Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/FC28C1AE9BE011EC8EE90745C4F9AE02.roa
File:                     FC28C1AE9BE011EC8EE90745C4F9AE02.roa (raw, json)
Hash identifier:          bfmgQdb4mtKehaE5Ra/VuoIOQxpWwgFMk0NAgFY1g8w=
Subject key identifier:   17:FD:03:83:E0:F9:03:C8:73:C9:82:0B:0A:EC:36:27:46:8F:72:3A
Certificate issuer:       /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Certificate serial:       0678
Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/FC28C1AE9BE011EC8EE90745C4F9AE02.roa
Signing time:             Wed 12 Aug 2026 22:44:18 +0000
ROA not before:           Wed 12 Aug 2026 22:44:18 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     148993
IP address blocks:        103.169.160.0/23 maxlen: 24
                          2001:df0:7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
                          rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
        Validity
            Not Before: Aug 12 22:44:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7cf742-b7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2b:fc:9c:91:1a:c9:bf:f0:96:8e:23:85:df:
                    d7:61:09:8b:e9:9c:6c:f5:0a:6b:dd:b4:fb:7c:0e:
                    50:21:01:a6:66:a4:16:1d:ac:61:14:32:be:ad:3c:
                    7f:86:10:a6:63:cf:c0:12:d1:4e:1d:78:d2:7e:fc:
                    35:1c:75:48:e3:0a:59:1d:01:d5:0e:99:c1:43:42:
                    5c:b4:b6:11:78:b3:37:7c:25:68:cb:b1:99:82:33:
                    86:e4:48:45:ae:e9:b9:32:10:3d:e3:6a:a7:23:98:
                    fa:4d:ad:6a:cc:2e:02:23:b8:75:5c:9b:07:77:f6:
                    b4:12:20:4d:02:6e:cc:56:fc:61:d1:7b:cb:4f:5b:
                    f7:5b:a7:85:6d:e2:e8:6b:09:ef:bd:df:09:18:1f:
                    8e:cf:5a:6e:f1:6d:e7:f9:1c:04:e4:88:40:e6:b0:
                    42:e0:a1:c1:e1:a6:95:e9:36:d4:5b:ae:bd:36:54:
                    89:81:66:73:de:b0:84:2a:14:c4:c5:d7:28:d1:2a:
                    c4:e1:8c:af:5b:62:19:a6:6b:89:5d:51:9d:61:24:
                    f9:45:91:7a:95:09:fa:c7:61:41:16:a6:28:c8:7c:
                    4f:09:43:86:07:47:64:ee:ef:51:31:15:2b:16:ef:
                    1a:fa:1a:5c:4f:d4:f6:75:66:7e:7a:37:2b:26:fe:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FD:03:83:E0:F9:03:C8:73:C9:82:0B:0A:EC:36:27:46:8F:72:3A
            X509v3 Authority Key Identifier:
                keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/FC28C1AE9BE011EC8EE90745C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.160.0/23
                IPv6:
                  2001:df0:7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:54:29:5d:77:b5:d9:59:3f:70:7c:cc:98:23:d4:ea:cf:
         b7:1e:74:3a:b9:8d:76:a4:cb:a7:c4:69:6b:0a:10:01:65:24:
         76:af:c1:6e:86:70:85:f4:34:b3:c7:2a:48:b8:02:35:83:a7:
         b7:7b:cb:ef:c0:01:59:e5:bf:b5:ed:26:ed:58:f2:12:b1:17:
         54:29:31:27:67:a9:0d:3d:01:4e:12:4a:8a:d1:75:eb:9f:af:
         48:2f:d1:14:41:6d:a8:f4:9e:1f:7c:5a:e6:c6:0b:2e:51:15:
         89:2c:c9:41:98:c1:4f:19:91:d5:5a:56:82:fc:56:e6:76:55:
         6e:10:1e:94:b1:9c:12:20:f2:35:a8:30:d9:c7:c6:09:de:5f:
         11:e0:9b:7e:82:91:88:12:e6:0e:25:47:42:d7:d6:d8:22:4b:
         c1:4c:c7:df:47:e4:0f:4f:30:96:8f:67:94:11:a7:e6:78:b1:
         2e:bd:e0:29:28:c6:14:e7:23:1f:8f:5d:94:47:3f:01:01:e8:
         e2:b3:67:5d:4a:fa:9e:56:c2:86:01:f2:61:9c:a4:a3:7d:47:
         c2:be:a8:fd:ca:9a:a7:07:4c:4c:74:49:9f:54:3a:10:f9:15:
         1c:d2:a5:db:92:e4:f6:7e:9d:48:8f:a0:b7:ea:8a:9f:c5:50:
         4c:76:3b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:30:47 2026 by rpki-client