Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa
File:                     7982D8DAA12A11ECBB6E0681C4F9AE02.roa (raw, json)
Hash identifier:          zr6nsFF++2AMCRRdUrvuTFGOgzwU6fAPmLkjCXNsNoE=
Subject key identifier:   D5:DA:85:7E:2B:D8:85:60:8C:46:30:4B:EE:FA:0C:13:38:33:5E:DC
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5F20
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:21:10 +0000
ROA not before:           Thu 28 Aug 2025 14:57:58 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63744
IP address blocks:        103.216.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24352 (0x5f20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:57:58 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60d56-3dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:61:e1:5d:b4:87:d2:ca:1a:83:f8:04:4e:
                    4f:8b:2b:c2:6d:31:a5:69:93:d1:e2:32:94:20:65:
                    db:85:fc:36:74:f3:27:25:84:79:2f:c9:22:7d:d8:
                    4f:03:9f:4a:d1:69:12:cd:6f:85:54:c5:ce:fd:b2:
                    a8:22:c8:cf:cb:36:7a:26:7d:81:4f:5a:75:53:03:
                    f5:eb:d0:56:33:16:10:56:96:01:ff:0e:40:f1:44:
                    ce:1a:7a:2c:79:f3:3b:63:e0:61:a3:74:5b:72:8d:
                    dc:d9:40:19:08:10:e4:f7:85:fe:db:dd:8b:38:16:
                    b4:fc:a2:76:af:89:51:a0:00:00:e3:80:38:4c:d8:
                    36:ae:96:19:73:ca:5d:cc:1c:c7:e3:26:2a:bc:e1:
                    f7:9e:d5:5e:8c:a6:00:f5:f1:67:12:64:04:63:56:
                    c9:5a:d3:fc:a4:8f:83:2f:7b:70:e5:9d:a5:9b:eb:
                    ae:e0:59:5d:2f:8a:6b:ea:45:9b:e9:5e:fd:16:cb:
                    ce:2e:7b:b5:53:59:33:9f:e5:d1:d6:6f:21:6a:1c:
                    66:30:ae:60:6c:af:99:39:6a:20:4a:19:ad:82:e4:
                    6c:97:a6:8a:f1:20:73:c9:da:87:ca:18:6b:95:e5:
                    d4:27:fd:da:ba:44:5f:90:1e:d6:7b:11:69:f0:5a:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DA:85:7E:2B:D8:85:60:8C:46:30:4B:EE:FA:0C:13:38:33:5E:DC
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7982D8DAA12A11ECBB6E0681C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:1a:8c:3a:2d:37:7a:4b:f3:d3:0a:b8:59:ea:0d:ea:43:4e:
         3c:89:c9:6b:9f:d6:d3:42:33:bb:65:0b:72:78:5f:1a:87:7a:
         22:ec:90:60:9c:e1:9b:7b:bc:b1:2a:9a:ee:16:7f:71:2b:e2:
         40:f1:f9:0d:b4:27:67:40:85:06:ed:84:f5:36:f9:2a:a4:dd:
         15:bf:23:e4:a2:71:c2:89:35:07:ab:9f:06:7d:7f:f3:ab:86:
         9c:51:c3:02:6c:3f:68:ae:61:02:78:00:fe:88:25:2c:4b:b4:
         4e:3a:0b:14:ff:60:32:67:b0:2b:bb:43:33:6c:39:f7:31:91:
         e7:98:54:2a:e5:8c:36:0e:ec:15:f1:2e:4e:b7:07:45:5e:66:
         86:a8:af:0e:91:72:6a:9b:2e:a6:fc:bb:78:c9:6d:5b:5d:df:
         9c:04:74:cf:c8:06:9c:24:8c:df:2e:78:05:b7:f2:60:ee:a8:
         ba:54:70:a7:af:d6:bf:53:c4:77:ea:c8:b7:29:74:fa:08:13:
         bb:a9:66:2f:06:87:6b:3b:ca:be:5e:a9:81:21:9d:59:02:e6:
         27:32:c4:6f:be:5e:37:92:35:be:2c:6e:b4:08:ff:2b:25:97:
         bf:02:64:b3:94:61:91:1f:a1:cd:c9:39:6a:3c:2d:44:54:63:
         6f:80:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:49:00 2026 by rpki-client