Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/CEE6CEF4154711F189DFF69F2F3D8C67.roa
File:                     CEE6CEF4154711F189DFF69F2F3D8C67.roa (raw, json)
Hash identifier:          9WrpqXx64wHf1FOtTrKKk5h1aS+7aKbvo9KDs/6X39c=
Subject key identifier:   66:A4:FF:D2:8F:4D:85:F7:59:DB:6C:44:DF:9A:2E:68:6B:22:37:25
Certificate issuer:       /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Certificate serial:       0577
Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/CEE6CEF4154711F189DFF69F2F3D8C67.roa
Signing time:             Sun 01 Mar 2026 08:22:39 +0000
ROA not before:           Sun 01 Mar 2026 08:22:39 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135615
IP address blocks:        103.172.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
                          rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
        Validity
            Not Before: Mar  1 08:22:39 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3f74e-4de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:2a:25:47:d6:94:e5:55:9e:b6:21:de:77:
                    58:61:01:7a:37:3f:e4:82:25:cf:36:ff:95:d9:97:
                    45:45:5d:66:8d:6f:5e:a9:48:c6:42:8f:4d:af:9a:
                    36:fe:13:9b:a6:9d:01:2d:45:ef:42:60:45:8b:a4:
                    33:a1:a4:cc:e4:ee:69:ba:b8:6b:c7:c2:de:ea:cb:
                    f6:47:04:94:92:53:5c:ca:50:cb:6b:75:5c:4d:15:
                    80:5f:64:12:ba:cc:a9:9a:5d:af:f5:54:80:84:4e:
                    ef:73:ab:e3:f8:39:b3:c5:41:38:42:22:6c:4b:ac:
                    51:75:1c:11:b1:fb:91:db:01:a6:09:ef:5a:bf:d9:
                    3f:10:d9:f8:03:d5:33:fb:44:9b:c4:b4:4b:3b:ef:
                    c5:c1:c4:f8:7d:5b:fb:c0:ac:23:45:ad:7e:9f:15:
                    e0:5f:7e:f4:fa:ff:4b:de:2f:59:fe:7a:95:27:b7:
                    5b:a7:07:22:08:bc:4a:40:bc:d2:d7:d1:6e:e7:52:
                    0c:87:c8:76:3a:35:19:3c:c9:2e:42:ac:af:70:b5:
                    d7:6c:0e:8c:d5:8c:63:66:10:76:a7:b3:cb:32:bc:
                    37:10:03:a8:3c:78:f9:77:7e:0e:4e:65:3d:b3:41:
                    e5:03:97:38:a1:90:38:63:2d:3f:4d:60:7f:06:0d:
                    f8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A4:FF:D2:8F:4D:85:F7:59:DB:6C:44:DF:9A:2E:68:6B:22:37:25
            X509v3 Authority Key Identifier:
                keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/CEE6CEF4154711F189DFF69F2F3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:38:92:37:0f:77:1b:13:79:61:0f:ec:60:5c:df:18:7b:02:
         82:f2:2f:47:0c:95:4d:87:f8:dd:16:dd:27:41:9a:df:9b:f5:
         b9:49:8e:8c:46:7d:17:37:5f:c5:70:a9:23:10:3e:22:d1:ed:
         6d:a9:5f:2d:1f:56:fb:e6:ba:32:28:62:cd:b9:3d:ac:53:45:
         ba:58:60:54:31:18:30:b0:97:44:ff:6b:84:70:82:7f:dd:e6:
         2a:7a:6a:12:f0:5a:f6:10:94:42:af:95:24:80:82:dc:1d:82:
         b9:af:d0:73:ef:13:e9:6f:5a:4d:8e:a3:3a:4d:27:55:10:f3:
         b4:c0:ae:f4:9d:71:64:c3:cf:38:88:b7:e6:7d:02:43:ca:da:
         b7:7b:a6:d1:6d:eb:bb:71:7e:de:cc:f6:f7:29:b8:bd:da:c4:
         a4:54:e6:94:fd:c9:e8:00:ef:1f:41:92:c2:4b:2e:7d:f8:f8:
         5c:48:5e:6e:5a:09:46:03:9e:a9:98:ae:34:2e:3a:84:bd:40:
         d7:d2:1f:79:38:77:61:57:56:e3:c8:b9:bc:f7:0f:90:59:88:
         34:bf:59:7b:af:d6:bf:d3:26:52:44:4d:02:2c:c7:d8:e1:1c:
         59:f2:19:64:d7:22:aa:c1:ef:42:7e:e0:9a:71:6a:56:b9:f5:
         f9:99:78:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:59 2026 by rpki-client