Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/FA414880107B11F09A6AF277C4F9AE02.roa
File:                     FA414880107B11F09A6AF277C4F9AE02.roa (raw, json)
Hash identifier:          KqZ4aUAiDjv9GOdu2qDIrn7C8Nz0VKQWyQagIsx7sd8=
Subject key identifier:   30:F3:13:24:05:58:B2:73:D7:96:7B:CF:D4:6F:9F:72:1B:EA:15:23
Certificate issuer:       /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Certificate serial:       01C4
Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/FA414880107B11F09A6AF277C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 06:55:01 +0000
ROA not before:           Mon 03 Aug 2026 06:55:01 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     149430
IP address blocks:        43.255.53.0/24 maxlen: 24
                          103.129.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
        Validity
            Not Before: Aug  3 06:55:01 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a703b45-a70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:b0:e5:78:4c:0b:07:18:48:36:39:18:d5:
                    bb:15:56:bd:c5:25:7b:1d:9e:0e:26:19:90:89:1a:
                    84:b3:2a:9e:28:85:43:5f:9f:7c:37:07:c8:af:8a:
                    db:30:0c:92:b7:0f:52:da:7d:54:33:60:38:79:b4:
                    c1:1c:8c:c6:f5:7c:61:67:7c:23:db:51:24:42:9a:
                    0c:32:03:7e:c2:50:ff:a8:05:64:87:08:ca:7d:b1:
                    f5:6c:aa:b5:0f:57:be:61:eb:e6:0c:f4:ff:cc:71:
                    14:a2:0e:2a:be:56:7d:ef:c3:79:c8:b7:c0:f8:7d:
                    11:8c:5e:79:8f:df:89:d4:bd:81:f3:75:b6:5f:4b:
                    85:63:a1:03:35:c4:7f:eb:84:e6:92:7c:d8:bc:38:
                    51:4d:08:e9:4f:ce:cc:c0:a9:8f:8f:0c:ec:b9:37:
                    8d:7c:63:67:14:67:b7:9c:62:ac:7f:ce:57:38:d8:
                    e4:b3:1f:83:86:9b:02:16:8c:c3:9a:da:9e:58:d3:
                    c2:bc:3f:2d:4c:f2:53:a2:6b:89:68:63:da:67:dd:
                    b4:e8:05:cb:1c:b5:de:62:f2:e0:06:25:fb:c6:59:
                    85:1e:74:ec:e4:da:09:c0:24:3b:11:38:cc:b4:a2:
                    e9:75:04:54:54:21:16:66:ec:17:c1:c7:92:52:7b:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F3:13:24:05:58:B2:73:D7:96:7B:CF:D4:6F:9F:72:1B:EA:15:23
            X509v3 Authority Key Identifier:
                keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/FA414880107B11F09A6AF277C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.53.0/24
                  103.129.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:37:27:4c:ac:4a:49:b5:a9:0f:41:dc:a1:51:26:fb:7a:c2:
         99:35:37:cb:4f:a9:c2:d0:78:f4:f9:f8:6e:e6:36:f0:b2:ea:
         e8:f3:0b:7c:09:5b:8f:90:f8:7e:ec:06:3b:e2:1e:88:aa:d3:
         dc:70:f2:70:67:85:2d:03:51:6d:aa:05:88:bf:3b:10:27:a5:
         00:0e:17:dd:f8:95:f5:50:4c:6d:0d:96:8c:84:0d:76:91:bc:
         6e:80:9c:87:c1:bb:49:1d:d1:af:c7:8d:ae:3d:76:90:5b:7f:
         09:48:97:02:17:84:62:5e:96:81:27:bd:bf:53:b1:90:ef:95:
         30:37:13:ff:c9:1e:07:30:37:a1:66:5f:09:39:a7:89:90:f0:
         bf:75:f9:51:23:31:2b:69:ec:ae:6d:dd:b0:1b:8d:99:d3:90:
         5d:9f:14:b8:e6:ee:2c:9c:d0:ed:fd:3f:e6:a3:30:1d:74:59:
         3e:08:87:41:93:e2:c6:72:59:14:78:39:33:d2:5c:1f:aa:83:
         2a:5f:d2:a3:69:f1:8b:8a:ab:5e:a3:4f:b0:7e:23:08:4d:89:
         42:c2:f3:cd:37:d4:9e:65:12:71:2a:2c:32:80:17:32:72:f4:
         38:45:73:69:19:d2:01:32:23:b7:4a:2a:cb:e0:fe:05:bf:26:
         8b:19:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:44:02 2026 by rpki-client