Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/DFF01B484A2B11EB8609481FC4F9AE02.roa
File:                     DFF01B484A2B11EB8609481FC4F9AE02.roa (raw, json)
Hash identifier:          zBDrIrM5ZNmyGZZJoQehnFsEZgI4D/QOvG+mRLYkJ1Q=
Subject key identifier:   A1:57:AC:2A:A0:23:4F:08:B1:7A:D5:31:9B:BD:82:F8:D6:97:23:13
Certificate issuer:       /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Certificate serial:       079A
Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/DFF01B484A2B11EB8609481FC4F9AE02.roa
Signing time:             Mon 30 Mar 2026 22:27:57 +0000
ROA not before:           Mon 30 Mar 2026 22:27:57 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     59356
IP address blocks:        103.225.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
                          rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
        Validity
            Not Before: Mar 30 22:27:57 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69caf8ed-092e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:20:e2:e0:0c:dc:05:52:29:46:dc:1e:52:60:
                    e4:35:57:9c:7d:a4:4e:1d:f7:e1:53:15:4a:e1:01:
                    3e:7b:52:40:84:90:55:68:14:58:0e:9d:87:2c:44:
                    64:96:56:7b:22:52:be:a4:64:15:46:73:3f:15:92:
                    ff:c6:69:a6:46:c7:a2:c7:13:cd:61:c3:60:ff:ef:
                    0a:b5:ce:df:35:d2:83:79:ab:a9:e4:4e:ad:87:e7:
                    4b:c9:2f:e4:20:31:54:01:83:15:ef:59:b3:b6:0d:
                    96:50:03:3b:0c:97:26:39:71:93:8c:0d:69:85:7c:
                    5b:ab:59:78:ea:97:46:37:94:db:5c:c2:5f:b8:35:
                    38:7a:c0:f8:6c:5b:7b:0b:e2:36:66:b5:0d:fa:bc:
                    a1:17:8b:14:01:2f:01:9e:43:73:85:fe:80:f8:bb:
                    92:d6:7b:72:a9:54:68:cd:21:5c:e5:08:17:ea:71:
                    c5:43:db:9f:df:53:eb:09:b6:0a:d5:9d:0e:7d:00:
                    d1:ab:12:ef:57:93:d3:07:e2:46:cf:e5:38:6d:7a:
                    cf:12:83:f5:b7:30:80:40:79:9e:6e:c4:f3:27:e3:
                    54:be:71:03:d6:f7:85:52:ad:87:a1:2f:12:ba:02:
                    b0:73:f6:d1:82:cc:83:30:fe:93:e7:bc:ea:82:59:
                    8f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:57:AC:2A:A0:23:4F:08:B1:7A:D5:31:9B:BD:82:F8:D6:97:23:13
            X509v3 Authority Key Identifier:
                keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/DFF01B484A2B11EB8609481FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:f1:75:10:f7:96:e5:03:1f:e1:e5:f4:e8:e4:03:dd:4f:
         f5:49:53:ac:b2:be:6b:7a:23:ab:18:a9:0d:97:e1:71:e0:ef:
         c9:11:c5:0e:5c:2c:94:d1:66:89:4e:04:ee:ae:b3:72:d4:b1:
         00:ea:93:6d:2e:9f:65:11:78:35:10:58:2f:af:a4:2f:b7:fc:
         04:29:ef:2e:4e:28:86:82:90:79:8f:3d:ae:1a:2b:85:1c:f7:
         97:01:79:d4:6c:4c:5c:6c:1a:0e:5d:61:0c:ce:a5:9f:10:08:
         bb:67:c8:68:a4:e1:af:80:66:cc:5e:56:f9:34:da:11:54:24:
         1c:c7:ca:79:3f:ba:59:47:43:b3:44:90:be:65:8e:98:d2:e4:
         18:9f:05:de:c7:fa:ef:69:59:21:e5:b3:7b:2e:d6:7c:8a:51:
         ce:c1:4b:43:a0:9c:ef:66:06:7d:5f:3f:ed:f3:87:1f:8c:2c:
         15:35:8f:cd:8c:20:f1:39:1a:7d:0d:6c:e3:f0:a3:34:b2:95:
         0a:74:59:98:89:57:07:18:99:94:9b:83:2d:4b:d6:c6:15:96:
         2b:7a:9b:47:41:b3:1d:a3:3e:d5:82:5c:f6:d3:3c:bb:62:9d:
         a2:58:53:a9:bb:32:7f:03:15:d3:0a:ee:20:48:c2:a9:a9:7b:
         f9:47:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:46 2026 by rpki-client