Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
File:                     166B5FEA727711EEA4209110C4F9AE02.roa (raw, json)
Hash identifier:          Gh38xaTvZrK4l0ysrgYsOoGdHMrtwRr8XVbczv1+ALU=
Subject key identifier:   59:7A:5E:53:D8:53:88:C3:F6:84:76:B5:7B:AF:35:BE:F0:B8:42:E6
Certificate issuer:       /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Certificate serial:       0211
Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 02:54:29 +0000
ROA not before:           Fri 07 Aug 2026 02:54:29 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132227
IP address blocks:        103.214.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl
                          rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
        Validity
            Not Before: Aug  7 02:54:29 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7548e5-7821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:83:32:da:56:10:89:3d:26:ca:39:7e:19:
                    08:70:04:d5:ff:2f:17:0b:ae:fe:76:a9:7a:75:a5:
                    54:88:5c:97:63:65:38:b5:c2:e4:f5:98:09:e5:89:
                    1f:96:cc:aa:43:a7:1c:c7:03:89:90:0f:6f:83:c0:
                    dd:a2:64:2f:0a:1f:ef:23:2b:a7:ea:d5:a7:9c:5b:
                    8d:dc:35:92:3f:56:21:1e:40:f6:6c:04:9f:46:83:
                    76:c0:b3:47:bc:87:2e:59:9a:3d:e2:1d:9f:58:aa:
                    6a:49:6b:2d:ca:10:1a:a4:50:83:28:e5:c3:cc:b4:
                    c6:4e:2b:61:da:53:6f:72:1b:ef:47:7e:82:cc:6f:
                    98:82:e7:71:10:03:03:e3:63:88:b5:a2:ea:d9:e5:
                    fd:47:a0:eb:4a:39:3b:bc:be:9d:08:8e:e7:22:a0:
                    b2:4d:df:57:25:bc:c6:3f:83:c0:3c:c0:3c:4e:6d:
                    79:2c:b6:d7:77:7d:70:d2:49:1b:c1:2e:6d:da:7f:
                    2c:cd:53:2c:72:14:27:15:3c:44:6f:43:05:bc:81:
                    f5:01:1e:31:a5:7e:27:13:10:b6:8f:43:1c:cf:6b:
                    6d:c2:7b:c4:cd:96:5d:b6:de:3c:cd:b5:cc:ac:da:
                    48:d6:8c:bd:30:5e:11:91:b5:2b:c6:39:0d:f7:ae:
                    f4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7A:5E:53:D8:53:88:C3:F6:84:76:B5:7B:AF:35:BE:F0:B8:42:E6
            X509v3 Authority Key Identifier:
                keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/166B5FEA727711EEA4209110C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:92:39:b1:e2:63:8c:64:a4:b1:c6:9e:e9:dd:2f:5a:88:16:
         93:3a:bd:33:5d:83:dc:7a:b1:59:14:0a:5b:c8:6d:f6:a0:0d:
         47:49:e3:01:18:13:2e:19:f0:39:93:49:75:77:ca:78:a4:f3:
         d9:dc:ba:56:a8:8b:ae:a6:b2:96:d8:89:34:7b:a6:a6:9b:e3:
         76:07:74:7f:70:d4:be:9a:40:05:ae:de:81:1c:ec:6c:22:f1:
         f2:93:48:6d:9c:99:8a:16:cc:fe:bd:12:9c:02:82:4d:2e:50:
         b2:3d:5c:6e:6b:d3:89:8c:bd:e8:d2:2e:8b:03:66:1b:06:26:
         bc:cb:be:95:4c:e9:03:e1:e1:ea:46:94:c0:19:b4:29:98:ff:
         d7:fa:30:35:a1:80:96:cf:ba:9a:ae:c6:2d:18:15:6c:c3:25:
         57:1a:39:71:b5:2a:41:fc:6f:79:d9:ff:32:b1:78:00:46:2e:
         d6:36:e7:91:7b:2a:a0:d0:59:51:81:d7:31:81:d4:ff:8b:7f:
         35:eb:e3:91:df:32:52:3a:c8:4f:23:76:46:a6:fc:61:e9:3f:
         c5:90:fa:2d:c4:d0:98:01:a8:27:26:19:a7:61:b7:20:2c:11:
         f7:96:69:f7:85:87:50:65:4e:29:c7:9a:bb:0f:77:f6:96:1b:
         0a:f5:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:20 2026 by rpki-client