Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A160BBAEC17711EABFFC9E1FC4F9AE02.roa
File:                     A160BBAEC17711EABFFC9E1FC4F9AE02.roa (raw, json)
Hash identifier:          zWNp9ZaOgBHA/svnObyrHOTGUNlUERNOeU1v6+YaWVk=
Subject key identifier:   E9:7A:27:D0:92:ED:4D:CF:E6:86:2B:2A:66:33:40:EA:09:06:80:4A
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7E1F
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A160BBAEC17711EABFFC9E1FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:06:46 +0000
ROA not before:           Tue 02 Sep 2025 17:36:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     38561
IP address blocks:        202.9.112.0/22 maxlen: 24
                          2402:f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
                          rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32287 (0x7e1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Sep  2 17:36:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48036-64d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:48:bb:b8:6c:fd:01:ed:e6:1b:07:02:b2:
                    6f:67:e2:4b:11:b2:ca:72:21:b8:1a:78:9f:e2:dd:
                    f1:fc:e1:da:c8:4b:be:f0:75:40:22:9d:ed:f8:3f:
                    75:75:58:a0:d8:be:4a:c3:a9:eb:80:70:cc:d7:3c:
                    9f:a0:26:b6:b6:fd:02:f7:2a:14:bc:a3:d6:a3:a2:
                    74:1f:db:72:53:45:08:e8:43:5a:9f:38:44:cf:56:
                    00:fd:08:67:f7:34:87:06:65:41:10:61:4d:2d:84:
                    51:1b:68:e8:f3:a0:90:89:06:8c:bd:6a:f4:2a:3b:
                    c0:3c:fc:4f:ce:64:3e:b4:6f:53:e3:56:c0:d6:08:
                    89:74:c2:14:6d:8a:99:91:02:98:fe:89:7a:8d:b3:
                    7c:b3:30:17:1d:55:16:8c:5e:0d:98:eb:1e:ed:00:
                    32:88:89:d1:27:ca:b9:3b:61:90:48:3a:31:83:c9:
                    71:f7:6c:e6:3d:8a:43:d9:12:4b:9a:cf:82:04:62:
                    5b:f0:12:4f:45:2b:6d:41:1d:d1:cd:8c:97:d9:3b:
                    7c:19:d9:5c:87:53:05:7a:71:87:0f:5a:11:be:e1:
                    b4:0e:27:22:a6:a4:1b:43:9f:40:4b:89:8a:dd:e5:
                    36:e9:ec:35:19:0b:9b:f9:3d:a4:00:66:d4:b6:48:
                    50:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7A:27:D0:92:ED:4D:CF:E6:86:2B:2A:66:33:40:EA:09:06:80:4A
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A160BBAEC17711EABFFC9E1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.112.0/22
                IPv6:
                  2402:f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:71:36:fc:e2:9a:6b:0d:b4:9d:d4:ab:a4:c0:e9:8a:62:6e:
         3e:d0:cb:3b:78:ea:b3:ac:65:a0:72:90:3f:03:ac:25:91:27:
         46:24:a0:9d:44:76:8e:ae:c2:56:17:6d:07:f5:47:22:4f:66:
         02:39:19:63:17:ed:53:23:d8:a9:95:9c:b5:a8:1c:78:b3:ae:
         9e:ea:36:ea:6e:b7:c3:10:06:dc:73:22:43:6b:4f:37:7f:f5:
         bd:67:db:be:1d:18:91:cc:31:4b:89:65:8b:56:cd:04:8d:d1:
         13:78:c7:15:a9:85:c2:7b:41:c8:e2:62:89:1c:ce:11:e0:79:
         5e:e9:e6:62:56:dd:05:e7:84:98:89:1f:19:1d:af:af:1e:31:
         01:b8:27:9f:18:58:fb:e5:26:f5:a4:a7:a1:da:39:d6:f3:a5:
         8b:44:5a:ac:5d:41:6f:7c:d2:39:c0:77:52:5c:67:13:b4:4e:
         cd:54:37:b8:ed:91:f5:5e:81:ea:68:11:f3:47:f2:32:90:e4:
         64:21:3c:2f:b5:70:20:00:b9:b2:f4:63:d1:08:ff:fc:7f:4f:
         40:9b:1b:5e:2e:2c:5c:06:d3:db:25:4f:e3:d4:27:9c:66:92:
         c2:ba:2e:5f:e7:41:d4:8a:60:c5:f6:76:4a:f5:09:8e:04:1e:
         dd:63:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:49 2026 by rpki-client