Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/DD21ADFACA7311EBAA6E0567C4F9AE02.roa
File:                     DD21ADFACA7311EBAA6E0567C4F9AE02.roa (raw, json)
Hash identifier:          V6rPhNEgfFSYoMAOj/JkTn27sOkQ/m44MmBwpVWrZVs=
Subject key identifier:   B3:13:8D:B2:BC:25:F7:47:61:0C:9A:A4:CC:A6:1F:E4:0B:0F:23:59
Certificate issuer:       /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC
Certificate serial:       068E
Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/DD21ADFACA7311EBAA6E0567C4F9AE02.roa
Signing time:             Thu 02 Jul 2026 23:24:26 +0000
ROA not before:           Thu 02 Jul 2026 23:24:26 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142283
IP address blocks:        103.167.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl
                          rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678 (0x68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158877, serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC
        Validity
            Not Before: Jul  2 23:24:26 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a46f32a-de63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:12:b3:3d:d0:24:68:ad:c7:89:9c:c5:c3:
                    72:5d:4d:7c:1d:a3:e3:84:4b:55:50:98:20:76:14:
                    9a:66:8e:b1:f1:cd:1e:8a:e7:11:64:34:c0:09:a6:
                    2c:35:cb:8d:4c:51:ed:3e:30:91:69:10:eb:04:4b:
                    e6:40:d0:0b:a9:6b:44:d5:c4:8f:a6:b1:d7:c2:89:
                    d6:9d:da:2e:53:40:e0:1c:de:1d:9b:5a:e0:82:34:
                    14:da:25:e6:6a:dd:9a:0d:f0:0c:75:d5:88:d6:18:
                    17:4b:bc:b7:63:14:73:c6:ab:f3:71:70:87:30:cd:
                    56:06:25:bb:0a:d9:24:20:53:f3:23:61:06:9b:58:
                    fd:11:39:a1:1f:a5:11:00:2f:3b:9e:68:ab:92:92:
                    c0:15:f1:2e:15:65:42:b3:66:3f:7b:f6:18:5a:5f:
                    f1:82:50:38:87:88:c7:f1:68:ae:df:1e:9e:b6:42:
                    d2:ea:3d:68:73:dc:2e:fe:26:81:44:91:aa:73:40:
                    cd:3d:90:88:2e:f6:02:6d:0f:ce:3e:df:1a:60:88:
                    6f:aa:5f:a5:d9:7c:2d:38:ee:59:fc:ae:91:d6:32:
                    bf:d6:f6:27:88:7d:8c:b5:59:a5:1a:d0:60:22:e7:
                    3a:78:43:d7:3f:a5:fd:a9:00:4c:9e:57:3b:9e:5a:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:13:8D:B2:BC:25:F7:47:61:0C:9A:A4:CC:A6:1F:E4:0B:0F:23:59
            X509v3 Authority Key Identifier:
                keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/DD21ADFACA7311EBAA6E0567C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:1a:dd:81:35:d1:e8:98:29:72:11:0d:ac:29:ad:0d:32:4d:
         66:81:c8:ba:5b:86:2f:52:58:ae:61:78:2a:d9:4c:ae:c0:d0:
         6b:2b:7c:02:9c:99:2e:f7:f4:34:25:a7:a3:51:ad:fe:9a:34:
         dd:11:bb:26:48:63:35:db:16:2c:30:01:b1:36:ea:36:c4:47:
         09:26:fc:82:88:4b:20:d5:be:ac:c6:17:7e:34:51:65:2d:92:
         a3:d6:92:6b:3d:0d:87:26:0c:18:04:8f:71:f3:32:93:21:1f:
         51:6c:19:f3:f7:b9:17:41:2c:a8:64:05:a4:83:f3:4c:c5:b3:
         69:f1:62:35:a9:c3:8e:3e:31:8d:79:52:ab:19:f1:ff:2f:3b:
         f8:87:61:a4:a2:85:b4:06:07:09:8e:d4:19:9e:26:cd:a1:82:
         39:c2:43:46:9e:5e:0a:ae:dc:af:f8:d5:b9:2c:3f:89:75:56:
         dc:9d:65:fd:5e:1f:98:9d:15:82:c1:a3:1b:4c:48:47:39:dc:
         ac:53:df:03:41:70:f4:0a:31:2f:26:06:6e:1a:b1:e2:ef:51:
         71:7b:9e:18:a1:56:05:95:1f:d3:09:8b:f5:e8:32:3e:9c:fd:
         d6:f3:db:02:a6:23:7e:5c:5f:25:c0:93:d6:8b:30:b9:77:b7:
         ea:e1:52:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:05:22 2026 by rpki-client