Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa
File:                     201C5008FD1211F08F3BD92E3C6F56BC.roa (raw, json)
Hash identifier:          GMqu43H/ese/S03vFJhjS0uwY/11jk6C41E8BelAPXA=
Subject key identifier:   64:F5:8D:6A:D3:D9:7B:9B:7C:A8:95:93:00:F8:24:0F:7A:5E:36:2A
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       043F
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa
Signing time:             Sun 01 Mar 2026 18:04:16 +0000
ROA not before:           Thu 29 Jan 2026 12:57:54 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150108
IP address blocks:        103.172.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Jan 29 12:57:54 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47fa0-a404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:f8:44:43:1e:60:23:92:df:e5:9e:3e:28:
                    81:2d:88:43:4e:b2:05:1c:5e:ec:2b:1f:ee:6f:9f:
                    18:f9:01:2e:a4:74:01:db:00:2e:be:cf:91:4f:f0:
                    b9:6f:14:1e:83:93:59:bc:b0:4e:7e:56:cf:aa:f2:
                    ca:d6:42:da:12:f0:cd:88:9a:e5:cc:a7:32:86:6b:
                    78:55:79:30:cf:fa:0c:92:71:60:6b:70:61:51:99:
                    f5:48:47:b5:93:0e:20:4e:dd:9b:2a:3b:0d:dc:5a:
                    33:55:6d:45:2c:22:19:11:72:87:e2:81:bb:68:c8:
                    29:08:f8:4e:29:89:5b:52:82:cb:a0:75:71:72:b9:
                    2b:8e:0f:25:ad:07:1c:e7:54:49:68:2e:08:ff:45:
                    06:65:99:57:cc:23:6f:be:ff:2e:2f:80:98:6a:b7:
                    27:f7:de:02:ff:d3:40:53:80:4c:9d:e9:c0:7d:2b:
                    ec:5a:32:9b:2f:96:22:3c:80:db:d6:19:fb:a2:1f:
                    7f:6a:5e:1a:37:dd:a1:85:b9:b0:d4:3f:98:fb:d7:
                    ba:e5:65:90:e1:5d:24:b4:1b:49:ea:ec:63:65:49:
                    f8:0a:41:ba:c3:cd:dc:e5:f9:e0:89:6d:b3:e4:6d:
                    c6:30:f9:c7:ac:50:c9:7a:80:4c:39:ab:c4:a0:a2:
                    3e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F5:8D:6A:D3:D9:7B:9B:7C:A8:95:93:00:F8:24:0F:7A:5E:36:2A
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ff:68:a4:ea:73:43:0a:32:81:ef:34:4b:be:bc:db:01:3b:
         6a:0f:f4:8c:57:6c:f1:50:72:8d:9f:04:aa:e5:4d:08:8c:fa:
         0e:28:72:f6:c8:73:69:d2:e1:03:82:36:70:40:69:0d:aa:cb:
         dc:89:52:9f:8f:6f:ec:38:4b:7d:76:e3:cf:e1:bd:f6:73:fb:
         6a:9c:40:85:75:77:43:c2:5f:c2:73:b9:b2:db:0a:49:9d:90:
         b3:98:26:f8:b5:2f:1e:2e:34:7f:73:38:61:c4:7d:1c:be:9b:
         a9:6c:49:12:62:60:1e:85:8f:1c:45:1b:46:8a:67:ad:5a:25:
         da:4d:95:26:7e:b4:73:2f:7d:fb:67:03:41:d7:d8:ff:0f:fe:
         f5:a2:d0:01:a6:07:77:ab:a8:92:b6:ba:38:58:57:61:98:39:
         46:3d:13:e8:08:a7:67:2c:6c:22:c5:fc:ba:a0:a2:3c:26:b3:
         b5:63:a7:e6:44:9b:85:9d:69:9e:7f:1d:73:58:b4:97:00:8e:
         5c:75:5e:26:cf:78:d3:21:59:ca:c3:d6:d4:90:53:e2:9b:5d:
         bc:7b:45:d2:73:1e:a1:f0:e8:59:59:ad:32:29:47:a8:e7:cb:
         07:46:dc:f8:d3:4e:5b:6e:0c:e2:13:d1:7b:7f:1b:3d:26:55:
         e3:63:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:48 2026 by rpki-client