Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/FA66BA00BD1311EEBC015623C4F9AE02.roa
File:                     FA66BA00BD1311EEBC015623C4F9AE02.roa (raw, json)
Hash identifier:          RCE7v/cxnBGfMPk3MtJPuEIln4OQNI5lz0I7q4Ez8SY=
Subject key identifier:   FD:FC:28:50:CB:AD:E5:85:5E:39:2E:F8:4F:F9:94:1C:5D:E2:27:AB
Certificate issuer:       /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial:       01FA
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/FA66BA00BD1311EEBC015623C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 04:53:36 +0000
ROA not before:           Mon 03 Aug 2026 04:53:36 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     18013
IP address blocks:        103.141.220.0/24 maxlen: 24
                          103.141.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
                          rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Aug 2026 04:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
        Validity
            Not Before: Aug  3 04:53:36 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a701ed0-d080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:e0:f6:fe:71:ec:26:d4:5c:d1:42:07:bb:
                    ba:d3:57:76:6b:62:35:b0:cb:e6:40:42:44:7f:99:
                    8d:80:ec:d4:7d:59:fe:31:5a:f0:f6:34:e7:11:9c:
                    a5:1c:41:47:9f:3b:95:58:d0:0d:3a:b8:d9:19:21:
                    70:ae:74:5e:98:da:6d:a0:7e:12:51:f3:e4:b7:c1:
                    d3:5d:7a:a8:5d:bb:0b:f1:d2:91:36:2a:1e:1b:46:
                    f4:19:d1:b4:da:42:08:63:38:46:27:71:77:fb:9b:
                    34:86:1c:ea:9b:a6:fe:3d:22:07:aa:45:6f:18:bb:
                    6b:a4:0d:cb:dd:1f:93:45:03:ac:68:e3:e9:14:79:
                    b4:2f:94:95:1c:ab:7e:ee:a8:e7:e9:3d:d0:57:5f:
                    82:9c:37:47:91:e8:c0:d2:92:35:27:73:04:8b:17:
                    52:89:6f:c3:e9:7e:bd:31:fd:eb:fa:6b:ac:b4:26:
                    59:a9:42:9f:a4:96:90:68:ed:ea:33:e9:9d:68:3b:
                    31:e7:c8:08:1a:b3:fe:83:1d:ad:7a:0d:2c:62:14:
                    da:61:6e:0b:ee:4f:93:32:57:13:e5:11:6f:4b:e3:
                    59:fe:41:72:e2:be:77:bb:3f:f2:29:b6:75:7f:9a:
                    f7:7c:5c:88:b7:c6:41:7d:f9:e1:90:cf:c2:e3:b4:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FC:28:50:CB:AD:E5:85:5E:39:2E:F8:4F:F9:94:1C:5D:E2:27:AB
            X509v3 Authority Key Identifier:
                keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/FA66BA00BD1311EEBC015623C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:fe:23:e3:e3:d5:d2:7f:f6:73:0d:d5:02:79:06:8f:11:26:
         bd:d7:ee:54:c7:10:80:08:ab:97:54:b3:2f:c9:0f:ce:bf:8d:
         91:3f:30:eb:63:20:29:0b:c7:4e:c6:69:bf:04:67:3e:64:3a:
         f7:2d:01:91:6d:1a:42:5f:70:2c:35:7e:73:90:6c:28:f9:98:
         e5:c3:52:d9:a1:ce:f7:39:10:8e:1c:74:8b:a0:97:4b:d8:64:
         af:ac:bf:38:38:81:d8:ff:08:55:cf:a5:81:66:28:7f:2a:69:
         af:dd:b9:81:79:5e:bd:b0:17:26:bf:c7:aa:5e:62:ca:c0:63:
         26:18:35:9b:2c:f6:04:38:e3:0a:7c:8c:4c:94:72:fc:a5:c5:
         c8:51:6c:92:3c:d3:74:6b:f1:b1:47:f9:ad:1f:63:69:b5:d7:
         c7:ea:57:35:cb:f8:b7:72:f4:c1:51:04:dc:ee:74:94:e1:d2:
         eb:9a:4e:b3:a1:0c:a7:61:5e:50:08:38:d3:24:f2:1a:be:ee:
         5c:20:3d:a7:75:a2:b0:0f:b1:f4:5c:cb:c0:7d:4c:84:b5:f8:
         65:9b:92:ae:47:84:13:43:48:78:b4:8f:9c:68:95:01:2c:d3:
         fd:df:13:44:74:29:46:0e:81:ef:b7:8f:46:3f:10:9c:1a:b7:
         20:e1:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:11:05 2026 by rpki-client