Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/1F99EBD4C66F11EAA0B1B019C4F9AE02.roa
File:                     1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (raw, json)
Hash identifier:          OerNxvvq3phHMkXzM6uc+sc+f5PWAHWyBJri0cIQ79g=
Subject key identifier:   2C:4E:CE:22:3D:A3:73:64:90:5E:F1:48:CB:AD:55:CB:9A:D8:BC:27
Certificate issuer:       /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Certificate serial:       0966
Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/1F99EBD4C66F11EAA0B1B019C4F9AE02.roa
Signing time:             Thu 16 Jul 2026 21:21:17 +0000
ROA not before:           Thu 16 Jul 2026 21:21:17 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.150.161.0/24 maxlen: 24
                          103.161.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
                          rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406 (0x966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
        Validity
            Not Before: Jul 16 21:21:17 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a594b4d-c5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:11:73:2f:e7:d9:56:8c:61:16:0d:3c:66:
                    27:d2:a0:e5:68:1e:61:87:3c:05:0b:b0:b5:03:49:
                    6b:46:54:df:0b:80:e1:b8:0a:fa:ed:b0:2c:2e:af:
                    32:1e:84:73:90:22:d3:fb:2f:f2:a4:25:51:3d:99:
                    ce:f5:18:94:92:4f:91:8c:e3:97:e1:81:3e:60:64:
                    61:56:68:ec:eb:cc:8d:8f:ed:67:3b:47:71:60:53:
                    26:44:11:fd:99:2d:fa:de:d9:ac:63:36:21:e9:40:
                    63:e2:8e:df:0d:0c:db:f3:19:eb:dd:01:26:50:25:
                    9a:2b:37:d3:38:2f:37:81:f6:4e:31:b1:9a:42:cd:
                    10:d5:5d:31:25:f7:3e:8c:8c:37:98:9f:8d:ee:69:
                    74:a3:e7:8c:cb:c2:38:ed:86:2d:0c:27:ba:ae:8d:
                    b8:b2:c5:90:1d:a3:84:00:38:3b:55:d7:83:85:09:
                    05:ec:bd:e2:1d:f4:7d:34:a1:e9:ed:19:88:22:4c:
                    26:c5:91:70:1b:2b:c8:94:bf:5c:3b:c0:f1:d1:db:
                    af:2c:91:80:d7:d7:fd:29:3d:12:e4:fc:48:89:2b:
                    cd:44:69:d7:f1:e2:9b:67:ee:ed:68:60:7d:78:29:
                    b0:8f:2d:64:ae:ae:4d:02:e0:aa:b2:37:ac:cd:fd:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4E:CE:22:3D:A3:73:64:90:5E:F1:48:CB:AD:55:CB:9A:D8:BC:27
            X509v3 Authority Key Identifier:
                keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/1F99EBD4C66F11EAA0B1B019C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.161.0/24
                  103.161.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:bf:90:61:af:a1:4e:9e:f4:37:38:8a:60:ad:8f:b1:9c:23:
         92:f8:12:c8:8e:8a:56:db:c4:f3:c8:7c:34:28:5d:ba:3a:c2:
         60:20:42:6b:42:0e:a2:e1:63:98:e7:ca:59:0e:ea:fd:6b:cc:
         0e:83:2b:77:7d:48:cf:6f:4e:12:0b:62:45:f9:1e:9a:ba:de:
         9f:9b:b4:e2:04:7c:de:64:54:77:84:9a:6d:41:2b:4a:40:b3:
         ce:25:1d:aa:69:8a:08:c8:53:53:81:4d:88:77:b5:b3:63:2f:
         e2:d9:42:a1:0f:6e:b4:13:2f:93:fe:d9:64:8a:db:57:61:7f:
         86:97:ea:31:8a:de:c0:93:e5:cd:6a:f3:6b:e9:05:69:bd:0c:
         5a:46:57:95:10:a3:da:45:57:3b:63:e5:05:e4:36:62:b3:b3:
         66:2e:76:fc:6c:38:98:4b:05:9b:98:46:d7:8f:21:96:de:18:
         c5:a3:0d:ef:98:3a:6d:fb:49:f1:b9:03:af:8b:15:cb:6f:61:
         f6:02:e0:78:ba:68:86:da:2a:a4:f6:e9:32:77:a4:18:0c:fc:
         c6:6c:60:30:9d:ed:5d:b2:08:e9:12:f2:77:70:3e:e8:28:bd:
         36:a2:04:fd:c3:62:15:00:d7:23:a2:23:79:fe:98:03:ca:90:
         7b:9a:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:13 2026 by rpki-client