Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/1E6E1BE8DB0711EFBD49DC56C4F9AE02.roa
File:                     1E6E1BE8DB0711EFBD49DC56C4F9AE02.roa (raw, json)
Hash identifier:          lHK7kRhZzYRrZfkxWOucr08pBfToUMnQkmqdTfsvMXA=
Subject key identifier:   54:47:78:94:41:BE:98:A8:3F:16:5B:15:BB:11:88:CB:5E:89:21:F0
Certificate issuer:       /CN=A913DC07/serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
Certificate serial:       0549
Authority key identifier: EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/1E6E1BE8DB0711EFBD49DC56C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:44:06 +0000
ROA not before:           Tue 15 Jul 2025 00:35:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139720
IP address blocks:        103.167.16.0/24 maxlen: 24
                          2001:df6:a280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl
                          rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC07, serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
        Validity
            Not Before: Jul 15 00:35:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a43496-95b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:bc:7c:6b:5f:30:06:1c:59:91:85:67:ad:
                    fc:3f:53:1c:b4:b5:46:89:e3:c5:7d:73:2c:b1:74:
                    5a:2e:48:ee:16:24:02:3a:c6:35:5d:1d:4a:96:37:
                    2c:72:9f:8d:61:46:67:26:83:0f:e2:6b:4c:e2:49:
                    0c:e2:8a:4c:a1:b0:70:62:89:e1:5f:af:a3:e6:02:
                    3f:ed:61:9b:45:c0:60:96:01:0b:b1:d3:c8:af:9a:
                    1c:b8:1d:e3:99:20:0a:e8:a7:ca:dd:0c:e6:d3:99:
                    59:9b:8b:05:72:c9:8e:1c:4d:44:4c:e5:6b:2f:bb:
                    77:5d:ad:5b:d3:cf:31:ea:8e:a1:1a:b9:1c:7b:9e:
                    d7:d5:f6:58:2e:05:7e:86:6f:ab:88:a5:76:de:4c:
                    b6:41:1b:d1:26:45:db:01:c0:ac:45:cd:97:94:d7:
                    b6:19:4f:7c:a4:cb:fb:d2:0b:53:53:90:82:1b:14:
                    fd:11:9f:92:b0:ba:48:83:2c:f0:2b:fb:3a:d0:b8:
                    63:5c:89:7e:19:97:8e:05:b2:a4:48:fb:8a:09:41:
                    64:31:c2:bf:82:74:6e:b4:ee:c7:fa:81:ff:c8:81:
                    30:2a:fd:1c:8b:8b:fa:d0:d3:0a:0f:43:04:7e:49:
                    2a:a8:38:8a:bb:1e:69:dc:4a:ea:a9:28:a2:88:26:
                    21:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:47:78:94:41:BE:98:A8:3F:16:5B:15:BB:11:88:CB:5E:89:21:F0
            X509v3 Authority Key Identifier:
                keyid:EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/1E6E1BE8DB0711EFBD49DC56C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.16.0/24
                IPv6:
                  2001:df6:a280::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:25:ae:e0:07:5d:2e:31:d0:a4:3f:47:51:9d:76:55:93:94:
         33:b6:c8:6f:dd:99:66:d2:10:79:f0:34:ad:12:00:41:7a:bd:
         c0:f7:73:2f:88:20:b3:6e:51:e9:92:b7:59:bb:e7:c7:8c:5e:
         6d:58:e4:e3:84:c8:f7:57:db:e4:26:cc:15:ad:89:51:8b:fc:
         6f:d8:f5:9a:d1:ee:62:9b:50:8d:a3:be:e4:87:df:d3:e4:ca:
         79:04:7c:60:ea:3c:82:e9:e5:c2:70:cf:f3:d9:ee:b4:3f:c9:
         3d:e1:22:13:08:50:b5:c2:66:2d:99:7b:b1:69:2f:41:4e:f9:
         da:04:7a:b2:61:1f:3b:e5:39:64:6a:b0:60:19:21:c8:4d:c4:
         d5:f4:02:f3:d7:99:62:01:6d:2f:6e:ff:3b:76:3d:05:66:8e:
         85:4e:4a:a6:2f:e3:09:02:e8:1b:4b:9e:a5:c5:58:c9:7f:f7:
         aa:60:96:f3:8d:a1:a5:88:19:e6:7f:22:b2:32:7e:c7:9e:f2:
         37:a4:b0:46:75:6b:db:27:07:3f:82:9f:d8:43:b9:a9:ab:d4:
         e4:d5:dc:9a:7d:92:59:ca:70:e9:64:8e:1e:ab:69:7c:87:0a:
         f9:91:78:36:0f:99:b9:d1:fb:45:85:44:60:47:0b:4d:84:e2:
         c0:31:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:34 2026 by rpki-client