Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/7B3E74A6025011F096E34819C4F9AE02.roa
File:                     7B3E74A6025011F096E34819C4F9AE02.roa (raw, json)
Hash identifier:          mnJ72rvKHUmTGUOwcoFQkAtnAgX3cweJBvydxFE9nQM=
Subject key identifier:   5C:BE:3D:16:A3:B1:71:29:8B:AE:30:60:C8:8C:75:FA:05:8E:8F:9E
Certificate issuer:       /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial:       C6
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/7B3E74A6025011F096E34819C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:00:51 +0000
ROA not before:           Sun 16 Mar 2025 10:21:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25160
IP address blocks:        163.223.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
        Validity
            Not Before: Mar 16 10:21:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a58a03-a3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:3b:27:5a:6d:af:2f:f8:72:cd:df:3f:dd:
                    a9:63:d7:d4:46:e9:a6:56:01:d3:85:35:35:88:25:
                    68:d3:47:aa:98:96:33:9d:62:45:b7:9a:51:b3:d1:
                    bc:a4:71:39:c4:e7:27:d0:89:02:3d:6f:60:e8:14:
                    4d:ce:fd:80:24:9a:82:82:11:cd:b4:0b:9a:85:dc:
                    f5:3c:21:65:bf:da:47:07:44:5d:a1:8b:36:82:10:
                    4f:63:01:c1:ef:c3:2c:9e:2b:4d:1f:f7:96:72:c8:
                    44:14:1e:eb:eb:98:13:8f:3c:69:46:96:5a:9d:7c:
                    53:4f:f8:e2:db:a4:52:82:24:75:14:b1:f3:94:76:
                    6e:83:1e:19:e4:a5:dc:86:96:fb:ca:dc:15:48:9a:
                    56:f2:2b:a3:bc:a4:e7:ef:8d:7e:06:57:0c:07:b8:
                    33:9c:45:30:96:ff:25:72:7f:e5:12:71:65:b1:ed:
                    1c:8d:d5:d4:ae:44:9f:5d:1b:da:2c:33:e0:5b:7f:
                    da:76:2c:cd:a9:b1:4c:bb:5b:95:dc:40:0b:79:6c:
                    69:df:49:0b:63:3a:fb:bd:e1:e4:43:e2:fb:e3:8f:
                    24:2a:b0:ab:93:3b:26:4a:f5:38:6a:eb:4c:11:8c:
                    9d:6e:92:4e:d8:31:83:10:c9:08:c4:97:81:9d:02:
                    a1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BE:3D:16:A3:B1:71:29:8B:AE:30:60:C8:8C:75:FA:05:8E:8F:9E
            X509v3 Authority Key Identifier:
                keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/7B3E74A6025011F096E34819C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:35:a7:5c:14:bb:0a:a0:4e:4e:11:29:ab:c8:a9:bb:8e:ac:
         f0:ff:de:5a:55:30:0c:48:7b:36:bc:63:fa:91:1b:63:d4:11:
         c9:ad:34:58:9a:ac:8d:39:16:cd:52:49:8f:e9:ce:08:ab:4e:
         03:1c:d5:32:23:a8:83:5d:60:42:62:20:70:80:c3:90:2f:19:
         98:00:63:b2:a0:5d:04:e0:49:00:d7:bb:a5:d9:41:ef:78:c7:
         8a:0b:ef:6b:e6:8a:20:dc:25:ee:78:22:2a:b6:5b:fe:91:1f:
         a1:9c:bb:6a:df:b4:09:08:84:5a:a9:71:cd:85:01:f3:45:2a:
         78:53:ec:86:1f:38:0b:8f:54:f8:7b:55:c6:07:2f:fd:15:fc:
         b7:de:32:ec:4e:93:d3:31:00:14:91:98:85:22:e3:a6:2a:66:
         ca:b4:db:03:37:ae:d8:a4:5f:15:69:89:37:f9:c5:aa:16:22:
         6e:a8:92:1a:31:51:19:bc:68:59:11:ff:ac:fe:a7:8e:9e:00:
         3d:ea:33:79:3e:f6:7f:ad:3a:88:4f:b2:10:25:8d:58:82:e3:
         86:7f:3b:a4:e0:a3:8e:ae:48:a7:95:94:92:25:83:70:9f:40:
         83:55:46:21:c0:36:c3:94:28:f2:6f:58:ec:2a:3e:bb:20:8e:
         77:83:22:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:21:50 2026 by rpki-client