Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/23278196817011F08F821330C4F9AE02.roa
File:                     23278196817011F08F821330C4F9AE02.roa (raw, json)
Hash identifier:          K179hMKdLoxU3fcjhFpl4oIAzgPhUpuymRDyJiLWdYY=
Subject key identifier:   4F:99:F8:D5:93:12:FE:0B:65:E8:8A:41:F6:2E:CE:AE:C7:CB:47:D1
Certificate issuer:       /CN=A91764C1/serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482
Certificate serial:       6C
Authority key identifier: E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/23278196817011F08F821330C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:00:43 +0000
ROA not before:           Sat 27 Dec 2025 06:25:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149014
IP address blocks:        103.160.50.0/23 maxlen: 23
                          103.160.50.0/24 maxlen: 24
                          103.160.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl
                          rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 06:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764C1, serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482
        Validity
            Not Before: Dec 27 06:25:39 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5980b-6296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:6b:4d:c5:92:ce:3f:7e:df:42:36:eb:71:
                    38:e6:46:1d:a7:eb:df:5f:fc:01:b1:10:15:bf:ba:
                    11:2d:c9:ee:46:08:4b:af:4c:14:33:8f:ca:b8:e6:
                    a8:f3:31:ec:4d:1c:59:29:53:4e:28:68:20:b2:1a:
                    a0:62:b8:c1:c3:5c:a9:fe:c7:cd:47:49:4f:2e:07:
                    9a:a0:7d:12:d2:c8:a1:7d:98:e2:48:3c:e8:5f:c6:
                    55:b9:43:21:b2:81:91:a4:15:bb:8b:43:b5:22:6f:
                    e2:57:12:f0:92:a1:37:83:0c:a4:a8:71:eb:d2:2f:
                    56:7a:fd:3b:91:41:f3:0e:bc:b0:5b:7c:5c:80:52:
                    8c:f8:5d:64:61:53:51:04:05:d4:c5:d8:57:e8:56:
                    21:89:9a:b2:68:1a:ee:92:84:ad:8d:e1:f9:8a:0a:
                    90:27:f1:00:45:06:d1:7b:62:8d:f4:69:1c:7d:c2:
                    5f:45:89:4c:3b:a6:e3:d4:24:bf:8e:8b:46:3c:48:
                    40:eb:e2:2c:ae:bb:91:72:cb:73:7f:ce:5c:69:7b:
                    30:54:ee:de:81:fd:b0:9f:a1:08:f4:fc:c7:0d:ce:
                    03:b7:0d:88:f7:01:f9:ce:72:fd:c3:fc:01:80:ab:
                    e3:76:57:93:7f:9a:0d:91:1f:8e:2c:21:ca:8a:04:
                    98:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:99:F8:D5:93:12:FE:0B:65:E8:8A:41:F6:2E:CE:AE:C7:CB:47:D1
            X509v3 Authority Key Identifier:
                keyid:E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/23278196817011F08F821330C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:e2:b3:c7:ad:fd:4e:ab:14:aa:89:10:de:34:d6:5c:74:89:
         b8:3a:21:d4:b4:c7:66:f0:d8:ae:a5:13:b2:e5:93:ad:3d:64:
         c5:98:49:8a:8d:ab:58:ee:ab:bf:07:3c:95:b1:fd:72:37:26:
         04:13:a1:70:a0:be:79:25:81:cd:15:0e:a5:01:ce:98:e9:16:
         4b:72:6f:16:63:b4:45:df:8a:09:10:73:df:a7:1b:03:23:f5:
         9c:2e:5a:51:44:92:1c:2a:2e:3a:ae:c9:fb:ba:04:8e:88:31:
         02:64:d9:e6:de:d3:17:14:c0:a7:b5:07:4b:1f:bf:16:07:4a:
         5c:92:ec:cf:35:71:b7:70:33:1c:08:11:a9:05:1d:16:50:13:
         00:ee:5e:19:72:75:2f:4b:41:7d:65:ae:10:ce:03:f7:0f:26:
         04:76:7b:87:41:e6:fd:b1:d9:7a:2c:e3:a8:74:9a:1f:42:cd:
         44:09:61:1a:6a:e4:0d:fe:17:53:89:ba:57:d9:78:9a:5b:82:
         ce:d8:38:e0:e4:90:d3:25:1a:4c:92:0e:0b:88:3b:51:9f:f2:
         1b:bb:f9:ab:22:01:10:34:d7:83:d2:d2:c2:62:cf:a8:c4:ef:
         53:39:f4:63:b4:5b:6e:e1:94:e9:b6:92:9a:c7:85:93:0a:f8:
         7c:0b:f6:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 6 09:58:27 2026 by rpki-client