Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/190C2054FC4511F0B3BAE0E1466F56BC.roa
File:                     190C2054FC4511F0B3BAE0E1466F56BC.roa (raw, json)
Hash identifier:          EugNDSEUcv8s0/hdkai7icbbEYSczSe5xjpiA4JXe7c=
Subject key identifier:   AA:F6:82:09:CF:E1:AE:77:7B:53:F4:7F:2A:74:9E:53:03:A3:07:67
Certificate issuer:       /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Certificate serial:       06DD
Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/190C2054FC4511F0B3BAE0E1466F56BC.roa
Signing time:             Sun 26 Apr 2026 22:28:44 +0000
ROA not before:           Sun 26 Apr 2026 22:28:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139691
IP address blocks:        103.166.40.0/24 maxlen: 24
                          2001:df6:7c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
                          rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
        Validity
            Not Before: Apr 26 22:28:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ee919b-97b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:db:91:39:54:75:7f:ec:ab:bc:a4:ac:94:
                    0c:36:cf:ee:a7:46:6e:09:15:80:72:0f:cb:5e:36:
                    b1:b9:ab:94:5e:c4:0b:13:f7:8f:0f:80:7e:10:cd:
                    55:e5:4d:7d:a6:8a:03:89:df:22:62:04:4e:02:5c:
                    e6:3b:3b:57:65:eb:ca:a9:e9:3e:fc:a8:3d:94:86:
                    f6:12:44:cc:a0:fe:19:71:4d:88:b4:af:02:11:d1:
                    2d:1c:5e:b9:fa:2c:d9:1d:dc:bd:7f:13:9b:28:a5:
                    cc:03:53:b2:de:ee:f7:bc:dd:87:61:5c:4b:dc:58:
                    e3:40:d6:9f:8b:d6:ec:28:30:d0:e2:e4:79:30:12:
                    f0:07:e9:a2:6f:40:90:32:91:d2:b1:b8:6f:8a:21:
                    86:62:e1:d9:80:dd:d7:52:b7:41:8a:9b:28:2f:52:
                    5f:08:8e:bc:6e:3b:4c:4c:79:10:c3:bc:d1:28:0c:
                    7f:df:5c:28:eb:73:e5:50:62:93:27:6b:c6:57:54:
                    9b:38:38:f7:96:bb:dd:0c:68:c7:01:1c:db:7a:5a:
                    7a:7c:ec:4f:e9:1e:92:eb:cb:39:a0:f5:b0:18:90:
                    08:9c:c9:73:45:36:d7:d0:4b:bf:d1:8a:a6:bb:ce:
                    83:82:24:b4:d1:3c:3e:bb:02:f6:60:3c:e7:f7:4d:
                    4a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F6:82:09:CF:E1:AE:77:7B:53:F4:7F:2A:74:9E:53:03:A3:07:67
            X509v3 Authority Key Identifier:
                keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/190C2054FC4511F0B3BAE0E1466F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.40.0/24
                IPv6:
                  2001:df6:7c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:8c:77:17:2a:15:2d:10:a9:5d:e1:8d:ab:2e:d9:38:0b:
         48:ef:8c:bb:16:89:c5:8c:04:f6:ba:bc:e8:09:1b:b7:82:ce:
         8a:c9:23:33:b3:58:01:bd:d8:c8:ad:e7:33:5d:b0:8c:a8:c1:
         3d:9f:1c:44:65:0d:7a:de:e8:25:90:90:d0:3e:09:df:5f:a6:
         9e:87:11:92:aa:15:1e:f0:6a:66:5b:8d:06:18:85:7e:4c:a1:
         1d:a4:8e:a3:7a:29:b9:c4:18:91:97:0b:cd:d4:05:e4:92:56:
         52:70:02:0f:ac:d8:00:01:11:fa:7b:ed:31:d2:9e:aa:ee:13:
         d8:bc:94:ac:35:a2:ff:f8:93:23:d3:e3:37:46:ae:14:3e:35:
         56:d9:a8:9a:2d:03:89:ae:87:17:54:8e:a2:d5:d7:32:b4:5c:
         e4:3f:73:b4:5f:32:e4:14:f0:0b:c5:15:86:18:94:c0:30:dd:
         bc:48:97:b8:3b:d0:62:5f:f2:7f:22:0d:75:6f:62:b6:a7:46:
         a0:b8:0e:ae:14:0b:0c:3f:24:ed:11:f8:5e:ac:59:e4:37:2a:
         e4:66:32:d0:24:a6:0e:2a:7a:8d:3a:63:e8:4c:8c:27:50:84:
         ff:f8:30:49:d9:eb:a8:c9:80:8a:e1:23:a3:57:3d:ad:2e:23:
         ee:4d:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:08 2026 by rpki-client