Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa
File:                     F3B716768F2F11EE86964D62C4F9AE02.roa (raw, json)
Hash identifier:          XbLvpieZLxPD8FqUNOF2czHZzpbSV3R5GXAyN7YF/l8=
Subject key identifier:   9F:48:77:B5:5E:B8:B7:C6:AA:EE:86:5D:38:B1:F1:A1:5B:AA:D3:AD
Certificate issuer:       /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial:       02D8
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 02:51:57 +0000
ROA not before:           Fri 31 Jul 2026 02:51:57 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140721
IP address blocks:        103.152.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
                          rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
        Validity
            Not Before: Jul 31 02:51:57 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a6c0dcc-0bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:74:34:00:d3:20:b3:52:21:f7:a9:78:04:
                    29:60:aa:54:42:21:27:21:5d:94:a4:90:cf:a8:d8:
                    4c:1c:f1:99:d2:fb:e7:23:91:4e:79:94:4c:91:d2:
                    e4:f7:8a:a8:e6:cb:15:91:ae:31:9d:f7:22:86:92:
                    7c:17:14:46:c7:25:0c:6a:70:84:53:5e:d2:c1:dd:
                    f2:35:63:2c:c4:04:06:77:58:c1:86:d5:fb:31:4d:
                    2a:73:27:b5:ba:8f:96:d4:fd:0c:ec:b8:c4:ee:39:
                    bc:43:52:40:d4:ab:29:c3:c7:3c:3a:92:50:de:c8:
                    85:f0:71:ba:2f:bb:a3:3c:aa:29:07:0b:b7:f3:8d:
                    6d:8a:42:0d:89:eb:13:2a:2e:ec:14:da:59:da:66:
                    92:6e:d0:11:db:05:69:cb:af:25:09:fb:6b:b5:f4:
                    3d:e5:ae:c8:5c:86:d2:fe:dd:96:fa:b5:92:48:e9:
                    20:15:d5:ea:e1:df:93:77:5f:d7:f7:e9:7a:e3:a3:
                    87:d4:fb:1d:e6:8f:77:60:f7:0b:77:0d:cf:99:2e:
                    f8:f5:26:da:49:f1:6f:5f:59:15:d1:4d:72:26:84:
                    f4:4b:d4:93:ca:3c:57:da:92:59:2a:aa:0e:4f:a8:
                    ad:53:5b:e3:40:8f:cd:e7:18:72:8d:00:a2:c9:02:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:48:77:B5:5E:B8:B7:C6:AA:EE:86:5D:38:B1:F1:A1:5B:AA:D3:AD
            X509v3 Authority Key Identifier:
                keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/F3B716768F2F11EE86964D62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c4:ab:b4:9f:1c:c9:cd:85:e4:02:ce:28:8a:a3:f8:2a:cb:
         90:fe:af:76:11:4b:16:de:8e:de:db:6c:70:82:69:fc:bf:95:
         08:76:15:ac:55:2e:a2:56:8b:86:69:8b:d2:a2:c4:f7:23:94:
         cc:f7:50:91:bf:4b:59:ab:5a:4a:de:f9:08:2a:1f:dd:32:63:
         6c:c1:8b:48:b1:7f:e3:7c:80:9f:21:fe:d5:5b:66:38:75:e9:
         42:38:ca:6c:84:23:bf:b4:5d:1a:7c:fd:a3:69:f3:ff:53:d3:
         b0:da:71:24:fe:17:8e:29:23:09:7a:b2:c7:a9:e2:56:4c:58:
         a7:67:dc:64:c6:b5:be:7a:04:1a:57:8e:e3:90:aa:f3:15:2b:
         ea:8c:c0:b3:36:d1:fd:4e:8c:06:94:74:f5:40:30:cc:2f:28:
         cc:12:24:12:58:ac:a0:72:c0:22:10:9e:3d:53:ac:77:7a:00:
         a7:f1:30:0a:4f:0b:e3:43:d0:69:51:a8:0f:ee:8e:ec:fb:23:
         c7:25:3f:8c:8e:3a:1f:a8:b1:49:dc:a3:2f:8f:7f:d4:4e:39:
         dc:3b:b4:fc:0d:70:5c:67:08:4e:75:ba:03:79:7e:98:92:22:
         cc:a8:bb:61:5f:56:99:86:90:04:82:bc:95:f7:56:02:47:af:
         80:9e:91:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:08:35 2026 by rpki-client