Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa
File:                     F5D6B6B8810811ED9EA03683C4F9AE02.roa (raw, json)
Hash identifier:          jXby300bLqk6OmsYVLmwjByJkTyNtDhvbMpxkEk+1XE=
Subject key identifier:   72:98:08:82:8D:4C:72:C9:9F:3A:FE:BA:AF:95:6F:5D:ED:71:76:87
Certificate issuer:       /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial:       02B4
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 02:51:03 +0000
ROA not before:           Mon 03 Aug 2026 02:51:03 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.190.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
                          rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
        Validity
            Not Before: Aug  3 02:51:03 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a700217-395d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:e1:e6:b9:d6:12:5e:cf:9d:f7:2e:26:76:
                    f9:ad:70:71:7f:77:97:07:a2:e5:46:b4:6a:7d:ea:
                    48:9e:0b:7a:89:70:2d:9a:04:99:94:15:e8:d0:d7:
                    cd:e8:2e:20:a8:0c:27:4f:33:fc:7d:d2:ca:28:08:
                    36:da:46:88:3c:d9:3f:c4:11:ce:5d:d1:40:1d:73:
                    ff:c3:e9:ad:33:0a:f3:fd:52:e0:43:e6:e6:0d:11:
                    ea:2a:3c:98:9b:80:f8:6a:9a:3c:a8:58:bc:07:07:
                    f6:8d:b3:b9:29:81:c7:e9:00:09:8b:19:24:26:eb:
                    70:ee:b0:f0:9a:25:4d:e9:df:84:f6:8b:67:ee:d6:
                    b4:49:a7:14:28:62:68:b5:50:ba:aa:4b:3b:31:2c:
                    b2:7f:1e:2f:08:a8:d5:12:7f:96:ef:fb:8e:62:c4:
                    cd:3c:97:1c:d2:49:f3:2b:1d:85:a4:dc:88:e8:fe:
                    40:2e:a6:37:5e:a6:0c:b5:e0:3e:07:ef:ca:45:8c:
                    e7:d2:03:fe:40:e9:ae:c7:6a:17:1e:ce:87:30:8e:
                    65:71:b1:f0:96:0c:25:90:c6:35:1a:47:55:fb:f5:
                    cc:02:b8:9c:fd:e6:37:25:46:e1:05:38:bf:26:20:
                    ff:23:dd:ea:99:94:a8:83:e9:0d:4d:4f:fa:ec:af:
                    d0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:98:08:82:8D:4C:72:C9:9F:3A:FE:BA:AF:95:6F:5D:ED:71:76:87
            X509v3 Authority Key Identifier:
                keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f2:bb:2a:65:c4:4d:ef:a4:2e:15:1a:3f:13:4d:a5:ed:a0:
         c5:e0:73:0f:9f:dd:52:00:e2:a5:ef:f5:38:92:e8:6b:e1:73:
         83:e7:85:0a:1b:fc:1d:12:49:b7:8f:e6:24:1f:14:c5:2a:71:
         93:7f:59:15:64:7f:d9:b7:8a:3b:ca:19:5d:df:71:9f:44:11:
         dc:3a:56:77:b1:41:f2:a0:e7:81:f8:d2:7f:f8:0a:e3:51:68:
         c0:f0:f9:6b:04:3e:65:3e:64:3e:9d:78:36:8b:d7:ce:af:c4:
         71:80:b7:cf:25:a0:e9:19:c6:28:ea:c1:e7:79:0c:25:dc:10:
         f6:25:e6:16:bf:dc:09:cc:93:1b:ba:6d:d5:5b:49:cc:c5:ad:
         a3:26:d6:ff:ad:5a:a4:3d:e9:e6:b1:5c:c3:2c:41:cb:f1:55:
         65:aa:64:81:9e:1d:4e:a2:81:7a:95:4e:a0:2e:70:51:a2:ed:
         aa:29:f8:61:43:64:a9:9f:0f:b3:dd:47:09:05:1e:de:4d:dc:
         49:a4:bc:d6:78:53:5c:31:2f:7f:cc:7c:e4:4f:d9:08:70:ae:
         01:c2:2b:82:62:a3:46:83:ba:41:a1:f5:4a:95:c7:70:10:bc:
         3a:35:1e:40:a3:e0:88:8e:87:98:24:c0:b7:46:40:9d:a8:58:
         ba:23:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:19 2026 by rpki-client