Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F69540BA810811ED9EA03683C4F9AE02.roa
File:                     F69540BA810811ED9EA03683C4F9AE02.roa (raw, json)
Hash identifier:          kjANU+m8NGi3/h3kcs2+JMjQaSUpPN4ROitBH9ohYXU=
Subject key identifier:   BE:76:FA:B2:D8:9D:F6:62:84:73:E5:5C:A8:0C:78:06:26:C7:A8:C2
Certificate issuer:       /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial:       02B5
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F69540BA810811ED9EA03683C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 02:51:05 +0000
ROA not before:           Mon 03 Aug 2026 02:51:05 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.190.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
                          rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
        Validity
            Not Before: Aug  3 02:51:05 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a700219-337c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:c3:4a:50:6e:6d:a8:6c:10:c9:7d:16:e4:
                    8a:5d:ea:0a:ef:53:0e:db:5f:1f:64:72:83:c2:24:
                    f0:93:7b:32:84:63:46:f8:2f:06:8b:02:e2:bd:cb:
                    0c:e7:40:4a:64:b2:78:dc:2c:91:da:be:cd:48:c2:
                    6c:bf:73:12:47:c0:56:92:b9:0a:fb:51:5b:0d:e4:
                    69:9e:e7:0b:ba:05:3d:d7:d0:87:8a:01:42:b9:b9:
                    aa:97:3a:4a:35:d5:76:0d:89:58:7a:f7:4d:08:c8:
                    29:f6:f5:3f:ed:cf:d5:ec:46:96:dd:13:fc:7a:13:
                    d1:93:c6:5b:3e:f8:14:9e:9f:a6:6a:80:a2:16:16:
                    c3:18:bb:63:83:f9:49:b5:00:47:9d:b2:ae:f5:6f:
                    f6:79:6d:2d:17:72:9f:35:d9:36:5d:d2:97:0b:6c:
                    7a:f6:14:ef:b2:aa:da:4b:1f:dc:76:c1:cc:c3:9d:
                    a1:16:f6:dd:b1:2e:b0:e1:bc:00:9f:59:07:2f:85:
                    43:80:95:dd:fa:0f:15:ac:41:b5:e5:b5:1a:ac:1e:
                    40:96:df:f1:82:7d:ab:ff:5b:02:ba:1f:54:3e:2e:
                    a6:e7:d1:74:06:2b:e8:2f:29:6c:52:cf:05:a2:63:
                    27:21:4c:d2:f0:9b:97:2f:42:8d:c4:5f:0a:b0:73:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:76:FA:B2:D8:9D:F6:62:84:73:E5:5C:A8:0C:78:06:26:C7:A8:C2
            X509v3 Authority Key Identifier:
                keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F69540BA810811ED9EA03683C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:1d:8d:7e:90:bf:41:e6:f3:b5:9c:fa:6b:80:dc:4c:87:b1:
         00:3f:10:1b:38:e7:0a:39:54:e5:bf:c5:85:df:9f:18:ff:a2:
         0d:db:d3:ab:f3:b5:1a:75:ff:72:7a:7e:83:27:47:d8:80:eb:
         a1:ba:84:e4:22:56:07:3b:3d:74:1f:31:c0:36:11:a4:b9:86:
         31:ab:75:45:6b:28:3d:a4:a5:35:b8:d9:cd:7f:e8:32:1f:c9:
         52:07:fa:90:3d:16:3f:10:f8:a4:3b:24:42:20:74:22:dd:b4:
         d0:b3:7a:e8:39:e7:71:5f:36:a0:35:bb:b7:dd:92:eb:24:b6:
         c1:37:bb:01:53:8e:5d:81:d8:8a:2d:e9:e0:a8:e1:2a:3c:64:
         14:c2:2e:d1:88:8f:69:80:60:4c:87:2c:1a:fd:2e:5a:59:d4:
         e1:71:f6:2b:4b:84:7a:d3:e4:ac:fc:11:b0:23:37:ba:15:01:
         62:c5:8f:e2:3f:cd:56:43:bd:74:d4:41:38:ab:ca:db:fa:d6:
         6f:1a:30:2f:4e:2e:b7:99:ae:15:3f:e3:32:e9:4f:4b:25:13:
         97:d8:55:ed:73:23:ce:e9:69:f1:c2:af:1c:b4:bb:ae:93:15:
         bc:92:01:68:a2:98:44:1a:f7:23:27:b7:4c:35:5d:ac:ff:27:
         10:d2:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:08:58 2026 by rpki-client