Certificate serial:       0A47
Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa
Signing time:             Sun 16 Aug 2026 20:39:45 +0000
ROA not before:           Sun 16 Aug 2026 20:39:45 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     139053
IP address blocks:        103.151.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2631 (0xa47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
        Validity
            Not Before: Aug 16 20:39:45 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a822011-592c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:d3:a6:6c:fc:73:87:70:c1:11:b6:96:3d:
                    5f:eb:d2:e3:7a:d2:ac:2f:f6:31:9e:1a:79:21:75:
                    5e:ae:69:d6:58:71:74:65:27:4b:00:bc:3c:ad:17:
                    3b:98:74:60:d9:36:6f:1a:b3:f5:f5:a3:a5:56:19:
                    70:c0:6a:33:7d:d0:f0:2d:0d:b3:69:2c:28:c5:dc:
                    9e:d0:39:72:42:a4:d7:42:d7:ee:75:0a:d0:bc:76:
                    54:74:e2:3f:ef:4f:59:cb:79:13:c5:29:40:93:7d:
                    bf:7f:9f:50:e5:12:cd:90:18:88:85:34:a6:3c:12:
                    7e:98:ed:8c:db:8a:c4:31:66:3e:a5:92:b1:a4:78:
                    7b:47:31:3a:2e:a8:39:8b:46:fb:2c:c0:8f:b5:b6:
                    ec:e8:9b:57:67:45:98:2b:1b:af:1e:56:41:c7:da:
                    1e:4f:bf:b6:50:4e:2f:10:0c:7c:f1:0d:9f:83:51:
                    86:a2:ac:43:fc:9a:b3:96:16:ad:b6:9d:10:43:bb:
                    20:27:a7:d2:fc:7c:71:e9:f3:01:ce:9c:c7:58:1b:
                    3c:17:f1:f4:f4:53:cf:b1:f9:56:a4:92:95:64:6f:
                    a5:05:2c:9c:4c:ce:a2:92:3a:84:9b:b7:c2:4c:29:
                    db:d4:28:7b:d4:42:61:cb:8a:ad:3f:ce:44:15:be:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BD:29:A7:0D:0B:B9:F6:A9:7C:CC:86:BC:F0:D9:10:F0:22:4D:17
            X509v3 Authority Key Identifier:
                keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:0e:02:1f:73:22:23:3e:02:21:cb:64:29:aa:a5:86:50:
         ab:4a:94:9c:2b:56:7b:44:ba:6b:fb:7b:49:ab:28:d4:e3:44:
         53:de:47:ca:8c:4c:82:dd:74:8e:7c:15:e4:6c:b5:6a:37:25:
         c9:2c:e6:c2:3c:79:50:73:92:4f:9b:cf:79:66:e8:e5:14:6a:
         fc:9c:9b:4c:8e:38:47:e4:90:61:27:46:a2:26:57:dd:a2:a1:
         b9:93:ce:c2:fe:ef:82:f4:b5:a0:4b:d3:a1:cc:09:ec:a3:18:
         fb:32:81:47:6f:fd:39:e0:4b:56:07:15:e7:57:c9:32:1d:85:
         bc:6c:91:01:7a:b4:20:5e:78:f2:15:5f:03:42:e5:ae:42:d5:
         1d:5f:54:5a:30:1e:db:b4:12:a4:06:9d:36:ff:86:f7:e5:58:
         36:13:a6:f8:8c:72:f6:4c:5f:de:d3:bc:75:c5:aa:f3:8d:11:
         fd:8b:f0:fb:88:8b:2c:e0:f4:f0:19:46:da:84:a3:4f:5a:44:
         c6:8a:5a:eb:91:03:ca:42:da:36:26:e0:9f:3e:a3:3b:ab:31:
         c5:73:06:94:0e:d4:4b:d4:9e:9f:0c:e1:bd:88:37:bc:2e:e9:
         b4:b5:c5:b9:47:65:52:46:91:a5:ea:17:0e:47:1f:dd:f7:62:
         1c:08:bb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:27:36 2026 by rpki-client