Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/990DC3124B5E11F1A334296EAF833773.roa
File:                     990DC3124B5E11F1A334296EAF833773.roa (raw, json)
Hash identifier:          ZrU1yEE9T1CVij7RmKAnUigJhTMs5XRxyKi/FLpZjq8=
Subject key identifier:   17:3A:A0:54:0E:EA:B9:6D:A8:02:DC:D8:43:E2:92:74:25:31:79:4E
Certificate issuer:       /CN=A916D6BA/serialNumber=D3980DEB91400489F90FFE6AEF17C4ADD86B121D
Certificate serial:       02
Authority key identifier: D3:98:0D:EB:91:40:04:89:F9:0F:FE:6A:EF:17:C4:AD:D8:6B:12:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/990DC3124B5E11F1A334296EAF833773.roa
Signing time:             Sat 09 May 2026 04:21:49 +0000
ROA not before:           Sat 09 May 2026 04:21:49 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     133139
IP address blocks:        43.251.150.0/23 maxlen: 24
                          103.224.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.crl
                          rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D6BA, serialNumber=D3980DEB91400489F90FFE6AEF17C4ADD86B121D
        Validity
            Not Before: May  9 04:21:49 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69feb65d-a040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:f9:fc:36:4c:55:6d:5b:97:c3:8a:2f:4b:
                    d6:8a:29:1f:e9:9b:b0:f7:cf:fe:27:bc:9d:b0:1e:
                    0c:c1:b4:8e:02:2c:ec:f6:37:e9:64:6e:0f:41:70:
                    5c:80:6a:5b:d8:ef:c5:54:68:0f:06:d0:63:ae:d1:
                    aa:fa:ff:2c:ef:0f:2b:cf:aa:4b:80:62:3d:27:25:
                    4b:e9:28:c5:8e:73:18:aa:b6:2d:0c:c1:18:4c:bb:
                    04:0a:46:d2:c3:4d:3a:fd:e0:3d:30:eb:17:18:83:
                    8d:e6:41:98:bb:55:56:ad:80:4d:c6:de:87:1c:8d:
                    83:64:34:2d:0e:0e:d0:75:ea:9a:99:22:65:3a:fa:
                    5b:83:06:01:05:5c:47:f9:2c:5a:5b:03:a7:4d:67:
                    0b:af:92:94:15:43:a7:70:4b:a0:ac:85:86:40:f2:
                    d1:01:a3:ab:a0:65:59:ca:d6:2b:2f:d3:d4:d5:c2:
                    04:89:fd:66:7f:3a:d7:9f:b5:cb:47:cb:14:3e:49:
                    0c:86:79:b6:d6:b2:b2:72:f7:67:28:24:ec:56:ec:
                    29:c7:ef:09:42:0d:41:6c:cd:99:71:dc:68:3d:58:
                    d4:b3:8c:7e:6f:04:4c:34:3b:9d:d9:84:a4:de:63:
                    f8:5c:8d:33:05:09:43:da:5e:86:52:06:e5:67:9d:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3A:A0:54:0E:EA:B9:6D:A8:02:DC:D8:43:E2:92:74:25:31:79:4E
            X509v3 Authority Key Identifier:
                keyid:D3:98:0D:EB:91:40:04:89:F9:0F:FE:6A:EF:17:C4:AD:D8:6B:12:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/990DC3124B5E11F1A334296EAF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.150.0/23
                  103.224.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:71:25:5f:2c:77:d6:c2:47:2a:5c:d7:fc:c8:9e:5e:84:70:
         d7:fa:b5:57:a5:b6:2f:18:8a:03:18:e2:be:02:d9:ef:e9:54:
         86:0f:81:27:79:33:8d:01:b4:6d:3d:11:31:e0:00:46:e3:80:
         55:1a:1a:18:bf:88:ca:02:2d:30:c4:32:35:53:81:5b:56:de:
         7b:b2:e4:9d:19:c8:97:38:40:bc:58:2f:80:04:8d:72:d2:cd:
         ab:b0:93:b3:58:4c:a2:04:6f:92:61:91:3a:07:65:73:7f:01:
         f8:f7:3c:aa:29:de:ee:29:5e:cb:a5:fd:42:45:8a:be:41:df:
         8b:45:ef:95:71:29:c2:9a:cc:fd:72:c2:04:c3:be:37:4d:d2:
         a2:95:6e:5e:62:47:59:f6:7c:a2:cc:9b:1f:d1:8f:d6:1a:ea:
         5c:d9:d0:d9:08:23:2b:49:d3:61:d0:2a:2c:31:ca:18:89:e0:
         23:0c:2f:20:76:3e:f0:91:70:cd:a4:82:4f:6f:22:f2:69:fc:
         d6:37:f4:b5:a4:4b:d2:72:c0:ce:55:da:63:83:90:c6:da:d7:
         59:48:ca:e6:c5:9b:25:ed:ab:d8:f6:7f:e5:52:c4:54:55:aa:
         7a:e7:c2:11:18:af:c0:1d:6b:00:91:8f:c9:fb:02:ce:db:55:
         37:8f:6d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:57 2026 by rpki-client