Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6EF22D0A07C411EF8A38A486C4F9AE02.roa
File:                     6EF22D0A07C411EF8A38A486C4F9AE02.roa (raw, json)
Hash identifier:          4Fa1sf+qimJbjQOgQPIn1jlun6T1P/IngBC7M6XYKmw=
Subject key identifier:   C7:91:E8:1A:58:94:EA:F9:F6:E6:27:1D:B6:A4:18:60:A8:92:22:CB
Certificate issuer:       /CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
Certificate serial:       016B
Authority key identifier: EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6EF22D0A07C411EF8A38A486C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:47:04 +0000
ROA not before:           Fri 03 Oct 2025 05:32:00 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     7594
IP address blocks:        103.157.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl
                          rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165772, serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
        Validity
            Not Before: Oct  3 05:32:00 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a594d8-7f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:73:f8:6e:13:60:19:5d:72:be:f2:84:b5:
                    f4:0c:b5:88:a7:5a:46:93:7a:f3:20:17:50:50:5b:
                    fd:a3:04:47:d7:a1:bd:05:7c:88:9e:96:3d:01:df:
                    c8:dd:fa:f1:1c:aa:bd:4a:d0:a4:58:5f:24:43:3f:
                    9f:a5:49:1e:0e:8b:7b:e4:b7:d8:4b:01:20:1a:83:
                    61:78:0d:54:51:89:e6:42:81:41:de:72:18:31:d2:
                    d4:d4:5f:ce:0c:b7:99:5e:5b:75:65:69:b4:4c:11:
                    50:23:65:35:53:13:57:8e:07:70:4b:55:fd:1c:ca:
                    f3:16:e4:df:98:0a:89:71:f7:d4:f4:05:b0:ef:6c:
                    a5:cc:3d:46:69:ba:0b:5f:eb:17:a1:ea:84:c1:79:
                    30:87:8b:0d:fc:6d:71:06:f9:61:9b:bc:bc:39:9d:
                    da:6e:ba:3c:79:8a:80:4a:2f:52:8b:bf:49:53:a8:
                    e7:f2:9e:18:0b:a6:cc:13:76:fb:be:d0:eb:c1:d8:
                    5e:7a:a8:05:1c:0b:1c:82:e9:c5:8c:6c:a2:fd:01:
                    55:76:f4:43:93:74:e6:c7:61:c8:28:f0:c7:70:57:
                    62:7a:40:10:cd:c0:9d:48:a1:de:bf:56:df:68:cb:
                    84:93:a3:9f:42:1d:6f:14:db:06:07:56:eb:ca:24:
                    e9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:91:E8:1A:58:94:EA:F9:F6:E6:27:1D:B6:A4:18:60:A8:92:22:CB
            X509v3 Authority Key Identifier:
                keyid:EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6EF22D0A07C411EF8A38A486C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:48:d6:9b:6d:47:f4:84:04:dd:04:9b:89:05:51:ef:27:f4:
         c6:41:5f:1d:91:a7:da:66:3a:51:00:e6:7f:72:66:5d:45:7d:
         21:6c:bb:d1:14:c7:fb:5e:93:cb:37:c4:bc:87:fb:47:3c:c2:
         1f:48:06:b6:3a:ff:1b:29:18:d1:1c:4d:05:4a:ce:c6:63:0f:
         71:98:0e:e7:b6:92:2f:f9:b6:f0:07:16:f4:5c:4b:ba:b8:fb:
         7b:d1:19:f1:ca:07:d6:75:99:c8:02:96:55:86:86:0f:d8:c0:
         92:bd:53:98:96:c2:23:5f:39:70:e4:02:9d:f7:1e:e4:52:26:
         ec:f0:b8:22:31:39:78:2c:9d:35:d1:6a:0d:8a:7d:28:2b:43:
         17:55:89:28:5d:46:71:67:f9:40:49:0d:4c:4d:bb:18:8a:21:
         fa:93:e9:01:8c:5f:14:66:67:e6:6e:7f:e8:6e:eb:7b:09:e9:
         a2:33:a8:c1:d8:80:0f:44:05:4d:45:4b:34:57:44:c4:28:96:
         30:8b:c4:de:f6:10:37:54:a2:4a:7d:fb:b6:47:c0:ef:34:f7:
         36:46:67:79:f5:0a:9d:fb:3e:07:13:aa:c4:6d:ff:f9:92:d0:
         3e:ba:89:5b:db:37:84:bc:21:ea:d8:d1:e9:f6:b7:f2:23:96:
         0e:e5:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:16:34 2026 by rpki-client