Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/55DFA64492D711F18635C2A96211F970.roa
File:                     55DFA64492D711F18635C2A96211F970.roa (raw, json)
Hash identifier:          djt66eXRykHBM3V8fZJrRs+bzF9etdDuyzOhtNwvhh0=
Subject key identifier:   FC:85:FA:D5:ED:E8:AE:E9:7F:AC:67:ED:69:9E:D5:88:43:89:C6:61
Certificate issuer:       /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial:       04E9
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/55DFA64492D711F18635C2A96211F970.roa
Signing time:             Sat 08 Aug 2026 03:14:58 +0000
ROA not before:           Sat 08 Aug 2026 03:14:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     37963
IP address blocks:        103.181.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
        Validity
            Not Before: Aug  8 03:14:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a769f32-28f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:92:80:c8:95:de:a8:d1:38:7e:6d:4c:64:
                    6b:7f:16:a7:9f:0c:05:6e:d5:54:d3:00:e9:75:a8:
                    d5:d7:a2:48:7d:13:ab:21:75:8c:cc:42:ed:31:77:
                    a9:89:56:1a:16:4a:93:fd:d0:82:d5:ac:85:56:0d:
                    41:bf:1d:a2:c8:41:94:0f:e8:66:5c:44:91:9c:a2:
                    d1:4b:7d:f6:eb:05:2d:70:68:f8:98:36:35:fb:51:
                    29:4b:46:fb:04:d9:48:7b:d6:04:54:07:e4:91:d1:
                    4b:04:c5:cf:e7:d0:4e:27:9a:b8:53:63:86:22:93:
                    c0:4e:99:f6:0e:16:6d:a2:4e:2c:a5:ac:06:91:2f:
                    75:9a:0d:c3:1d:93:30:0d:42:3a:45:1c:c9:7e:a0:
                    81:1f:f5:b9:71:c8:73:ce:b9:d4:24:b8:c6:c5:63:
                    4c:fb:00:62:24:ba:a6:fb:d1:7c:64:2c:76:09:0e:
                    a3:89:4f:d4:ee:bc:fd:fd:07:5e:83:85:4e:ff:09:
                    90:66:35:6e:f3:f4:e0:05:f6:1c:ee:92:35:03:9b:
                    c0:e0:4c:75:b6:c1:4e:0d:11:f9:a9:23:72:03:bf:
                    00:d3:5d:3f:94:dd:7d:c9:02:f1:b5:56:a4:c7:c1:
                    ea:32:26:8f:ab:17:63:9c:00:da:d3:72:f1:1e:03:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:FA:D5:ED:E8:AE:E9:7F:AC:67:ED:69:9E:D5:88:43:89:C6:61
            X509v3 Authority Key Identifier:
                keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/55DFA64492D711F18635C2A96211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:40:05:87:00:69:5d:40:d8:aa:bb:71:b3:31:1f:be:48:
         c1:ee:cf:02:51:d5:db:35:a2:5f:88:e7:d0:2d:62:86:d2:4a:
         67:b9:84:3b:94:ac:dc:cc:25:08:e2:4f:64:ec:95:1d:32:c5:
         0d:bd:cd:7c:02:bd:41:39:07:08:ab:21:b1:76:f8:6f:9d:ce:
         40:f0:ed:be:6a:28:44:ed:90:dc:a3:1a:c1:25:81:64:ab:13:
         6d:44:91:3f:ce:2b:86:25:0a:1c:2e:30:c3:82:70:07:5f:96:
         97:43:a9:ed:2b:fe:99:57:aa:81:bd:40:11:85:5e:49:45:00:
         27:dd:fd:f9:05:f0:df:aa:97:2d:45:0b:78:c4:6c:24:36:da:
         dc:d9:91:7f:e4:7d:57:51:81:b2:1b:43:fc:25:8d:24:72:35:
         cb:f2:a7:6c:bb:a2:47:dc:17:0a:0d:17:08:ec:a8:5f:df:40:
         5a:25:35:0f:4d:44:de:cd:0c:cf:17:59:5f:7f:41:f0:2c:a4:
         b3:55:fe:43:53:67:c0:3b:53:21:5a:d4:c1:1d:06:75:43:b7:
         91:f5:e6:04:c3:db:7e:85:0c:51:d0:8c:5c:f5:8b:19:77:74:
         12:4f:8c:08:e5:a5:90:f5:8a:62:f4:c9:79:f7:7a:ca:c0:d5:
         ef:12:86:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:10:52 2026 by rpki-client