Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/BA2C0A9E673A11F0B876713DC4F9AE02.roa
File:                     BA2C0A9E673A11F0B876713DC4F9AE02.roa (raw, json)
Hash identifier:          k7KAeEujUB9hyqnv/uSDh4wrDBFacTBtGdVKJFRlzqg=
Subject key identifier:   59:57:D2:19:5F:9A:AE:08:DB:FE:0F:93:40:8B:A7:AF:A5:B5:B3:63
Certificate issuer:       /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial:       7B
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/BA2C0A9E673A11F0B876713DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 11:29:59 +0000
ROA not before:           Sun 25 Jan 2026 06:25:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        103.82.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
                          rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 06:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
        Validity
            Not Before: Jan 25 06:25:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a574b7-aaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:57:69:aa:ca:e6:84:bf:50:f7:f1:52:7f:
                    6e:60:a5:de:b6:2e:b9:5c:6a:2b:35:96:22:c2:74:
                    fc:41:19:4c:c7:f6:e8:35:99:10:1e:2c:6f:bd:37:
                    e8:55:56:6a:2f:c6:28:d1:aa:2b:36:52:91:f3:7b:
                    c7:ef:5b:9d:dd:c7:fb:eb:33:97:7d:a7:7b:93:c4:
                    7c:ce:90:2c:d4:3b:d9:91:87:4b:75:64:a2:ef:01:
                    e7:2d:28:95:4d:54:58:1c:8f:dd:73:c0:2b:09:f5:
                    35:67:74:15:f1:b0:7c:8a:2a:97:fa:c4:1b:db:23:
                    45:07:f6:4f:8f:c6:ed:bb:ef:e3:fa:de:4e:4c:96:
                    5c:85:84:96:6d:7a:68:b0:0e:9d:50:54:e4:c9:30:
                    f0:52:b8:ec:43:1d:55:47:ff:f4:78:f1:52:86:3a:
                    c8:3c:60:a7:60:81:85:e1:dc:6e:e7:0d:57:e1:9c:
                    95:f9:8b:09:14:93:a7:ce:8f:83:11:e4:8b:3d:52:
                    d1:de:4f:f6:60:46:2c:2c:59:ce:cb:aa:18:26:32:
                    2f:91:18:f7:90:f3:b3:2b:6c:69:6a:20:e7:ea:69:
                    86:86:72:7b:f2:05:5c:7b:56:30:87:21:b1:41:dd:
                    56:40:6c:79:b5:18:44:2b:1a:89:a0:ac:81:35:6c:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:57:D2:19:5F:9A:AE:08:DB:FE:0F:93:40:8B:A7:AF:A5:B5:B3:63
            X509v3 Authority Key Identifier:
                keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/BA2C0A9E673A11F0B876713DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:4c:c5:62:a3:66:18:3c:1d:40:eb:aa:b0:6d:1a:35:59:2b:
         2d:87:90:8a:23:4a:83:29:07:bc:ee:e9:2b:5a:6c:bb:fc:ed:
         de:70:7b:a5:7a:05:d8:94:a7:ad:fd:c2:96:6c:4c:b1:95:c1:
         9f:c2:c5:b0:1f:41:e5:4f:10:72:55:ea:d4:f4:53:12:14:63:
         d9:67:03:73:a5:54:3e:6a:da:03:8c:5e:34:d4:cc:7e:a6:8e:
         25:0f:a5:6c:45:d6:95:d1:57:d5:ca:7d:2b:12:a5:a7:87:a5:
         fa:42:f2:3b:62:b7:f4:b4:3d:b3:1d:8d:94:f9:54:69:43:e7:
         d7:c4:44:ef:d5:17:f9:52:a7:48:2e:b3:d7:be:eb:e3:96:6a:
         ca:73:43:8c:6f:0c:fb:c4:e1:f4:39:bf:1c:47:f0:8b:5c:c1:
         2f:e8:c6:15:a2:d5:e8:f4:d4:80:98:eb:ef:d2:bf:03:fd:71:
         3c:16:a6:47:7f:1f:44:21:ce:f9:9b:96:d7:99:9c:e4:27:8b:
         9a:8b:de:8f:97:a3:50:3e:d2:fa:ae:36:5c:38:46:c8:37:38:
         ec:69:8f:54:08:03:5e:ce:65:4c:29:59:82:44:98:d4:ff:3c:
         d9:cc:6d:0c:c4:7c:2c:d8:53:ec:81:1c:7a:b2:29:cf:3f:67:
         86:ee:df:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 14 06:15:26 2026 by rpki-client