Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/C847114C07D411ECBF875117C4F9AE02.roa
File:                     C847114C07D411ECBF875117C4F9AE02.roa (raw, json)
Hash identifier:          3efS8Q9JjQlkVgg6pGkDOEml4mfxa8hUfuGZHCKjSOw=
Subject key identifier:   66:7F:11:D4:3A:62:4C:10:14:6F:00:97:F3:A6:18:C3:79:49:B2:BE
Certificate issuer:       /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial:       05A6
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/C847114C07D411ECBF875117C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:51:04 +0000
ROA not before:           Tue 08 Apr 2025 23:34:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133415
IP address blocks:        103.116.170.0/23 maxlen: 23
                          103.116.170.0/24 maxlen: 24
                          103.116.171.0/24 maxlen: 24
                          103.227.234.0/24 maxlen: 24
                          103.227.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
                          rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446 (0x5a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Validity
            Not Before: Apr  8 23:34:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3fdf8-8881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:94:19:74:e9:cf:a0:0e:84:89:be:37:b8:
                    23:59:3b:e1:bd:5b:a0:7b:40:de:a2:88:6e:88:78:
                    02:eb:5c:6a:e8:e1:4c:1e:4a:5b:e7:b1:25:41:4b:
                    d1:19:74:56:34:0e:08:fc:01:2b:ca:67:c4:3c:77:
                    c9:93:ac:fe:ee:7b:55:2d:71:3c:9e:a0:dd:6e:01:
                    f9:42:93:5c:7a:63:1d:54:2d:6e:5a:8c:b9:89:87:
                    42:64:e8:60:53:0f:a5:9e:89:5f:c8:f4:90:ab:d6:
                    27:fe:ab:68:84:0e:80:d2:68:47:aa:1d:79:97:59:
                    86:60:80:d4:0c:0f:3e:ce:1f:09:2d:01:56:26:45:
                    80:ce:cc:9d:a9:8e:46:5b:72:5d:69:3a:ff:09:d4:
                    15:71:de:e5:95:ad:ad:c1:c5:8c:12:59:fb:1a:9d:
                    27:3e:87:e6:d7:3f:f3:d5:88:e0:33:22:01:d7:dc:
                    06:73:26:00:a9:ed:de:8c:80:37:71:0e:3d:09:eb:
                    b2:df:34:88:62:45:57:90:57:af:59:e7:ca:54:51:
                    21:f1:11:f8:2f:ba:d9:8d:00:d0:d9:4b:92:b9:18:
                    83:dc:45:08:f3:f9:a8:29:18:ee:9a:46:3f:3c:8a:
                    bb:f1:b6:3c:71:c0:7f:f0:4f:cd:f5:6b:7e:91:de:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7F:11:D4:3A:62:4C:10:14:6F:00:97:F3:A6:18:C3:79:49:B2:BE
            X509v3 Authority Key Identifier:
                keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/C847114C07D411ECBF875117C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.170.0/23
                  103.227.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:ae:ad:bd:b3:67:b8:70:dc:49:6d:92:95:db:ef:5b:7a:99:
         fa:c2:c0:02:bc:48:47:50:b3:44:18:1e:0b:80:b6:15:1e:08:
         45:75:1a:62:f0:15:45:ec:4c:48:e0:5d:9e:ae:12:d0:07:c0:
         33:1c:a5:07:a2:2e:c3:08:62:29:51:3d:17:e8:b1:09:fc:ce:
         7d:3f:b4:d2:3e:95:86:2c:2a:4b:e5:f4:3d:c3:c5:31:12:7b:
         a7:c0:95:9a:bd:08:36:02:c5:69:03:49:b0:e4:3d:42:3c:68:
         a9:cd:04:e8:a0:36:fa:1a:6e:0b:00:60:af:a7:92:09:9a:b7:
         46:27:b5:f5:99:20:e7:13:c1:0c:20:29:54:7c:73:c7:89:db:
         90:00:53:30:5e:70:e4:ed:92:af:26:0b:47:03:7c:ca:6c:47:
         08:2a:88:bd:9f:f6:e2:cb:68:a5:dd:4a:95:a3:34:cb:41:07:
         31:88:cd:9b:76:01:6a:8e:8e:1c:9f:07:12:47:a4:c9:ed:68:
         41:6b:3c:ec:b0:65:49:1d:b1:f2:8b:1d:df:64:38:02:e0:39:
         55:d7:b5:0a:e3:7c:4b:ae:ee:51:00:44:1d:ff:b2:6e:28:bf:
         86:f3:50:84:33:a8:3b:0d:93:dc:b6:90:df:61:d7:74:cd:06:
         94:21:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:45 2026 by rpki-client