Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa
File:                     201C5008FD1211F08F3BD92E3C6F56BC.roa (raw, json)
Hash identifier:          bY1Ippx3qlabUx2V25t21GEM9Ul8vaRq2Suh6gDGn7o=
Subject key identifier:   35:AD:5F:69:2D:5E:DC:AA:A4:BF:22:03:8B:60:4C:75:D1:D3:62:95
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       0461
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa
Signing time:             Wed 29 Apr 2026 01:33:01 +0000
ROA not before:           Wed 29 Apr 2026 01:33:01 +0000
ROA not after:            Fri 28 Aug 2026 00:00:00 +0000
asID:                     150108
IP address blocks:        103.172.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121 (0x461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Apr 29 01:33:01 2026 GMT
            Not After : Aug 28 00:00:00 2026 GMT
        Subject: CN=69f15fcd-da28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:e5:e1:6d:a4:6a:12:2c:71:85:54:cf:5b:
                    3d:62:58:59:2a:64:c8:22:10:af:90:8e:3b:2e:cd:
                    b4:a1:39:e7:9c:a8:01:7d:6a:41:41:ac:e4:d4:3b:
                    53:a8:8e:18:16:96:62:49:73:da:8d:47:6c:96:50:
                    04:fb:21:fd:a5:8e:00:10:2d:43:4e:0f:b3:5b:b9:
                    23:89:6b:34:2a:ca:19:ae:ee:87:44:c7:d1:ce:f7:
                    c2:94:e2:7a:df:5a:c8:19:b8:2e:6d:0c:ec:58:82:
                    f9:86:0d:82:7e:63:6e:5e:c0:54:a4:a0:3b:f6:b7:
                    e7:8a:41:48:e5:09:44:fc:2d:ff:18:0b:5b:58:f2:
                    fc:18:bf:7a:ff:37:ba:e8:af:db:5e:5e:8c:16:eb:
                    3d:80:35:cf:b4:71:74:b1:15:30:80:17:7b:d3:e5:
                    69:9a:72:fa:8c:75:fe:ea:32:1c:c8:0c:63:55:13:
                    9e:1c:b8:d2:43:25:ce:82:ff:1e:87:37:a6:cf:6d:
                    f1:b2:4c:c5:fb:97:6c:8a:c5:a3:32:78:55:a9:d8:
                    8d:30:a5:82:87:f9:f7:4f:b3:d9:9a:ee:0b:d3:3e:
                    36:62:41:44:13:84:09:ab:d7:07:83:f9:76:1c:74:
                    07:c8:0b:b9:5b:82:e2:42:cd:d5:50:d4:b1:bb:c7:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AD:5F:69:2D:5E:DC:AA:A4:BF:22:03:8B:60:4C:75:D1:D3:62:95
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:08:4b:50:59:6a:c6:13:1c:eb:02:5a:12:1a:a0:20:8d:d1:
         95:3d:c9:f1:b0:65:44:8e:05:f1:a5:6c:73:fe:ba:f8:3d:2f:
         02:c1:95:fc:a7:19:fd:bb:a5:2e:b5:3c:85:d6:13:12:19:06:
         80:28:f4:61:90:a6:01:6d:33:d5:fd:bb:db:cc:db:72:0b:80:
         bf:92:05:67:e2:4b:cb:ae:bd:ae:fc:a4:3d:b3:10:fa:fa:46:
         c7:9e:d4:26:26:fa:36:1b:aa:99:2a:10:4e:18:a3:a2:ef:ea:
         76:78:83:a1:ce:14:bb:17:d2:a5:38:1c:28:7b:25:3f:b5:a0:
         2d:9d:c7:6d:30:12:e6:b5:b6:5c:bc:a4:c0:31:26:f9:ba:55:
         7c:ea:98:17:a6:bd:75:a9:33:d3:77:bb:39:fc:41:1e:d7:78:
         e4:d9:18:c8:0e:6c:c4:58:6a:0e:c5:33:96:82:32:96:ad:5d:
         08:67:dd:be:ae:5a:a1:cd:2a:73:e8:60:4f:5f:cb:6f:3a:2f:
         12:6b:0e:92:72:8f:40:98:4e:75:a3:ee:7f:ea:4b:5d:9c:04:
         4e:2a:ef:bd:e8:62:8a:ad:76:b0:2b:71:4f:e3:f9:7e:3b:27:
         72:96:cf:b4:a5:c3:0d:22:98:06:a4:35:57:4e:11:f1:f2:3f:
         2c:ed:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:35 2026 by rpki-client