Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EE4CE898A00D11EEBF637850C4F9AE02.roa
File:                     EE4CE898A00D11EEBF637850C4F9AE02.roa (raw, json)
Hash identifier:          APwDvOpzii5ltdO4fa2ouT0Qkl5kZhmsk34l7mRtOHY=
Subject key identifier:   3E:EA:19:B2:4D:A7:E8:D1:20:7C:58:F6:5D:01:C9:BC:3E:6D:94:C9
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E8B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EE4CE898A00D11EEBF637850C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:18:41 +0000
ROA not before:           Thu 28 Aug 2025 14:55:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151865
IP address blocks:        103.255.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24203 (0x5e8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:45 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60cc1-eec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:79:c9:3d:1b:0f:30:88:86:78:b5:68:ed:
                    94:d6:48:2b:d9:5e:ef:18:8a:aa:ab:39:08:eb:ed:
                    44:27:1b:a6:27:2c:f1:93:65:1a:b3:15:d1:36:c0:
                    dd:27:16:89:17:c7:ee:9d:d6:f7:a1:07:6a:77:2d:
                    ab:e6:c3:90:4f:fc:3d:6b:dc:8e:eb:f8:74:da:84:
                    a6:c7:d6:73:32:85:6b:e6:b7:5c:57:0a:76:67:01:
                    22:e8:d6:27:4a:0f:86:7e:89:f2:ee:92:3c:fe:49:
                    8a:a6:c7:85:8e:b1:70:5b:f5:46:8f:a0:4f:4a:75:
                    93:8f:3e:21:79:44:ba:13:2f:3c:c0:3f:d2:96:b5:
                    d7:05:f5:60:35:49:4a:03:40:84:e6:25:f7:72:ad:
                    3c:6a:11:a9:43:3f:54:93:95:03:44:46:c3:1f:d2:
                    15:30:f0:46:03:f1:e2:e7:1d:e1:06:ac:8b:4b:83:
                    41:9d:ec:52:c2:20:99:ef:2d:94:e5:a9:00:80:03:
                    89:c6:a9:d3:85:6c:3d:b7:12:5c:e5:46:ca:75:db:
                    32:57:6d:10:9f:42:a5:f9:26:4c:9a:15:e0:ad:e5:
                    d9:9f:c6:19:ad:61:6d:42:08:d5:39:b0:9a:cd:dc:
                    0c:cb:73:a3:a3:70:c9:2c:ae:2a:7c:b7:6f:09:9d:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EA:19:B2:4D:A7:E8:D1:20:7C:58:F6:5D:01:C9:BC:3E:6D:94:C9
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EE4CE898A00D11EEBF637850C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:77:25:01:b5:4d:41:00:4d:1c:a2:1f:ce:74:87:61:89:66:
         9d:f2:d2:e1:b6:cf:45:10:23:32:1c:70:d2:b3:49:7e:48:49:
         3c:0b:e9:05:45:c8:a1:36:2a:60:92:7f:68:d2:74:88:50:d1:
         36:db:31:1d:c9:5b:d0:44:c8:e6:86:0b:c1:cc:d0:55:c9:c2:
         f7:cd:19:77:19:12:a6:ff:36:3b:5f:b0:91:d7:be:19:aa:77:
         34:5b:ac:85:2d:a4:b3:7b:0b:25:0a:56:aa:c1:8f:cd:dc:f5:
         86:23:34:b0:f8:f9:85:d3:b0:9c:92:11:0a:6b:6b:d7:54:4f:
         7b:4f:97:b5:5b:c1:d1:f6:6e:f5:99:84:b2:bb:a4:1b:10:be:
         8a:1f:7e:2f:f2:bd:82:8f:40:b7:12:32:90:59:83:36:f6:e3:
         a9:a4:a3:75:b8:ff:37:39:be:9f:a5:5f:77:4f:0c:3f:a5:af:
         fb:75:84:1e:89:69:17:2c:c1:9e:80:cc:1c:7e:b3:9a:f1:d7:
         3e:d6:65:2e:1c:23:69:47:4f:15:e5:04:3a:6f:cb:6e:0a:72:
         ab:0d:87:13:0d:08:fd:ad:ef:6b:f5:c8:c0:57:40:85:49:0a:
         52:75:f4:08:19:d6:3b:04:ca:4f:23:97:dd:cc:71:9b:ec:bc:
         01:9d:24:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:58 2026 by rpki-client