Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/FA18CEA2F07A11EBBEBB415AC4F9AE02.roa
File:                     FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (raw, json)
Hash identifier:          2L3Tb4rDsaNmcqHcYeYiYV5gtwJ30QtShtvqrny13MU=
Subject key identifier:   94:2D:90:0B:A0:1B:F9:03:59:CE:23:E0:8A:68:4C:25:41:67:74:A2
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       06D1
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/FA18CEA2F07A11EBBEBB415AC4F9AE02.roa
Signing time:             Sun 12 Jul 2026 23:23:40 +0000
ROA not before:           Sun 12 Jul 2026 23:23:40 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142290
IP address blocks:        103.167.134.0/23 maxlen: 24
                          2001:df6:b780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745 (0x6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Jul 12 23:23:40 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a5421fc-12e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:2c:35:ef:87:ca:6d:29:38:15:48:a9:d2:
                    68:07:de:39:78:ed:ba:5b:5d:1d:16:ed:a6:58:57:
                    28:99:5e:71:45:f0:7d:80:0c:4a:60:ed:38:88:e4:
                    65:bb:d9:59:42:22:c6:b3:92:22:97:e7:b2:54:5e:
                    d4:83:08:4e:8c:09:92:d7:22:1a:60:a7:73:67:78:
                    20:52:5a:e6:d7:a9:56:49:1f:97:2f:ed:ae:51:54:
                    a0:65:a1:ac:0e:dc:73:26:3b:10:55:00:55:03:f6:
                    7b:c4:d5:6f:35:3d:16:ec:4f:42:60:e3:74:c2:a0:
                    23:9c:9a:4e:0e:7e:e7:94:34:54:74:d8:27:48:cd:
                    11:50:ac:34:49:ae:ee:12:22:05:9a:4b:20:16:56:
                    bd:09:fc:5a:a3:21:74:94:7d:3b:8e:80:c9:89:51:
                    02:5f:a5:e3:d2:8b:79:d2:63:87:8b:69:25:99:a7:
                    81:76:ce:4a:99:4e:02:28:7c:4a:fb:70:31:bc:dc:
                    cd:65:f8:2d:9a:2b:09:8c:18:14:73:02:1c:b7:3f:
                    d5:9b:b2:dc:1e:f1:39:7f:ee:63:80:9d:7e:d1:a5:
                    4f:ca:bc:5c:37:da:f5:c9:7d:c8:4a:1e:56:2e:8b:
                    68:26:93:f3:55:86:5a:01:b5:36:fb:34:5a:b8:f1:
                    b4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2D:90:0B:A0:1B:F9:03:59:CE:23:E0:8A:68:4C:25:41:67:74:A2
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/FA18CEA2F07A11EBBEBB415AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.134.0/23
                IPv6:
                  2001:df6:b780::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:7c:bc:7f:06:07:37:e7:ff:61:d3:46:9b:53:e3:9b:a2:d6:
         6e:be:22:0f:98:b1:b3:95:92:fb:21:34:d7:d4:d5:cb:11:22:
         6d:11:8a:ee:b8:61:2e:fa:d3:6b:4e:52:a8:83:5d:77:b8:c0:
         fe:d1:4a:a0:4c:45:a4:02:c7:90:b5:fb:f5:58:b9:13:58:06:
         2f:41:72:52:da:87:98:dd:95:dd:cd:3f:7a:95:e9:c4:95:8b:
         79:11:26:4f:cb:2c:1a:49:e1:3c:24:54:f4:5e:57:7a:2a:5f:
         e7:85:63:32:95:14:b0:70:db:5b:f3:7f:57:03:a7:6c:9b:1d:
         52:df:c2:5d:cb:47:e3:ea:a6:c4:ef:3b:10:cf:71:a7:ac:02:
         a3:80:d6:06:92:f8:03:a9:bf:75:70:39:bb:30:7c:30:2a:1c:
         7c:a7:3c:be:b3:47:ab:9f:01:3a:b9:af:5f:ec:5f:b1:d8:81:
         36:29:b4:2d:41:aa:86:51:3e:54:31:2e:8f:d2:39:bb:55:35:
         94:8e:47:a4:d6:e6:e4:77:35:9c:80:39:32:00:13:f1:56:b4:
         61:aa:29:14:72:34:c5:47:24:0a:4b:11:84:63:79:9f:ca:3e:
         96:61:ba:a1:e2:b0:dc:5b:94:77:40:a6:fe:34:f1:19:2a:ef:
         64:d1:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:20 2026 by rpki-client