Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/00FB58CE5D4611F186A46996B2833773.roa
File:                     00FB58CE5D4611F186A46996B2833773.roa (raw, json)
Hash identifier:          NVOHwEnXASVBqmCqfxY3gSyyM9N1jznjqr0Pc3+NqTM=
Subject key identifier:   EE:07:79:85:93:0F:FF:64:8D:2E:E5:09:94:00:53:AE:50:AC:8F:82
Certificate issuer:       /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
Certificate serial:       0266
Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/00FB58CE5D4611F186A46996B2833773.roa
Signing time:             Fri 05 Jun 2026 03:33:01 +0000
ROA not before:           Fri 05 Jun 2026 03:33:01 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154602
IP address blocks:        103.176.0.0/24 maxlen: 24
                          103.176.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Jun 2026 02:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
        Validity
            Not Before: Jun  5 03:33:01 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a22436d-c1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:ad:44:2f:05:b0:41:10:4a:ac:c3:af:85:
                    9a:3e:64:f2:4e:0e:1e:f1:27:42:81:9d:14:c5:ef:
                    2d:58:8c:f6:ed:8a:de:1d:54:90:d6:ca:ca:68:81:
                    f7:95:78:08:07:f4:64:b1:40:4e:bb:3b:30:f4:c6:
                    57:2f:07:ca:3c:26:24:4d:9e:5c:8c:b5:85:c6:cb:
                    d1:4c:ed:d5:55:c3:49:8b:80:4f:51:66:3a:9e:ba:
                    7a:5a:d6:da:98:da:7d:d8:e2:bb:39:3a:24:a9:f3:
                    13:39:58:d4:5e:92:18:a9:de:0b:0c:78:1b:aa:3c:
                    1d:e5:df:33:cb:e5:b0:fb:d6:eb:be:28:3a:5c:18:
                    a9:ee:2b:f5:93:f4:36:d9:04:03:fe:31:87:a4:e4:
                    41:96:e5:4a:8a:10:a6:97:e4:99:ed:ed:b0:59:ee:
                    1d:4e:9e:d8:60:c4:83:27:b0:02:29:9d:dc:40:d5:
                    f9:b1:b2:34:aa:f7:6e:ee:d2:7a:f1:6e:5a:4c:c7:
                    4b:3a:84:f7:28:45:98:a0:2d:4f:f7:87:a9:3a:9d:
                    71:61:52:e2:63:69:c0:f3:be:50:40:f0:77:79:b9:
                    9d:c0:ad:50:c4:48:d6:85:12:f9:f8:71:37:15:f9:
                    e3:d0:13:f7:3c:88:cc:9c:77:fd:17:7e:fc:62:bb:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:07:79:85:93:0F:FF:64:8D:2E:E5:09:94:00:53:AE:50:AC:8F:82
            X509v3 Authority Key Identifier:
                keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/00FB58CE5D4611F186A46996B2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:26:c5:34:79:8f:2a:0a:46:63:86:6e:d3:dc:f9:c5:82:87:
         03:f3:08:0b:40:f1:3b:17:cf:7a:56:63:61:24:a7:4d:aa:2b:
         92:ac:8f:ab:49:55:bc:4f:73:aa:31:2b:23:69:93:28:84:1e:
         d9:d8:7e:f3:a5:c7:e9:ae:65:e1:36:e6:f1:e0:56:e9:f6:d0:
         f4:b2:82:aa:42:7f:b9:87:c0:ef:f6:23:ec:56:6a:e7:cd:a4:
         3b:af:c7:ae:75:e7:cc:31:55:cb:1a:3d:21:86:e9:f9:57:1f:
         0a:e8:3c:3f:f5:6e:9f:42:71:80:e0:b1:d9:61:1a:28:fb:a6:
         a3:84:63:bf:25:d5:06:c8:b4:b3:57:11:00:c5:7e:ee:fb:77:
         b5:14:ba:9f:74:ee:70:0b:ff:46:20:e6:42:1f:7c:38:d4:73:
         ef:ad:30:84:ab:8a:c8:20:e5:ca:bb:be:84:20:e0:01:c2:c8:
         a4:26:57:7f:4f:b7:7e:e6:60:5f:d9:cd:d7:37:2d:99:52:d9:
         3a:63:7f:a3:90:54:ef:cc:3a:ee:1a:61:e3:86:b2:02:12:59:
         24:30:ee:de:02:f2:0f:d2:88:1b:50:62:d8:f9:40:f2:58:62:
         e4:a6:1f:04:0a:9f:5e:ec:9d:5d:39:38:2f:c8:e3:a3:e0:5d:
         a9:0a:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 16:11:02 2026 by rpki-client