Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa
File:                     FFCE072E2B8111EE9BDEC079C4F9AE02.roa (raw, json)
Hash identifier:          vlYY+5TtJ2iPuvI4KrqFuTWbHS6vrSjRQ3Wr/LyP/X8=
Subject key identifier:   57:34:50:FB:FA:45:40:0A:19:B4:13:1F:72:61:E9:9F:81:C0:DC:DB
Certificate issuer:       /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
Certificate serial:       0221
Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:01:01 +0000
ROA not before:           Fri 09 May 2025 03:32:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151480
IP address blocks:        103.243.100.0/23 maxlen: 23
                          202.53.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl
                          rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA64C, serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
        Validity
            Not Before: May  9 03:32:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5198d-507e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:d5:fc:27:62:61:26:38:6e:18:02:59:3d:
                    18:05:d6:c4:7f:13:dc:7c:3f:6c:ce:f3:a0:d1:88:
                    69:28:f3:b6:a0:d3:4e:e0:87:4b:c3:26:bc:60:f0:
                    eb:a0:46:ea:39:98:f1:b5:a5:20:0a:5a:12:42:7b:
                    77:f1:a4:6f:2d:59:d5:7a:b2:73:01:37:cd:dc:e9:
                    85:bc:2d:e0:65:c9:4d:27:b1:e6:28:02:12:da:eb:
                    cd:a2:a0:99:ed:d0:f7:2a:cc:25:bd:8b:15:78:96:
                    db:a2:51:1d:1f:44:6f:6c:25:bf:46:f4:0a:5c:3f:
                    3b:2a:9d:3f:7b:73:71:3a:5b:2d:22:64:0c:93:c2:
                    56:0c:ac:63:e8:78:77:7e:88:37:c1:20:3e:49:e3:
                    63:24:62:43:cc:ac:58:a3:f9:d0:8f:30:38:d8:51:
                    fc:81:9a:2c:ee:72:b6:af:12:77:6d:88:8d:87:f6:
                    25:0e:ef:ca:0f:76:0c:4c:14:51:84:a4:86:da:ff:
                    b4:84:4f:72:b2:60:3c:d1:85:69:63:a1:97:21:d7:
                    b6:b9:60:20:30:95:3f:8d:da:49:d6:7a:93:2b:f1:
                    97:ca:b9:8f:c0:33:0f:6e:05:26:dd:b7:af:84:58:
                    99:5b:da:dd:4f:66:5b:b3:87:0c:ca:e8:8a:36:d1:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:34:50:FB:FA:45:40:0A:19:B4:13:1F:72:61:E9:9F:81:C0:DC:DB
            X509v3 Authority Key Identifier:
                keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.100.0/23
                  202.53.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:8c:f2:99:6f:57:b6:4f:79:75:87:af:10:37:22:e5:d3:66:
         ec:6b:c9:ae:58:56:be:f4:b8:b9:d1:1d:1d:60:5c:7d:6d:99:
         62:25:f5:5e:3a:74:f1:93:4b:5e:b6:87:2b:1b:ad:4f:08:a4:
         c1:87:0e:33:53:77:6a:ed:49:1c:63:9c:ad:c4:70:b5:01:74:
         24:42:0e:4f:55:fd:c5:a5:82:c9:7a:85:c4:55:36:c4:f4:a1:
         98:68:1b:fe:ef:cd:17:c5:f6:d5:2c:96:4a:b3:94:2e:ed:e2:
         55:bd:2d:7f:eb:05:bf:d7:43:47:17:c6:54:db:fa:2d:7a:e1:
         ab:d1:f7:59:12:85:33:34:bf:30:da:43:fb:7e:16:52:a6:3a:
         11:2c:9c:05:5d:e8:48:7d:aa:05:05:4d:97:44:9e:25:68:ea:
         c8:36:96:c6:01:c4:2a:41:84:59:e0:20:2b:ff:ef:df:9d:93:
         0c:22:22:f3:07:47:0b:34:c1:bd:ed:07:c2:98:8b:13:72:54:
         47:51:ad:8f:7b:fe:31:38:28:9c:21:23:c9:9a:3b:af:c8:29:
         e4:31:6d:5a:b6:4b:11:56:6e:9a:3f:fe:4b:b5:19:44:43:bb:
         05:b7:98:ed:f6:ee:14:73:41:3a:1c:29:6c:91:4c:d1:c9:61:
         5b:69:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:24 2026 by rpki-client