Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/2569C82ADC2311F08AE4CDD5626F56BC.roa
File:                     2569C82ADC2311F08AE4CDD5626F56BC.roa (raw, json)
Hash identifier:          dV1q3hKs8X5N6nMqWd+23yBEXs6dRmnrwADaOuDZSJc=
Subject key identifier:   CF:64:97:25:51:3D:E8:4F:82:BA:C4:F6:9B:BF:A8:CB:5C:47:4F:3A
Certificate issuer:       /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial:       0F1F
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/2569C82ADC2311F08AE4CDD5626F56BC.roa
Signing time:             Sun 01 Mar 2026 16:42:54 +0000
ROA not before:           Thu 18 Dec 2025 15:06:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197537
IP address blocks:        103.159.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3871 (0xf1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
        Validity
            Not Before: Dec 18 15:06:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a46c8e-6607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:cf:38:d3:b5:6a:7c:5a:48:43:c4:97:bf:
                    9f:7d:96:d5:d6:88:1c:be:4a:a7:1c:e3:e5:42:dc:
                    93:37:5e:0d:ce:9e:3b:80:7a:6c:70:b9:95:b4:ad:
                    07:5f:c0:73:c8:e3:83:ee:60:93:59:21:f0:c6:e4:
                    a3:be:60:ec:92:30:48:a7:14:af:c2:bf:fe:d0:cb:
                    ee:e3:1b:3a:3b:4d:a6:18:78:f5:23:43:cc:ee:1c:
                    f8:28:6c:5e:81:35:4e:b9:ce:61:7d:ed:3b:7e:aa:
                    fe:7e:e5:c7:ae:42:3f:71:79:78:b7:04:1f:09:3e:
                    d0:bf:c4:86:7d:b1:7e:92:da:13:05:31:13:aa:21:
                    da:18:bd:e7:88:fc:83:26:38:40:2c:ab:8d:15:24:
                    eb:3e:24:43:03:16:9d:f3:70:19:07:a2:a2:a0:df:
                    37:73:79:ce:51:67:b6:ea:00:fd:b1:42:88:5e:9a:
                    f0:9e:fa:a4:5f:04:80:ff:90:37:ef:44:16:ff:82:
                    90:0e:63:73:39:6a:41:3b:68:01:ad:9c:32:98:4f:
                    3b:f2:ae:4f:66:0b:d1:e3:f9:ea:3e:01:72:cc:a0:
                    9b:84:79:d3:79:43:95:8a:f1:a3:62:85:b3:c6:c8:
                    5b:b7:21:54:6e:94:9e:71:06:49:5e:54:1e:c7:fb:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:64:97:25:51:3D:E8:4F:82:BA:C4:F6:9B:BF:A8:CB:5C:47:4F:3A
            X509v3 Authority Key Identifier:
                keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/2569C82ADC2311F08AE4CDD5626F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:29:2b:ef:f1:09:ed:60:8c:3c:8f:f0:3b:5b:18:c7:99:
         b2:bb:67:c1:e7:2b:97:91:6c:53:d2:c9:d1:5d:cf:87:eb:2f:
         bc:13:85:79:46:b3:50:de:66:8c:d8:4a:b5:47:09:87:63:fd:
         ba:22:d9:3f:83:65:93:98:f4:3a:fa:34:d2:34:05:88:02:83:
         ae:2b:fe:83:82:d7:73:9b:3a:5a:e6:2a:02:56:03:c9:c4:b9:
         f0:46:7b:33:47:ab:e6:01:d1:4d:dd:cf:6e:ad:3a:c1:b3:9a:
         49:46:bd:44:4e:ff:42:c3:8a:50:1c:81:2b:9c:0d:3d:5b:b5:
         5d:f6:6c:e3:a8:d8:0d:35:24:c2:46:71:25:25:6c:49:88:ef:
         ec:06:dd:51:38:79:90:fb:dd:0c:14:02:cf:f0:ba:d0:d1:56:
         07:73:18:55:8e:19:41:a9:59:59:bd:9b:2a:c1:00:52:9f:a5:
         c3:ad:5c:f4:28:8f:b1:1c:50:44:a8:73:43:77:15:19:29:98:
         e6:d5:e2:a2:be:5c:98:e5:65:e4:12:f8:9e:48:3e:5c:a2:18:
         88:37:ad:f4:57:2a:2b:9b:73:47:b6:2a:b7:64:8a:e1:cb:8d:
         78:b6:d1:bb:81:39:00:4a:e2:6b:32:53:26:9f:8f:c4:9e:f8:
         2a:2c:c2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:13:23 2026 by rpki-client