Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/14A16ED4F0C011EFB89A0131C4F9AE02.roa
File:                     14A16ED4F0C011EFB89A0131C4F9AE02.roa (raw, json)
Hash identifier:          ECSeiumhF5oPC8vKGrrFnvaLvLgLXMuCjAWZKE9LDkg=
Subject key identifier:   7F:ED:53:A2:1E:19:1B:BD:3E:DB:9D:3C:8D:17:E6:A7:C2:64:02:23
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       0355
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/14A16ED4F0C011EFB89A0131C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:11:51 +0000
ROA not before:           Fri 25 Apr 2025 01:27:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150716
IP address blocks:        103.227.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
                          rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853 (0x355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: Apr 25 01:27:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48167-ed07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1e:cb:96:de:82:0e:d9:2d:12:2d:00:27:52:
                    ac:69:2d:a2:e8:0d:b4:9c:5f:db:be:ef:63:a7:6f:
                    de:dc:9b:01:03:9a:6b:2c:83:4c:a3:42:8a:8d:6c:
                    46:1b:ef:60:d4:4f:7e:52:71:3b:cb:9f:d0:70:1f:
                    e5:ba:b2:b1:c5:8e:40:e9:a1:89:a2:17:46:18:89:
                    b1:b1:37:e5:0f:cd:c5:26:be:1e:f1:99:fa:a4:c5:
                    28:89:18:e8:86:b4:95:45:dd:66:00:1d:f1:d6:81:
                    b1:6e:86:ed:a3:d2:42:ee:8e:f2:c8:6a:3a:50:14:
                    0d:0d:be:b7:c5:3e:e6:36:0f:1a:1e:e8:95:81:be:
                    89:e1:b3:da:e8:31:7b:15:62:c4:92:3d:22:3b:8c:
                    ab:b9:01:c2:91:db:d5:9f:81:8a:ca:bc:3d:ee:01:
                    a7:b5:d4:df:6d:63:b6:4f:15:39:07:9f:97:d7:49:
                    4d:0c:f7:95:97:ef:86:bc:47:ff:fe:bd:9b:00:03:
                    dd:d4:19:e3:2c:a9:e3:37:79:dc:5a:e3:a3:8e:b6:
                    fb:76:6b:bc:fa:5a:63:6f:96:fd:7c:66:2e:2d:c0:
                    c3:a6:5a:04:3d:22:40:93:eb:9d:03:d8:cc:41:24:
                    b9:bd:c2:a0:fe:4b:ac:e8:6a:72:8b:3c:f0:e5:a3:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:ED:53:A2:1E:19:1B:BD:3E:DB:9D:3C:8D:17:E6:A7:C2:64:02:23
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/14A16ED4F0C011EFB89A0131C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:21:11:0d:75:95:88:d3:12:31:7d:0f:39:36:a6:82:a0:83:
         f3:57:b7:b7:25:e1:65:84:46:4f:f5:5e:e8:50:c9:74:fe:da:
         ac:fa:70:77:e8:1f:3b:15:0d:5f:94:76:27:14:29:9c:30:85:
         f0:0e:a7:77:67:6b:45:01:9b:b7:7e:5b:5e:90:e8:d1:28:cd:
         54:f0:75:2a:2e:ce:37:8f:a4:23:72:72:b6:6c:68:59:f1:0c:
         fb:43:35:92:5d:8f:2b:a2:1a:48:8c:e6:8e:54:d1:0d:d8:68:
         5f:8a:4d:14:db:8d:9d:ee:cf:92:9e:cf:0e:61:58:78:cd:3e:
         e7:88:f9:2b:0e:c1:67:4a:bf:d6:ba:33:ed:04:be:5d:27:46:
         91:7c:4b:c2:9d:6b:b0:1f:0e:b2:55:0a:07:40:9f:53:a2:81:
         48:f3:da:04:66:51:94:3a:57:32:f5:a2:c7:cf:a5:fd:fb:7d:
         d6:31:81:7d:c1:2b:51:64:5d:83:8a:96:96:ae:ab:29:a3:33:
         d9:a4:1c:1f:c1:40:d1:64:f5:14:94:b4:d6:b6:d6:f7:ba:e7:
         2b:60:4e:6b:8b:0e:19:4d:d3:11:07:e0:6d:65:21:82:d8:e0:
         06:d5:1a:b8:11:b5:24:15:fa:2c:87:56:81:6a:02:d9:ed:1a:
         64:f5:7f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:11 2026 by rpki-client