Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/93E364468FC111EFA7695485C4F9AE02.roa
File:                     93E364468FC111EFA7695485C4F9AE02.roa (raw, json)
Hash identifier:          odXs70QtmjQH39+qx/iFdYWwlstVgEGIxhy6jVeMzv4=
Subject key identifier:   38:6D:1F:A0:2F:7F:40:AA:58:E4:02:3F:C0:C8:C6:72:14:99:4E:0A
Certificate issuer:       /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Certificate serial:       06B4
Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/93E364468FC111EFA7695485C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:57:11 +0000
ROA not before:           Fri 12 Dec 2025 21:58:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137048
IP address blocks:        103.159.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
                          rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
        Validity
            Not Before: Dec 12 21:58:35 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a453c7-d70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:11:4c:6c:7a:48:3e:62:42:12:72:81:ad:
                    af:28:5a:7d:49:aa:47:63:39:b7:05:b4:98:1a:ab:
                    d3:28:7d:af:87:69:82:ba:37:1f:cd:79:e5:99:d4:
                    e4:17:04:a3:17:30:b3:2c:e6:79:76:dd:e0:5e:b2:
                    86:b8:c9:c6:69:02:58:87:81:37:82:83:6d:87:ca:
                    65:ca:36:90:a1:94:ca:6b:16:d9:47:92:05:40:97:
                    5a:a7:40:5b:e7:66:64:cd:74:cf:64:88:e4:80:2b:
                    b2:d4:43:97:9b:ab:ee:f6:cf:78:f8:2d:08:93:69:
                    0c:3a:33:7f:be:16:2b:37:5a:29:f2:7f:d2:de:1a:
                    5b:64:fe:40:8a:a1:70:73:49:75:c8:d0:72:10:12:
                    04:87:b1:08:62:9f:ed:94:6b:11:c1:b9:75:5e:5d:
                    6d:52:8f:06:81:00:b2:5a:6f:7f:6c:cb:84:9c:91:
                    e4:24:41:31:2f:93:d8:99:b4:29:12:46:f8:3b:31:
                    84:c4:e6:4e:de:30:9d:08:72:8d:f7:a2:b0:49:f4:
                    b6:9c:58:8d:b1:cc:e5:c1:52:cd:45:28:a2:34:99:
                    c5:09:c8:3c:71:5b:32:7e:3e:fd:e3:e1:e6:13:32:
                    69:93:a8:6b:6d:75:5f:60:49:f9:7c:f4:e8:da:2f:
                    1b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6D:1F:A0:2F:7F:40:AA:58:E4:02:3F:C0:C8:C6:72:14:99:4E:0A
            X509v3 Authority Key Identifier:
                keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/93E364468FC111EFA7695485C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:4a:1e:1c:43:80:cf:84:a9:8c:69:ed:05:7d:67:f9:74:fa:
         64:eb:19:ae:78:ce:ab:7a:c7:6d:1b:d8:73:60:b5:40:e0:d6:
         ec:bb:fc:6a:3a:a9:f8:a4:ba:af:29:71:72:8e:3e:c3:59:3c:
         ae:51:1d:01:05:4d:3e:60:74:a2:42:d6:40:b2:73:5a:fe:70:
         88:c7:f1:9c:fe:dc:e3:ea:de:92:4d:d8:dd:d8:8e:39:49:ae:
         2e:b1:8a:2f:32:07:f0:21:10:6f:15:28:d2:22:b7:b1:52:12:
         b0:35:dd:5e:52:7b:e0:27:40:03:17:f6:ea:00:bd:4a:6f:29:
         9d:43:3c:3e:5f:0a:1a:be:70:a4:be:1c:c0:d2:5f:7b:72:20:
         ec:2e:72:16:5b:dd:86:9c:f4:58:aa:39:04:0c:9c:48:94:cd:
         27:d0:5c:7d:0f:75:5e:85:18:ba:15:6a:f0:48:25:0f:84:a4:
         a7:d6:2e:cd:3d:07:f4:46:7c:cb:81:7a:7f:cb:ee:e8:24:da:
         45:71:a0:64:2d:9b:ae:cb:1e:01:33:68:58:96:66:1b:12:b1:
         5d:82:4f:2a:09:d0:ba:c0:04:4e:e3:51:a4:54:1e:01:43:58:
         6d:55:d4:b7:9c:bc:ee:bd:4a:7e:3a:aa:8f:88:ec:62:da:51:
         5b:f3:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:10 2026 by rpki-client