Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/AA5485827F3611ECBED94963C4F9AE02.roa
File:                     AA5485827F3611ECBED94963C4F9AE02.roa (raw, json)
Hash identifier:          em6Z1UTwpQ/pN7PoRNgk8av9GKamLVs8Phun3EsGZYw=
Subject key identifier:   F0:CD:7B:34:4D:05:73:23:B8:A0:3D:88:14:DB:66:54:A0:CD:17:96
Certificate issuer:       /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Certificate serial:       0522
Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/AA5485827F3611ECBED94963C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:52:32 +0000
ROA not before:           Tue 25 Mar 2025 00:07:01 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141752
IP address blocks:        103.163.61.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl
                          rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314 (0x522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
        Validity
            Not Before: Mar 25 00:07:01 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3fe50-b1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:69:24:52:65:f1:ba:2f:79:79:2d:38:5a:
                    6f:5b:bf:a9:92:fb:1e:fe:17:f2:53:7a:b2:bc:fa:
                    57:73:ee:9d:5d:bc:fa:8c:dd:f3:11:1e:4b:91:cb:
                    78:e7:13:44:fe:6e:e8:91:4f:bc:92:44:00:a8:85:
                    dd:24:8f:cc:c1:fb:68:85:b2:34:6e:c8:71:61:71:
                    14:50:6b:90:e4:d6:70:ac:e9:a0:f5:07:9d:51:17:
                    5f:ce:ea:61:bf:ad:f5:0a:14:e1:ba:36:36:ea:8f:
                    41:d6:36:72:a5:9e:bb:25:d8:c9:50:76:86:fe:fc:
                    83:ad:e8:22:9b:40:f6:5e:f2:21:ae:f6:6a:6f:d7:
                    5b:31:18:36:be:91:aa:dd:4d:e0:dd:23:b5:a2:47:
                    d0:89:20:a8:a8:99:57:ee:c5:01:c1:9c:c4:bd:a1:
                    15:00:18:f7:fa:99:bc:82:07:82:30:f9:10:51:e6:
                    91:11:e6:ed:44:58:b5:17:87:a5:0b:1b:cc:51:17:
                    ac:8d:3a:4b:b1:8e:56:73:1c:ed:ca:e5:1a:0e:46:
                    13:09:0c:0d:eb:e6:38:41:30:a9:3b:bd:da:50:67:
                    c7:0b:25:0f:22:31:1e:cf:25:8a:89:a2:56:3f:34:
                    87:e0:97:87:14:ef:4d:06:83:ee:a4:6e:f6:a4:5e:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CD:7B:34:4D:05:73:23:B8:A0:3D:88:14:DB:66:54:A0:CD:17:96
            X509v3 Authority Key Identifier:
                keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/AA5485827F3611ECBED94963C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:aa:c8:2d:7e:d6:ce:e0:22:e1:d6:41:24:0b:84:a9:7c:75:
         12:6b:70:64:f8:17:be:47:59:8e:ec:63:20:64:b0:45:cb:43:
         77:04:c6:43:28:50:76:ba:1c:31:16:e4:63:2b:90:fb:b1:2d:
         af:68:1e:62:84:16:58:68:31:14:14:10:3c:ab:1a:c1:07:8a:
         47:5f:14:69:c4:1e:f4:8e:5c:99:e0:ea:e1:f3:f7:b6:24:1f:
         85:10:5a:6d:76:d9:26:81:56:e2:db:26:c8:1f:e4:8b:99:83:
         3b:43:52:eb:87:c4:56:81:55:f1:a4:93:a4:61:da:7c:7b:fe:
         fc:2e:a8:80:33:ec:67:52:39:2c:5f:71:c3:4f:c4:f7:bf:9f:
         e5:45:b8:8a:ba:3d:a7:b2:6e:c0:ec:41:81:5d:63:ba:a7:a4:
         2f:15:c7:c7:a2:09:b5:6b:5b:3f:ce:75:c7:ee:8a:4c:53:73:
         47:4d:64:96:89:bf:0b:d1:8b:34:c9:98:95:25:3b:31:2b:a6:
         8a:a5:9d:08:d5:12:3a:78:53:df:44:5d:16:86:8a:2e:68:63:
         60:56:48:83:ad:89:c7:5b:0d:2e:e3:4b:7d:b5:06:d5:29:91:
         26:bc:b9:3a:ba:16:0c:33:18:fc:19:01:00:b7:bc:1f:31:5b:
         64:71:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:34 2026 by rpki-client