Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/C303879E415111EDBC3A1D19C4F9AE02.roa
File:                     C303879E415111EDBC3A1D19C4F9AE02.roa (raw, json)
Hash identifier:          KnGlEyG5to94pHkynoYZJXGNW9EYXTwet6VMEUfkCuY=
Subject key identifier:   F0:19:C7:43:76:C8:CE:EF:51:96:BF:43:C7:85:A8:07:32:61:57:28
Certificate issuer:       /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial:       0307
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/C303879E415111EDBC3A1D19C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:27:53 +0000
ROA not before:           Tue 23 Sep 2025 02:20:29 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     0
IP address blocks:        103.55.161.0/24 maxlen: 24
                          2001:dec:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
                          rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775 (0x307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
        Validity
            Not Before: Sep 23 02:20:29 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a44ce9-2e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:6f:2b:00:b8:74:6c:fc:a9:31:f3:59:71:
                    04:b5:24:2a:f6:88:97:60:8a:93:ff:51:e1:01:39:
                    bd:11:b2:d7:02:15:4b:80:b2:9b:50:43:8c:28:ac:
                    fe:a2:29:03:8f:63:fd:7b:50:d7:b9:e6:ef:8c:48:
                    9e:70:7d:75:31:e1:87:16:f8:ce:1f:a3:fe:0c:1a:
                    17:76:1c:90:6d:4c:b1:3b:25:8f:12:e6:ac:c4:3e:
                    62:bc:19:32:35:28:98:04:41:ca:2a:21:26:00:bc:
                    1b:88:49:9d:5d:8f:44:0f:45:9e:77:e5:61:c4:fc:
                    83:fe:0c:bc:3c:f9:78:9f:e6:f6:30:e6:10:7f:75:
                    1d:88:31:60:88:4e:48:c4:eb:a4:ce:75:42:b9:66:
                    a3:65:bd:f2:44:b7:2a:50:20:71:19:00:a0:39:9f:
                    14:96:55:2d:f0:32:cd:1e:77:a5:47:32:c9:c8:a5:
                    60:0c:b9:ee:52:51:be:dd:c2:93:7b:ef:96:6d:49:
                    a8:21:5b:c9:53:fd:81:a5:4f:3e:9c:bb:12:b1:4e:
                    54:ef:9e:f5:db:9c:ac:cf:de:bb:25:25:c5:cf:bf:
                    65:fc:ce:4c:bd:b5:ea:51:f1:78:ab:75:2b:03:f4:
                    89:d4:ae:29:8b:fa:d1:50:2c:00:9a:5a:9b:81:60:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:19:C7:43:76:C8:CE:EF:51:96:BF:43:C7:85:A8:07:32:61:57:28
            X509v3 Authority Key Identifier:
                keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/C303879E415111EDBC3A1D19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.161.0/24
                IPv6:
                  2001:dec:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:59:be:9d:43:5c:4a:e8:78:76:97:64:9a:20:e5:73:4a:df:
         3d:90:32:fc:4f:87:97:c5:8d:e7:1a:75:2a:7b:5e:60:b6:c6:
         40:9b:77:08:c2:c7:f9:e9:29:8c:59:29:4e:0f:d0:ac:6c:45:
         8b:8b:4f:4d:90:d7:e4:f9:b7:21:c2:ed:13:ab:e6:fa:c4:ab:
         14:62:61:32:b9:f6:4d:53:f0:be:fe:53:7e:c3:e3:24:cd:59:
         e2:7c:2a:83:17:b4:32:1e:5f:95:81:14:07:62:16:ad:42:5d:
         09:d9:35:fb:83:d6:3b:af:0d:42:c2:6b:17:b3:f5:07:64:3b:
         8a:a4:e5:72:d9:35:00:ef:4b:04:e7:e0:fd:64:46:0b:fe:1f:
         a7:37:e0:df:31:23:93:79:bc:c1:66:80:cc:82:a3:c2:c0:4d:
         e9:43:26:0a:43:38:cb:b1:62:63:12:83:80:19:b5:fd:d3:2c:
         09:dc:9d:0b:43:69:97:e8:52:75:c4:08:aa:49:69:f7:4b:71:
         8c:e9:be:c2:cf:dc:02:38:0a:ff:f1:8a:7e:40:f9:58:d6:bd:
         c1:45:d5:a1:d6:6d:9e:b0:48:a9:70:c4:72:35:7e:b8:ef:38:
         db:76:9a:eb:72:eb:e0:ec:e7:3f:e8:71:be:f8:54:86:ec:58:
         56:f8:b9:07
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYyREUxMTAvBgNVBAUTKERGODI2Q0IzQkI3QThCQjJBMTFFRTRCQUUyRTA4N0VB
QzNBNzIxRDIwHhcNMjUwOTIzMDIyMDI5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGNlOS0yZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzLZvKwC4dGz8qTHzWXEEtSQq9oiXYIqT/1HhATm9EbLXAhVLgLKbUEOMKKz+
oikDj2P9e1DXuebvjEiecH11MeGHFvjOH6P+DBoXdhyQbUyxOyWPEuasxD5ivBky
NSiYBEHKKiEmALwbiEmdXY9ED0Wed+VhxPyD/gy8PPl4n+b2MOYQf3UdiDFgiE5I
xOukznVCuWajZb3yRLcqUCBxGQCgOZ8UllUt8DLNHnelRzLJyKVgDLnuUlG+3cKT
e++WbUmoIVvJU/2BpU8+nLsSsU5U757125ysz967JSXFz79l/M5MvbXqUfF4q3Ur
A/SJ1K4pi/rRUCwAmlqbgWAJ0wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPAZx0N2
yM7vUZa/Q8eFqAcyYVcoMB8GA1UdIwQYMBaAFN+CbLO7eouyoR7kuuLgh+rDpyHS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjJERS8xNzY3OTRENDE1
NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3S2hIdVM2NHVDSDZzT25J
ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM0SnNzN3Q2aTdLaEh1UzY0dUNINnNPbklkSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTYyREUvMTc2Nzk0RDQxNTVBMTFFREIwQTEyNzIwQzRGOUFFMDIvQzMwMzg3OUU0
MTUxMTFFREJDM0ExRDE5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZzehMA8EAgACMAkDBwAgAQ3swAAwDQYJKoZIhvcNAQELBQADggEB
AIRZvp1DXEroeHaXZJog5XNK3z2QMvxPh5fFjecadSp7XmC2xkCbdwjCx/npKYxZ
KU4P0KxsRYuLT02Q1+T5tyHC7ROr5vrEqxRiYTK59k1T8L7+U37D4yTNWeJ8KoMX
tDIeX5WBFAdiFq1CXQnZNfuD1juvDULCaxez9QdkO4qk5XLZNQDvSwTn4P1kRgv+
H6c34N8xI5N5vMFmgMyCo8LATelDJgpDOMuxYmMSg4AZtf3TLAncnQtDaZfoUnXE
CKpJafdLcYzpvsLP3AI4Cv/xin5A+VjWvcFF1aHWbZ6wSKlwxHI1frjvONt2muty
6+Ds5z/ocb74VIbsWFb4uQc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:06 2026 by rpki-client