Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/1083BE64499711EE86AE452DC4F9AE02.roa
File:                     1083BE64499711EE86AE452DC4F9AE02.roa (raw, json)
Hash identifier:          9LFaLc8meqLBp289mlYACBm+5v+NFT6EUQrjqf3aYig=
Subject key identifier:   B0:78:05:F7:60:2B:85:D7:FE:D3:67:6F:17:21:7A:AB:8A:17:A9:89
Certificate issuer:       /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial:       028B
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/1083BE64499711EE86AE452DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:17:01 +0000
ROA not before:           Wed 19 Nov 2025 00:18:05 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     17557
IP address blocks:        103.23.252.0/24 maxlen: 24
                          103.23.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
        Validity
            Not Before: Nov 19 00:18:05 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4586d-9a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e4:d4:47:b0:20:8f:a2:d0:64:0d:dd:f6:dc:
                    31:05:ac:9a:fb:b9:48:c6:c8:70:98:32:a8:4d:7c:
                    05:6d:da:c5:39:5b:0b:02:1a:60:b4:e5:63:51:7a:
                    d2:9f:1a:82:51:87:c7:3c:b2:a7:98:19:70:d6:38:
                    7e:21:11:54:4b:14:90:67:80:1e:ea:7b:61:45:06:
                    a6:99:10:48:c1:92:27:60:49:dd:19:99:85:22:04:
                    32:40:44:bd:ee:83:32:b3:89:e8:2c:d2:b4:93:5a:
                    eb:46:73:1f:78:0b:23:e2:59:c6:bb:a3:1c:3d:d4:
                    ac:70:a0:9f:a7:7f:94:43:77:b5:2c:bb:4c:43:0d:
                    e7:c2:7e:9e:ea:89:6b:2e:ec:1b:ec:8b:58:61:9f:
                    19:94:9f:93:c5:ad:36:a4:02:6b:4c:52:46:cf:29:
                    b7:bb:fc:9a:39:34:fa:3c:c1:4b:fc:12:5c:e4:39:
                    fd:fe:62:30:d0:17:2c:56:8b:10:fd:98:b6:dd:76:
                    6a:a4:95:43:0b:72:0e:65:89:31:8d:c6:97:19:08:
                    e4:d8:c2:b3:11:e8:b2:52:76:99:8e:12:a7:94:0f:
                    b1:f7:af:33:38:c9:e2:27:c6:e8:87:5d:89:0d:9b:
                    e5:96:6e:68:37:fb:6f:18:10:92:c9:9c:6c:c1:e4:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:78:05:F7:60:2B:85:D7:FE:D3:67:6F:17:21:7A:AB:8A:17:A9:89
            X509v3 Authority Key Identifier:
                keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/1083BE64499711EE86AE452DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:60:bf:8f:e9:65:29:54:5d:4f:8f:97:6d:bb:57:55:bd:7a:
         f2:25:fd:20:7b:a2:2a:68:f8:76:b5:a9:3b:99:d7:19:f9:c5:
         b3:43:0b:50:4c:09:cf:77:4c:f3:9b:51:60:1e:d0:b6:e6:5f:
         25:f8:3a:a7:78:be:20:c6:70:64:59:dd:e3:0f:47:98:38:1a:
         d5:49:6d:06:c9:73:7d:ad:e8:a5:4f:b0:c3:59:20:a0:69:78:
         9b:92:81:d9:a7:55:2a:50:db:2f:f7:95:62:04:48:22:2a:96:
         ba:c6:36:c0:d8:42:76:ad:bf:10:34:42:6b:dd:ba:3a:52:d1:
         8d:88:68:45:22:6d:90:db:32:77:39:2b:6c:ff:95:91:d9:68:
         6f:23:d7:65:6b:d4:ac:64:a6:32:24:1f:f0:d6:4a:a9:a3:54:
         1d:a6:84:25:94:ae:42:89:28:8b:f1:59:83:7e:e6:93:67:7b:
         c1:4c:11:42:fb:5d:99:93:8f:4e:d1:95:0b:19:c8:62:6f:6e:
         9b:e6:36:5e:a5:1b:c6:d6:70:96:54:80:1b:1d:72:96:c2:88:
         22:81:cd:48:d1:b1:73:98:e4:86:e8:94:37:9b:06:af:f3:7b:
         94:ee:ae:2c:31:90:4c:13:5b:1a:3a:a7:25:39:aa:93:2b:8c:
         31:06:2d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:44 2026 by rpki-client