Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa
File:                     201C5008FD1211F08F3BD92E3C6F56BC.roa (raw, json)
Hash identifier:          1OAedwQBnkUsVobI3R/sxb2b/N4xjXr4iFRIeIsrNQE=
Subject key identifier:   67:B5:E2:DC:93:8F:39:B7:1F:CB:53:A2:DF:15:17:8F:08:54:5C:EB
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       0499
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa
Signing time:             Sat 01 Aug 2026 01:48:47 +0000
ROA not before:           Sat 01 Aug 2026 01:48:47 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     150108
IP address blocks:        103.172.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Aug  1 01:48:47 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6d507f-383b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:fc:83:85:1b:ca:00:19:20:f1:2a:6d:e9:
                    ef:e6:04:60:8c:93:dd:bc:dd:22:ff:f2:72:0a:00:
                    f1:f3:d2:8b:d6:99:f7:a6:e5:09:b9:9d:56:df:e7:
                    54:e6:ce:a1:da:18:f5:57:e7:7f:52:7b:1b:55:9f:
                    4c:ee:54:68:2f:51:7e:eb:02:0d:65:75:04:c9:d5:
                    26:20:71:5f:3f:31:15:78:2a:7e:e5:8d:6a:2d:65:
                    7c:76:0b:b4:b2:2f:d4:6c:c0:93:1e:f4:a4:52:fa:
                    52:07:12:cd:7e:03:f4:41:68:96:23:a3:bb:b7:39:
                    a4:ac:b8:83:45:b1:ac:88:ed:02:22:f0:e6:d8:fa:
                    c4:d6:86:0b:8f:46:2b:17:5a:f3:a4:ae:42:bb:52:
                    22:1b:0a:64:0a:c6:cd:e7:db:6e:f6:03:39:ce:de:
                    ee:a7:13:06:04:08:d9:36:0d:1a:f4:d8:f5:b5:b4:
                    11:da:8a:31:34:2e:66:74:9d:07:32:9e:ee:4b:d5:
                    c5:1a:c7:16:82:93:74:5e:e3:56:7e:fe:e0:21:fa:
                    0c:44:bf:23:1e:1d:7e:8a:e2:fd:af:5c:0f:4f:45:
                    dd:15:41:f6:4e:8f:21:ec:04:8f:d4:40:d0:9f:8d:
                    d7:81:f7:8d:4f:ab:6a:8c:ad:2c:87:bd:bd:98:c2:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B5:E2:DC:93:8F:39:B7:1F:CB:53:A2:DF:15:17:8F:08:54:5C:EB
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:0f:c9:6b:01:18:51:b5:ee:6c:34:58:0f:b5:17:52:9b:e5:
         3d:c3:97:50:88:0a:53:50:4f:3a:a8:7c:e2:a6:6f:92:28:55:
         7d:a4:bb:b3:c1:c8:3a:fe:05:cd:8a:ca:fb:04:08:d7:6e:38:
         d1:fc:e3:3a:9f:59:59:0d:cf:f1:21:b7:f7:75:30:e3:a1:7c:
         85:b8:34:65:dd:05:54:7c:16:90:28:88:0d:89:44:a8:55:34:
         55:74:70:e3:5d:98:45:96:eb:b4:e2:00:bc:d5:09:30:ce:e9:
         18:13:ca:f9:28:c8:ea:2e:67:9a:80:6a:d4:c5:11:1c:63:48:
         ec:6d:0a:2f:2d:2b:f2:a0:a3:71:2b:1a:43:3f:b9:3f:c5:8a:
         97:7b:ae:05:d1:4c:2d:de:35:5f:c8:1b:4a:7e:10:a4:e0:ef:
         29:40:4d:a0:2e:f9:0b:04:1f:e6:4b:e1:4b:15:47:ab:12:65:
         2e:5e:9d:55:c9:38:ad:de:e8:25:d2:a6:65:3b:ec:63:41:bb:
         5d:a0:36:85:b0:8c:6a:28:22:71:88:9a:da:9d:31:9b:cd:e0:
         c7:4e:e3:97:56:6c:2e:bc:71:05:78:f2:1a:9d:1a:cb:d5:ab:
         80:0f:09:73:eb:03:1f:73:57:d7:7b:75:05:83:0d:85:b9:29:
         84:a1:ba:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:21 2026 by rpki-client