Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/DD21ADFACA7311EBAA6E0567C4F9AE02.roa
File:                     DD21ADFACA7311EBAA6E0567C4F9AE02.roa (raw, json)
Hash identifier:          kYZQI102gULrlo6M+q/iNg80nEai3K/GkCEv6GP+lLg=
Subject key identifier:   B4:3F:3B:D6:B6:B7:C8:8D:13:97:93:B3:54:14:83:35:CA:2D:C6:71
Certificate issuer:       /CN=A9158877/serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC
Certificate serial:       0649
Authority key identifier: A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/DD21ADFACA7311EBAA6E0567C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:57:56 +0000
ROA not before:           Tue 01 Jul 2025 00:02:44 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     142283
IP address blocks:        103.167.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl
                          rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 22:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158877, serialNumber=A3B16481B5D6C179FC0B73AE1E0E53DE967641DC
        Validity
            Not Before: Jul  1 00:02:44 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a453f4-3033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:03:ca:37:9d:16:f0:6e:12:d3:29:9c:8d:
                    ed:d8:5f:39:42:87:13:56:9f:b2:4c:af:7b:93:9a:
                    d7:61:25:e7:af:7d:50:76:fa:c6:5f:45:f2:37:9f:
                    95:30:68:71:82:b3:1b:7a:b0:86:fb:8c:ab:b7:ea:
                    44:e6:1c:a2:8c:7a:34:d8:98:1c:b3:56:a9:af:ff:
                    d7:53:a6:af:e1:40:13:1d:2d:93:8e:3b:17:cf:8c:
                    17:54:2c:79:c7:b9:b8:7f:28:9f:8e:55:10:91:43:
                    34:e3:44:cd:f1:bb:90:f9:be:60:71:ee:25:80:7c:
                    ee:95:57:69:49:c0:3c:89:f1:77:2b:f3:6b:71:7a:
                    4e:15:3a:73:3f:84:1e:18:f0:ab:8e:a9:09:ab:41:
                    35:8c:ae:80:95:37:4e:3d:d8:4c:6a:59:a2:a3:d5:
                    19:f4:40:a8:26:b3:a6:14:a1:68:3f:8b:f6:20:1f:
                    74:a7:ac:f4:f6:aa:9e:fc:12:0d:be:02:36:68:58:
                    77:6f:18:9b:97:1d:78:68:e8:95:46:9e:0c:9e:dd:
                    5f:bc:c8:14:51:13:ae:7d:b5:18:ea:77:a2:75:dc:
                    f3:09:a7:bc:89:c9:d6:78:ea:63:8e:a8:2e:60:b9:
                    fb:94:ee:0d:25:53:fb:e3:74:4b:92:66:bd:28:80:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3F:3B:D6:B6:B7:C8:8D:13:97:93:B3:54:14:83:35:CA:2D:C6:71
            X509v3 Authority Key Identifier:
                keyid:A3:B1:64:81:B5:D6:C1:79:FC:0B:73:AE:1E:0E:53:DE:96:76:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7FkgbXWwXn8C3OuHg5T3pZ2Qdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158877/F05858B8CA7011EBA9D2DC61C4F9AE02/DD21ADFACA7311EBAA6E0567C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:db:2e:4d:e7:af:ad:f3:6e:dd:33:50:14:bf:bc:d1:76:d8:
         88:cd:fd:2f:1a:b7:35:a9:0c:6b:38:d7:9b:89:44:ff:c7:22:
         ee:17:7c:de:04:8f:25:da:e5:60:10:35:05:75:da:4e:6e:b5:
         98:4b:63:17:c6:c9:ab:86:fb:ef:93:26:66:d9:f4:5f:a4:4f:
         2d:e2:97:bb:43:dd:4a:0b:da:84:a0:a9:69:fb:b4:be:c8:ac:
         a9:75:5b:0a:0a:bd:cf:3c:e4:31:c8:60:43:48:f3:a3:f3:4b:
         7e:06:2e:46:e2:bb:f7:ca:7e:41:f0:a3:5d:f3:65:f1:30:3b:
         c9:17:4f:56:a0:5e:09:d0:bf:f7:c6:94:3e:b4:b0:fe:1b:22:
         71:3c:e3:f7:7e:95:49:76:91:98:10:e3:af:b5:58:27:a9:da:
         65:dc:2e:53:02:4f:fb:df:fc:75:c7:e6:7c:6f:c2:ab:f3:95:
         34:87:7e:d7:62:57:a2:32:18:06:6f:30:e8:47:2a:ec:1a:b5:
         a2:62:6d:0a:00:dd:9c:7e:ae:33:8f:97:de:65:cf:db:33:43:
         c1:a3:c3:ba:ca:28:df:09:e8:6f:68:77:35:2c:47:30:cf:63:
         83:7f:bb:25:57:ea:39:84:1d:4c:63:c1:e7:97:57:b1:4e:44:
         11:40:55:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:48:21 2026 by rpki-client