Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa
File:                     FFCE072E2B8111EE9BDEC079C4F9AE02.roa (raw, json)
Hash identifier:          fC/KFkgq6lUne8dQqCH/x45Z+TiR28HM4WHVvUg10H8=
Subject key identifier:   72:55:97:29:81:2F:B0:78:65:D8:4A:C2:B3:52:AC:2C:7D:85:FA:0F
Certificate issuer:       /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
Certificate serial:       0246
Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa
Signing time:             Thu 07 May 2026 02:34:21 +0000
ROA not before:           Thu 07 May 2026 02:34:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151480
IP address blocks:        103.243.100.0/23 maxlen: 23
                          202.53.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl
                          rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA64C, serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
        Validity
            Not Before: May  7 02:34:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fbfa2c-4644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:a1:f7:18:fd:18:6a:4d:1c:ed:fe:1c:f8:
                    e2:a7:4b:95:bf:6d:61:29:7d:77:3f:31:8b:4b:c6:
                    9f:1e:41:93:55:4c:b4:2c:5e:a5:c3:e7:a7:bc:3d:
                    0e:80:32:67:fb:1d:10:e8:61:a7:77:68:46:0b:6a:
                    a4:51:53:87:dc:dc:ab:ca:c7:82:a1:f6:05:17:9d:
                    5d:be:9b:7b:b3:9c:f9:b7:0c:7d:e5:06:a9:bc:d0:
                    b6:90:aa:fe:56:2c:72:fe:88:18:54:43:00:b3:72:
                    48:3b:9f:0e:40:82:70:c5:1e:17:13:73:5e:ef:52:
                    3b:70:ef:ef:61:9c:b4:23:ce:bf:fd:e1:48:60:46:
                    cb:7f:80:46:bd:93:7c:f2:64:7a:dc:7f:ac:3e:e6:
                    9c:9b:67:f4:a3:14:dd:f2:43:dd:f5:f7:60:c0:3c:
                    20:b0:5a:7a:f3:ca:c6:50:6c:2f:fd:cc:ab:e3:69:
                    e4:14:7a:e4:ff:a5:76:f3:28:87:db:94:4e:9f:0e:
                    e5:8f:67:9e:06:3a:c6:88:d3:bd:81:fb:3a:f0:6a:
                    26:0b:00:ff:71:33:ff:53:ad:6d:67:49:e6:28:c5:
                    70:01:1a:08:de:dc:c8:90:2e:13:21:c7:34:ae:ef:
                    93:77:b2:c1:8f:73:38:6b:ba:0e:fd:64:e2:19:40:
                    1e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:55:97:29:81:2F:B0:78:65:D8:4A:C2:B3:52:AC:2C:7D:85:FA:0F
            X509v3 Authority Key Identifier:
                keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.100.0/23
                  202.53.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:24:f9:01:a8:ad:ad:e2:ab:38:00:37:1d:10:8f:3d:e1:a0:
         a7:57:ec:ad:4b:3e:b9:be:1e:ef:48:c5:c4:92:1a:45:12:a6:
         c2:02:e0:29:cc:2e:c1:57:d4:d9:ce:8e:da:55:66:92:11:4b:
         c8:64:45:b7:23:da:55:71:c4:4d:a6:58:94:a5:c1:b3:2c:4d:
         dc:c1:ae:97:a2:90:cd:79:f3:de:e8:ce:f1:ca:80:97:c3:98:
         de:b4:b0:d8:d8:90:af:de:6a:21:69:50:61:ca:54:71:1a:22:
         da:75:84:2d:e1:da:3f:c8:fa:a3:90:b2:07:27:2a:6a:e1:2f:
         48:f0:75:1e:a3:4e:f2:07:08:a0:ba:0c:04:a2:4f:a6:7c:a3:
         0c:8e:eb:3c:8e:fb:6e:52:8e:9c:44:bd:4f:f7:89:8a:39:52:
         dc:a8:88:75:6b:51:98:72:89:24:59:ff:f6:87:27:98:f5:34:
         23:c2:51:9d:56:ee:95:c5:bf:3c:c6:be:71:5b:07:b0:06:17:
         2f:d9:4d:7a:1c:8a:96:83:a9:cc:67:4e:1f:c8:f1:f1:06:08:
         9d:56:25:65:e6:53:cf:4a:59:d0:62:dd:56:ec:af:2b:62:8d:
         ee:8f:e7:86:78:dd:2f:42:c4:c5:1e:4e:c1:64:56:6e:4e:e3:
         42:c5:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:58 2026 by rpki-client