Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/FB50E18695EA11F1B92F63745111F970.roa
File:                     FB50E18695EA11F1B92F63745111F970.roa (raw, json)
Hash identifier:          t3w9O4Dfu7AG8dbAGYPwX/t7iXEjVhcERJqD/yrmEzo=
Subject key identifier:   BB:86:85:D9:12:68:DA:54:8F:B8:A4:30:A7:99:3F:65:0F:20:87:49
Certificate issuer:       /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5
Certificate serial:       1C15
Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/FB50E18695EA11F1B92F63745111F970.roa
Signing time:             Wed 12 Aug 2026 01:13:10 +0000
ROA not before:           Wed 12 Aug 2026 01:13:10 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     45177
IP address blocks:        103.214.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl
                          rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7189 (0x1c15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5
        Validity
            Not Before: Aug 12 01:13:10 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a7bc8a5-0594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:e4:09:d8:c9:ea:c5:69:24:eb:ec:dc:42:
                    2c:ea:38:6f:1a:76:94:00:48:68:54:3e:df:69:46:
                    72:51:38:a9:6c:7a:90:70:a4:d9:bd:3f:83:a1:dc:
                    3a:c3:07:94:17:89:ee:3e:21:65:0e:bc:b9:e4:40:
                    da:b2:f3:fb:d1:29:fe:8b:74:1e:3d:e8:92:b0:1e:
                    df:ba:c8:8e:bf:a0:8b:60:bf:f6:27:de:b9:1d:9c:
                    2d:74:9f:08:02:da:45:6b:35:8a:fc:cf:b3:be:40:
                    ed:b0:cd:05:13:93:a7:a7:f9:24:82:83:9f:19:17:
                    ce:17:14:a9:3e:10:e9:fe:38:ef:95:11:15:18:97:
                    f5:90:fb:b8:c2:38:fa:f6:e1:62:ba:d0:26:c9:58:
                    03:65:42:0c:01:d6:77:50:77:68:44:10:1e:98:e8:
                    61:02:96:93:0e:28:89:8a:ab:e1:dc:ee:5c:fd:16:
                    95:26:a1:e3:a2:e1:6c:fe:d6:cb:f9:ad:c4:c6:5d:
                    4d:5a:4c:6c:68:25:3f:56:c5:ae:c4:43:d4:8f:74:
                    2e:de:31:f7:1a:62:cf:99:5b:d0:a5:89:23:b1:54:
                    96:bc:30:28:9d:5a:25:0c:66:24:db:68:a9:e8:78:
                    3f:40:0c:7a:58:03:f3:80:04:7a:8a:49:bf:5f:ce:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:86:85:D9:12:68:DA:54:8F:B8:A4:30:A7:99:3F:65:0F:20:87:49
            X509v3 Authority Key Identifier:
                keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/FB50E18695EA11F1B92F63745111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:a4:15:8c:63:c2:5d:db:14:be:e4:c4:fa:28:29:57:1d:11:
         72:02:e4:b1:90:20:1b:b5:ea:68:d9:5f:3d:d8:b6:33:27:f8:
         71:c4:af:9c:fb:df:8c:75:19:a9:f2:5b:ba:d3:c9:9e:42:f9:
         e6:07:c3:b7:1e:2f:64:ad:ba:68:b0:69:ac:a6:33:05:74:9f:
         6c:97:71:f0:b5:96:e5:de:a0:4d:7d:75:50:24:dc:b1:d7:bf:
         14:1c:06:ec:5f:2e:eb:b7:8a:eb:92:55:f4:1d:d9:45:5a:69:
         52:ea:27:be:09:53:81:30:6d:d2:06:d1:45:29:c6:f9:df:85:
         69:e6:5b:77:9e:55:18:84:ef:64:8c:91:5e:16:98:eb:14:ef:
         90:8b:80:80:dd:73:90:e3:84:da:d8:6e:f0:08:77:c8:a7:fe:
         f3:b8:5e:2b:f6:35:fd:59:41:d3:55:d5:64:a7:0b:b0:f7:95:
         1a:7f:8b:01:25:0b:0b:e3:2e:d7:90:3f:8d:f4:87:ad:04:2b:
         32:85:f6:de:26:01:68:2b:fe:42:9f:cd:aa:0a:fe:0d:10:22:
         71:12:ba:c3:37:73:54:56:f4:e7:35:17:36:19:04:62:c2:40:
         22:dd:57:7e:f4:aa:f9:a0:aa:37:2e:0e:81:31:58:dc:18:c1:
         25:a0:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:20:07 2026 by rpki-client