Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/25B534D44D5411F18A3BE7BBCC833773.roa
File:                     25B534D44D5411F18A3BE7BBCC833773.roa (raw, json)
Hash identifier:          FarsV2MI6tA76PhNRLQoB5llK7wa/XTRgXYRkwTmoiQ=
Subject key identifier:   F3:99:34:04:43:73:77:D3:C3:99:06:A6:DA:4A:24:28:D4:FA:3A:A4
Certificate issuer:       /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866
Certificate serial:       06CB
Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/25B534D44D5411F18A3BE7BBCC833773.roa
Signing time:             Mon 11 May 2026 16:12:03 +0000
ROA not before:           Mon 11 May 2026 16:12:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140525
IP address blocks:        103.166.86.0/23 maxlen: 23
                          103.166.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl
                          rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866
        Validity
            Not Before: May 11 16:12:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a01ffd3-0b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:1b:5f:be:4a:0d:61:2c:38:c7:13:80:72:
                    41:2e:de:31:50:d5:ab:39:1b:c3:b3:50:bb:6d:47:
                    fe:71:90:b4:c6:8b:2a:f4:e1:d3:43:8b:22:97:4c:
                    1f:54:eb:28:e1:77:e6:4b:ff:0e:b4:b4:2e:48:37:
                    58:ef:f7:ae:fe:d4:9e:5a:03:a6:c3:e8:16:6d:d0:
                    f8:42:fc:b7:1b:d0:e6:6c:0a:4f:29:2d:e8:46:0d:
                    9f:c6:f9:39:21:3d:d1:0a:aa:db:c1:73:7b:4d:85:
                    89:82:4f:44:ad:c9:ed:3c:b1:9b:9b:96:32:46:90:
                    1a:5b:2d:01:9b:0e:0b:0d:11:d9:07:51:8b:82:bf:
                    2e:c7:9c:f2:44:d6:02:f3:f6:51:85:b2:f5:a7:83:
                    03:34:6c:8c:fd:00:2e:e1:7f:af:0a:76:a6:20:af:
                    21:99:d6:9b:4e:da:7f:e3:63:c9:00:3b:56:63:53:
                    eb:3e:f0:80:06:da:c0:ad:0a:1d:8d:7c:7a:0f:fc:
                    2a:14:3b:22:67:d0:2a:26:79:30:cb:b9:c9:ac:04:
                    d8:a8:a4:40:69:52:04:df:d0:6c:3b:68:a1:af:a0:
                    51:18:f0:5f:fc:7e:55:07:a7:8e:c5:91:e8:d1:c3:
                    1c:00:b0:32:e6:e6:93:ba:f3:87:8a:ea:4d:09:75:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:99:34:04:43:73:77:D3:C3:99:06:A6:DA:4A:24:28:D4:FA:3A:A4
            X509v3 Authority Key Identifier:
                keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/25B534D44D5411F18A3BE7BBCC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:52:ce:b9:d9:5a:93:c6:8d:5d:61:7c:c6:79:f0:b8:66:
         85:c1:92:9f:74:42:a5:52:4d:23:d3:0b:bc:ca:82:fc:53:9d:
         4f:17:64:2d:19:0d:7a:8b:32:df:4c:54:90:c1:0f:cc:52:57:
         75:0c:dd:af:1c:08:e4:4a:40:0a:7c:95:9d:cd:58:f1:16:aa:
         aa:70:59:38:9b:2c:62:bc:c0:a1:42:7d:1d:c9:a1:90:06:cf:
         be:cb:bb:06:81:67:28:18:6e:43:fb:bb:93:6c:7b:25:b0:b6:
         4a:eb:27:03:38:54:32:a4:e3:27:a0:7d:25:b6:b8:8f:d8:ce:
         bb:aa:c6:82:cc:77:89:b6:16:49:25:04:f9:e4:37:5b:d0:21:
         a5:ed:2c:d2:57:e3:a3:b2:e0:4d:25:f9:13:33:be:5c:a1:5c:
         e4:7b:e3:56:55:0e:5d:b5:94:76:f3:df:58:d5:a8:7c:e6:30:
         6e:13:ce:47:36:5c:e6:ba:12:58:35:3e:db:3f:14:09:bc:fe:
         8f:42:22:e4:91:0f:33:d8:e6:d6:41:86:21:fa:60:8e:12:d2:
         20:98:61:85:44:93:c5:57:85:ed:91:c5:4c:8d:6f:55:97:b5:
         33:ee:54:b2:4e:24:a8:7c:c8:31:a9:5b:b0:f9:4f:be:0d:08:
         32:94:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:56:01 2026 by rpki-client