Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/EA83E6F458D311F18E39767BA5833773.roa
File:                     EA83E6F458D311F18E39767BA5833773.roa (raw, json)
Hash identifier:          7aqLjxsVl/1/yFN4z+qOSpO/mBLZpSJYB4XFpd0ZCI4=
Subject key identifier:   9C:62:5A:17:A9:13:88:C9:DA:8F:FD:5B:8F:CB:E8:0E:C0:0F:1B:33
Certificate issuer:       /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Certificate serial:       0337
Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/EA83E6F458D311F18E39767BA5833773.roa
Signing time:             Tue 26 May 2026 07:24:22 +0000
ROA not before:           Tue 26 May 2026 07:24:22 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        103.165.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
                          rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 01:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
        Validity
            Not Before: May 26 07:24:22 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a154aa6-d777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:8d:39:07:21:36:bf:0e:c6:5e:22:17:31:
                    27:d5:32:96:5a:67:2e:85:fc:88:47:dd:2a:d3:99:
                    d2:9a:1b:56:68:43:8b:54:0d:ef:49:26:54:fa:56:
                    23:fa:2f:1d:47:c7:5c:69:18:af:5f:22:13:01:39:
                    cf:2b:97:10:30:e0:82:f0:d4:41:41:21:b0:31:b7:
                    e0:21:28:1d:8b:b4:93:19:ce:ab:e9:10:5f:80:d2:
                    ba:33:5b:0a:55:27:37:d7:1f:de:91:44:a3:51:5c:
                    18:b4:37:0e:d7:5b:44:db:7e:a0:18:87:fa:c5:26:
                    43:a4:cd:9c:32:ea:59:0e:69:b4:45:a3:d1:f0:32:
                    bd:fe:4a:08:8b:1f:ac:35:12:22:bd:b2:3c:c6:89:
                    55:bc:f5:bf:4e:79:73:8e:73:0b:f5:bc:bd:48:50:
                    47:b5:3d:ec:3f:03:91:2c:1d:8f:6c:12:d9:bc:70:
                    15:84:2a:69:e3:63:3b:2a:05:02:34:12:7b:f2:24:
                    32:e9:94:12:f9:d0:45:05:01:f8:b0:25:db:f7:48:
                    c0:f8:f9:0c:f6:6d:fc:5c:69:08:c3:22:b6:ca:8d:
                    8b:5e:82:15:a1:3b:c9:36:fb:c0:85:01:5d:10:ad:
                    11:82:7e:dd:c4:a9:31:a7:92:95:e9:c9:3f:3c:e4:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:62:5A:17:A9:13:88:C9:DA:8F:FD:5B:8F:CB:E8:0E:C0:0F:1B:33
            X509v3 Authority Key Identifier:
                keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/EA83E6F458D311F18E39767BA5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:85:71:2f:f3:12:38:4d:60:27:d7:e7:1e:2c:02:39:b3:5e:
         77:ad:e2:57:72:ff:b9:53:83:aa:6a:78:b0:34:e5:8f:85:a3:
         ff:05:58:75:8b:13:91:26:50:0e:62:d4:6d:41:6b:d4:1f:f3:
         07:77:5d:2a:c7:cb:68:a5:5b:3a:70:76:f4:31:77:3d:6e:56:
         67:cd:a3:e6:ad:66:73:bc:e7:20:5a:c3:1b:69:99:8f:57:3a:
         e1:3c:77:e1:70:86:72:a9:8e:3c:19:a3:9b:ef:d2:db:bf:6b:
         52:fc:89:49:ab:ac:82:ea:50:64:df:e0:04:26:84:fd:be:f9:
         f6:61:be:7d:fe:86:20:3b:43:92:1e:4a:f7:2b:ec:1d:f3:e1:
         34:0e:6e:62:99:e0:ab:8b:58:cb:26:fd:75:e7:e0:94:20:0f:
         ad:12:7f:74:7a:9f:c7:bf:21:9a:bf:97:79:b3:60:79:63:2c:
         5c:70:31:30:88:7f:0e:f8:50:99:39:fe:0e:a4:64:0f:79:ad:
         9b:b2:6d:48:1d:05:c2:09:de:7a:78:49:54:6d:9b:f4:af:2c:
         6b:63:65:88:ff:50:6e:ec:70:d8:cf:95:85:3f:ff:ba:5b:09:
         d1:5e:f8:ac:69:36:ea:f6:b1:92:c6:68:2a:b5:05:92:af:3b:
         bd:87:71:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 06:28:09 2026 by rpki-client