Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/DFF01B484A2B11EB8609481FC4F9AE02.roa
File:                     DFF01B484A2B11EB8609481FC4F9AE02.roa (raw, json)
Hash identifier:          YiR4JbsKw+GFv+2ph6Z6RjnVItfR5VK3GT7W/gU8znA=
Subject key identifier:   41:74:76:DF:3A:CA:7E:54:0F:F3:99:9A:35:E3:F9:A6:C5:73:F3:09
Certificate issuer:       /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Certificate serial:       0787
Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/DFF01B484A2B11EB8609481FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:40:39 +0000
ROA not before:           Sun 30 Mar 2025 21:53:08 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     59356
IP address blocks:        103.225.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
                          rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
        Validity
            Not Before: Mar 30 21:53:08 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3fb87-d4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:3e:67:04:7d:12:68:ed:14:dd:5d:36:5a:
                    32:c1:a6:e2:a1:af:3d:cb:fb:9b:69:b1:00:bc:94:
                    1f:08:ac:7e:d5:15:9a:3d:0e:3b:66:f9:bc:6d:35:
                    7f:ec:3b:27:09:c9:b3:78:43:aa:5c:2a:1f:0d:27:
                    65:24:ed:2a:7e:03:2c:85:cf:26:9b:e3:46:03:b0:
                    7d:67:0f:08:be:01:6d:ee:3b:e1:3c:64:a2:94:dc:
                    0d:33:fd:db:e6:d2:f8:30:62:42:e6:66:dc:84:8d:
                    d2:00:5c:dc:9d:8c:09:6d:c8:4b:f0:b2:38:a3:51:
                    9a:59:05:31:72:74:bb:2b:b7:42:9e:4f:1a:6c:6e:
                    ec:24:d6:5a:3b:65:eb:13:54:57:12:01:5e:bb:60:
                    1f:00:0c:d6:46:af:c9:51:69:01:1c:36:74:47:0b:
                    fd:77:94:d4:9a:93:74:75:81:75:25:0a:84:ed:3d:
                    07:6f:f8:74:4b:fd:2a:94:8a:bb:93:bd:38:2a:92:
                    be:23:1c:f8:1c:ec:8e:5f:6d:39:a3:fc:7c:d4:e6:
                    b9:4e:22:f0:a3:06:68:94:f2:3a:cc:e7:8d:3c:d0:
                    cb:4f:bb:8a:c9:f6:9a:a3:a3:9b:05:d3:5a:6b:7a:
                    0c:d9:ba:5f:1d:f4:b4:3d:c4:ba:21:e8:85:0f:0b:
                    d3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:74:76:DF:3A:CA:7E:54:0F:F3:99:9A:35:E3:F9:A6:C5:73:F3:09
            X509v3 Authority Key Identifier:
                keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/DFF01B484A2B11EB8609481FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:a1:d9:0e:e0:8d:a2:c9:9a:b4:86:12:20:a1:14:68:f6:a6:
         4b:ac:c3:89:52:04:51:5a:0b:8f:de:b7:ce:b8:be:03:8b:eb:
         bf:89:5f:46:dc:04:78:52:fb:a4:a6:c3:9d:83:b2:76:bc:b7:
         1c:f5:53:39:16:29:d6:22:cc:83:2d:70:68:ae:57:ed:10:04:
         52:be:e5:3a:07:ee:09:a0:55:5c:76:d1:0a:e1:0c:20:2a:f9:
         3f:93:a0:42:0a:e9:4b:7f:36:93:a2:d0:8b:ea:28:c5:ca:51:
         d3:f9:2a:29:be:c9:88:bc:5c:dc:45:0b:66:52:17:b6:01:8f:
         ae:3d:72:39:c8:6d:ba:0e:87:5f:bb:8c:af:64:d6:08:c8:e6:
         92:58:66:2d:fc:c7:fc:98:fb:a6:f6:62:86:2e:a8:8f:b8:fb:
         1d:a2:4c:12:cd:08:d5:f9:02:ab:01:40:1e:23:ca:17:da:0d:
         94:8c:ab:2d:50:03:4f:9e:4c:09:ae:69:b8:5d:c4:c1:59:d8:
         31:a2:cb:a3:28:46:8e:1c:c0:61:b6:fc:ea:b1:21:8d:00:9b:
         f0:29:66:cf:6a:50:94:99:44:bc:3b:f8:7f:04:71:fa:29:fd:
         5b:a8:9c:e2:fb:8e:3e:ed:b0:17:44:7a:a1:ca:9a:19:71:7e:
         9f:a6:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:16 2026 by rpki-client