Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/7FA158782F1D11EDA3E29B09C4F9AE02.roa
File:                     7FA158782F1D11EDA3E29B09C4F9AE02.roa (raw, json)
Hash identifier:          umLFkTeQdekAlPsdl8gFAvb2SrQd6EldZHqbgneT8Yg=
Subject key identifier:   8A:F6:E1:B9:1A:D6:BC:93:08:BF:AE:46:E7:E4:8E:29:01:CE:32:F5
Certificate issuer:       /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248
Certificate serial:       02B9
Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/7FA158782F1D11EDA3E29B09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:08:22 +0000
ROA not before:           Thu 03 Jul 2025 02:37:07 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     55581
IP address blocks:        103.67.68.0/24 maxlen: 24
                          103.93.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl
                          rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D167, serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248
        Validity
            Not Before: Jul  3 02:37:07 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a40206-fde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:6d:6f:14:24:e4:53:07:e2:93:e2:1a:a1:
                    89:f2:28:e9:8a:47:c0:c9:43:40:2c:f5:e4:a9:2a:
                    90:a8:d2:12:da:08:8f:4c:12:80:ff:d8:e4:9e:d7:
                    89:87:a0:7f:a3:3a:69:19:19:49:3f:91:63:7d:23:
                    f2:66:ca:b7:17:72:52:34:95:af:7d:cf:62:08:13:
                    d2:44:7c:21:ad:64:c6:4d:43:72:4e:96:b7:df:99:
                    04:2e:53:37:cf:2e:10:c0:e2:f7:31:a7:d2:4e:de:
                    d8:74:cf:c4:5f:7e:1a:3f:15:c6:dd:6c:5f:a9:96:
                    f2:ad:19:dd:30:00:79:2f:84:06:4a:78:aa:3c:b1:
                    07:67:6e:fd:8f:bd:4f:a5:c2:d3:6c:5f:6c:4f:f0:
                    c2:da:0d:45:f3:ed:42:66:7e:ca:07:a5:03:d2:f5:
                    f2:60:53:71:6d:20:1f:ed:6b:99:c2:70:8d:c5:ee:
                    50:cf:23:ad:21:9c:64:eb:62:0b:58:ae:b1:22:06:
                    65:e0:1d:75:3d:8c:ad:6d:a5:ae:b6:39:fc:d7:b8:
                    c5:53:55:37:58:1c:cc:6d:f0:a3:8e:31:0c:ea:48:
                    67:00:d4:a9:16:e1:d2:08:20:d3:e1:38:c3:ac:1b:
                    25:01:85:88:30:5c:3d:7f:96:12:3d:56:e6:14:8f:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F6:E1:B9:1A:D6:BC:93:08:BF:AE:46:E7:E4:8E:29:01:CE:32:F5
            X509v3 Authority Key Identifier:
                keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/7FA158782F1D11EDA3E29B09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.68.0/24
                  103.93.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:0f:b9:05:8b:94:68:0c:f1:a6:d9:da:a1:f6:4b:35:43:c6:
         86:eb:83:63:89:50:14:89:ac:dc:46:91:a3:3e:2d:8e:08:bf:
         55:08:28:34:b7:d9:5b:c2:a9:ca:72:4f:b4:77:fd:02:64:72:
         c9:ea:a3:38:58:b6:ba:f4:12:9c:f0:ca:60:44:18:46:0a:87:
         2c:a6:42:01:21:62:b4:a6:fa:8c:ed:b3:08:77:91:88:90:e0:
         94:71:64:70:79:c9:d2:66:20:5c:67:2b:53:a4:b4:ae:2f:0c:
         46:eb:71:68:9c:4b:71:03:66:0b:f0:5c:e5:d7:08:b1:53:47:
         24:02:66:4a:6b:c7:c0:02:85:f7:f0:fa:6e:14:a9:f9:1d:d3:
         6c:d4:0d:b3:cb:08:77:dc:eb:3b:cd:ff:8a:e5:f8:b6:02:e0:
         6a:75:48:22:95:ec:37:72:b6:9c:ec:34:cb:1c:93:4a:be:08:
         f0:ef:8b:ea:a3:6e:42:7c:e0:f5:31:93:09:d0:e3:26:34:a2:
         e2:75:cf:17:fd:42:6b:ae:a2:b8:2e:c0:27:85:3d:f3:3f:23:
         9a:13:f3:e4:bc:6a:6a:ba:88:22:74:a9:e9:41:fc:8d:e6:18:
         65:aa:31:93:aa:6f:9e:59:f1:64:f8:cf:d4:78:61:aa:de:7c:
         d1:b6:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:26 2026 by rpki-client