Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa
File:                     79057E1CEB1011EEB9CE4F19C4F9AE02.roa (raw, json)
Hash identifier:          XLu1VP1kxPDCxF31gfLm3nkT8+eZyJnAfii6Pmd0KGQ=
Subject key identifier:   E9:96:9C:4D:38:F1:DD:56:C2:B2:1B:C4:16:30:4B:61:96:0B:E0:9F
Certificate issuer:       /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Certificate serial:       019E
Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa
Signing time:             Sat 02 May 2026 21:26:18 +0000
ROA not before:           Sat 02 May 2026 21:26:18 +0000
ROA not after:            Tue 01 Sep 2026 00:00:00 +0000
asID:                     141015
IP address blocks:        103.154.240.0/23 maxlen: 24
                          2407:e340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
                          rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
        Validity
            Not Before: May  2 21:26:18 2026 GMT
            Not After : Sep  1 00:00:00 2026 GMT
        Subject: CN=69f66bfa-ddce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:44:80:09:16:96:35:65:19:7e:e4:77:d2:
                    b4:47:1f:b9:59:6b:d6:10:ba:91:55:15:db:e1:9f:
                    f2:07:6e:8d:e6:a1:6b:38:ec:91:6c:95:88:aa:69:
                    d0:26:77:7c:c1:d2:f3:3b:f8:9e:b1:57:61:ad:d3:
                    d1:d9:d3:de:4b:f7:30:61:3e:5d:f4:b8:ca:a3:e2:
                    2d:62:ce:b6:91:1f:db:2b:ce:6c:3d:c3:e4:29:e8:
                    71:6c:58:14:ab:b1:d1:40:23:33:15:66:a8:53:7b:
                    5a:c9:12:9e:af:86:5e:b4:30:78:70:f5:a9:c0:4e:
                    ab:9c:75:94:d6:15:5c:12:9c:98:40:59:f1:a0:b9:
                    f0:47:6b:14:8a:ba:93:5b:4e:15:19:3a:cb:76:7c:
                    fa:74:bc:88:59:d6:82:a6:c4:6d:80:5c:47:3c:9c:
                    1f:df:99:4e:87:3f:4f:0a:e8:cc:65:e3:5c:b6:22:
                    07:88:ee:10:e7:ed:f4:25:81:16:1c:52:69:14:57:
                    21:04:aa:95:b6:b8:f8:76:e6:40:d2:8f:8c:38:cd:
                    7a:df:7a:dc:58:93:e2:d5:d7:94:e6:49:ad:4a:88:
                    7e:d6:16:d7:e1:ad:03:37:af:d1:b8:8a:71:a4:0e:
                    f7:6d:0d:c9:8d:59:98:a6:8e:7d:3d:48:6f:e1:4e:
                    b9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:96:9C:4D:38:F1:DD:56:C2:B2:1B:C4:16:30:4B:61:96:0B:E0:9F
            X509v3 Authority Key Identifier:
                keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.240.0/23
                IPv6:
                  2407:e340::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:4f:dd:e9:84:8d:d6:8b:a1:cc:35:ad:85:44:b2:73:73:b1:
         fd:9c:eb:bb:57:fe:83:53:33:36:1f:8c:62:d8:09:c7:4f:9f:
         ef:2c:48:4a:40:58:f9:28:e7:e9:37:7b:53:fa:85:fc:3a:68:
         1a:f5:0c:69:52:81:81:34:7e:69:4f:ab:ab:c5:b6:8b:2c:41:
         ef:9c:9a:37:80:55:96:9e:86:54:3b:73:80:31:92:42:e6:12:
         9f:5a:c7:ee:46:2a:78:8e:39:14:f2:f9:1b:c5:a4:ad:d8:3d:
         8a:ee:13:df:c3:49:ef:c8:c0:36:3f:b2:9d:ba:0c:76:b5:76:
         d1:b3:8e:5f:88:4b:34:21:63:cf:af:6d:2f:bf:70:e1:ef:cb:
         11:2d:60:08:ba:43:94:6a:32:28:c9:63:37:b1:fe:cb:69:8a:
         e1:50:ae:2d:07:d6:7b:ad:b4:be:a8:6f:16:2c:40:e7:03:7a:
         2c:da:44:b7:1d:4d:d8:36:37:f8:55:f8:68:4e:67:4f:77:b2:
         78:e7:d7:12:10:55:e4:bc:4e:9b:5b:21:c7:b9:b2:a5:e2:90:
         be:d9:09:3e:b7:36:73:df:ed:f1:f5:0b:4a:3a:16:02:73:44:
         d7:5c:d4:3b:7c:6e:a9:55:9f:5f:a1:a3:66:fd:20:ab:94:cf:
         c5:59:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:48 2026 by rpki-client